Engineering quality, in public

Stack disclosure

Framework

Next.js 16 (App Router, RSC-first)

AI runtime

Mistral AI primary runtime · GLOBAL API endpoint configured (not a residency guarantee)

Hosting

OVH VPS (France) — 24 GB RAM, 12 vCPU, PM2 cluster

Locales

8 (en, fr, de, nl, el, ar, ja, zh)

Our own EU AI Act classifications

We use the same classifier an engagement would apply. Each AI-touching surface declared.

Self-classification under the EU AI Act. Article 50 transparency obligations apply from 2 August 2026. None of these systems is Annex III high-risk; none makes a decision producing legal or similarly significant effects on a person. (v2026-07-26)

• Hyperion Brain (site assistant)
  Answers visitor questions about the practice and its services.

  Risk class:

  Limited risk — Art. 50(1) transparency

  Provider:

  Mistral AI

  Affects:

  Site visitors who choose to open it

  Lawful basis:

  Art. 6(1)(f) legitimate interest in answering enquiries

  Retention:

  Conversation memory 30 days

  Controls:

  Identifies itself as an AI assistant before input is possible; no automated decision about the visitor.

• JARVIS Decision Navigator
  Routes a visitor's described product decision to the smallest fitting engagement, or to an honest no-fit result, and drafts a cited brief.

  Risk class:

  Limited risk — Art. 50(1) transparency

  Provider:

  Mistral AI

  Affects:

  Visitors who choose to start the Navigator from /start or an in-page call to action

  Lawful basis:

  Art. 6(1)(f) legitimate interest in qualifying enquiries

  Retention:

  Conversation memory 30 days

  Controls:

  Identified as an AI assistant before any input. It recommends; it does not decide, price or contract. Contact details and booking are a separate, consented step, and operational alerts carry bounded metadata only — never the visitor's free text.

• EU AI Act risk classifier
  Suggests a risk tier for a system the user describes.

  Risk class:

  Limited risk — regulatory information tool, Art. 50

  Provider:

  Mistral AI

  Affects:

  Users of the compliance tool

  Lawful basis:

  Art. 6(1)(b) performance of the requested service

  Retention:

  Register entries per the published retention schedule

  Controls:

  Labelled as indicative, not legal advice; a human decides.

• Use-case generator
  Drafts candidate AI use cases from a described context.

  Risk class:

  Minimal risk

  Provider:

  Mistral AI

  Affects:

  Users of the tool

  Lawful basis:

  Art. 6(1)(b) performance of the requested service

  Retention:

  Not stored beyond the session

  Controls:

  Output is a draft for human selection.

• Lead qualification and scoring
  Scores an inbound enquiry to prioritise a reply.

  Risk class:

  Minimal risk under the AI Act; GDPR PROFILING

  Provider:

  Mistral AI, plus public web/LinkedIn lookup

  Affects:

  People who submit an enquiry or gated-content form

  Lawful basis:

  Art. 6(1)(f) legitimate interest in prioritising enquiries; disclosed at collection

  Retention:

  Scores 90 days

  Controls:

  No automated decision with legal or similarly significant effect; a human decides whether and how to reply. Object at dpo@hyperion-consulting.io.

• Outbound prospect research and scoring
  Researches and tiers organisations for outbound contact.

  Risk class:

  Minimal risk under the AI Act; GDPR PROFILING (Art. 14 applies — data not obtained from the person)

  Provider:

  Mistral AI, plus public web/LinkedIn lookup

  Affects:

  Named individuals at prospect organisations, sourced indirectly

  Lawful basis:

  Art. 6(1)(f) legitimate interest in business development

  Retention:

  Per the published retention schedule

  Controls:

  Art. 14 notice on first contact; objection honoured immediately and the record suppressed.

• Proposal drafting
  Drafts a proposal outline from an enquiry.

  Risk class:

  Minimal risk

  Provider:

  Mistral AI

  Affects:

  People who requested a proposal

  Lawful basis:

  Art. 6(1)(b) pre-contractual steps

  Retention:

  With the enquiry record

  Controls:

  Never sent without human review.

• Automated article generation and publishing
  Researches, drafts, translates and publishes insight articles.

  Risk class:

  Limited risk — Art. 50(4) AI-generated content labelling

  Provider:

  Mistral AI (Codex CLI for English long-form)

  Affects:

  Readers of the published corpus

  Lawful basis:

  Art. 6(1)(f) legitimate interest in publishing

  Retention:

  Published indefinitely until retracted

  Controls:

  Every article carries an AI-disclosure label. The label asserts human review ONLY where a reviewer is recorded; otherwise it states the article was not individually reviewed. A claim gate blocks client/track-record assertions at the write boundary.