Radar IA Industriel

The widely-repeated line that August 2026 is the high-risk deadline is out of date — Regulation (EU) 2026/1744 moved Annex III to 2 December 2027 — and acting on it produces the wrong plan in both directions: panic where there is runway, and complacency about Article 50, which really did start. Sort your systems by annex first, because Annex I and Annex III now sit twenty months apart and an embedded product system follows its sectoral legislation and its own notified-body route. Where you are uncertain whether a system is in scope, that is a question for qualified legal counsel, not for a vendor: we scope the product and evidence work once someone qualified has told you which duties apply.

The extension changes the date, not the engineering. Annex III evidence — risk management, data governance, logging, human oversight, accuracy and robustness — is built during development, not assembled afterwards, and for a physical system it lands against hardware lead times that are indifferent to a regulatory calendar. The useful move now is an inventory: which systems you actually field, which annex each falls under, and which of the required properties your current architecture cannot yet evidence. Classification and legal interpretation belong with qualified counsel; conformity assessment belongs with an authorised body. What we do is turn whichever duties apply to you into product requirements and an evidence plan your engineering organisation can actually execute.

Ollama democratized local LLM development; Ollama Enterprise extends that to organizations. For companies with strict data residency requirements — government, defense, regulated industries — this is the path to deploying AI assistants without any data leaving the building. The model quality is now good enough for most office productivity tasks. The main limitation is still hardware: you need capable GPUs to run frontier models locally, which adds capital cost.

This research validates what many practitioners have discovered empirically. The bottleneck in enterprise fine-tuning is rarely compute — it's high-quality labeled data. Synthetic data generation (prompt GPT-4/Claude to generate training examples, then filter by quality) dramatically reduces the data collection burden. This approach can take a team from 'we don't have enough training data' to running fine-tuning experiments within a couple of weeks.

Vertical AI is winning because generalist models, while impressive, don't deeply understand domain-specific terminology, workflows, and compliance requirements. A legal AI trained on case law and court documents outperforms GPT-4 on legal research tasks. A clinical AI trained on medical records outperforms general models on diagnosis support. The investment thesis: enterprises will pay premium prices for AI that genuinely understands their domain, and that requires specialized training data and fine-tuning that horizontal players won't invest in for every vertical.

Hallucination is still the primary trust barrier for enterprise AI adoption. What's new is that we now have reliable detection: you can run self-consistency checks (sample the same prompt 5-10 times and compare outputs) and citation verification (require citations and check if the source actually says what the model claims) to catch 80%+ of hallucinated facts before they reach users. These techniques add cost and latency but are essential for high-stakes applications.

The benchmark numbers are impressive, but the real story is the multimodal reasoning — GPT-5 can genuinely analyze complex diagrams, charts, and technical drawings in ways that earlier models couldn't. For industries like manufacturing, engineering, and life sciences where visual technical data is central, this opens new automation possibilities. I'd wait for API pricing before committing production workloads — OpenAI's pricing tends to drop significantly 3-6 months after initial release.

ISO 42001 is becoming a procurement differentiator. Enterprises are starting to require ISO 42001 certification from AI vendors in RFPs, especially in regulated industries. If you provide AI services to enterprise customers in Europe, certification is worth considering — it signals governance maturity and may become a customer requirement within 18 months. The certification process takes 6-12 months and requires documented AI governance processes, risk management, and monitoring procedures.

AI coding tools have become standard infrastructure for software teams. The productivity gains are real but the challenges are evolving: as AI writes more code, the bottleneck shifts from writing to reviewing. Teams that haven't adapted their code review process for AI-generated code are accumulating technical debt faster than before. The winning pattern: stricter test requirements for AI-generated code, automated review tools (AI reviewing AI), and explicit ownership assignment so every line of code has a human accountable for it.

MoE is why the economics of AI are improving faster than raw compute scaling. When only 15-30% of parameters activate per token, you get dense-model quality at sparse-model cost. For enterprises choosing between models, understanding whether a model is MoE vs. dense matters for infrastructure planning — MoE models have higher memory requirements but lower compute requirements than their parameter count suggests.

The most valuable finding: 41% of RAG failures happen at document ingestion, before retrieval even runs. This is the part that boring engineering solves — proper PDF parsing, handling tables and charts, OCR quality, metadata extraction. The AI community focuses obsessively on retrieval algorithms and models while underinvesting in the data pipeline. In my experience, fixing document ingestion improves RAG quality more than switching models.

Claude Opus 4.6 is the model I'd recommend for complex agentic workflows right now. The improvement in tool use reliability is the key differentiator — earlier models would occasionally hallucinate tool calls or fail to chain multi-step actions correctly. That's largely fixed here. For RAG and document analysis, the 200K context window lets you throw entire reports at it without chunking. The pricing is premium, but for enterprise use cases where accuracy matters more than cost, it's the right choice.

The right to erasure applied to training data is the thorniest GDPR and AI issue. If an individual exercises their GDPR erasure right and their data was used to train your model, you may need to retrain without that data — which is often impractical. The EDPB's position: you don't necessarily need to retrain if you can demonstrate the individual's data doesn't materially affect model outputs. This is technically complex to prove. If you're training models on EU personal data, build your data pipeline with erasure capabilities from the start, not as an afterthought.

LangGraph has matured into the production-grade choice for complex, stateful agent workflows. The checkpointing feature is critical — if an agent fails mid-task, it can resume from the last checkpoint rather than starting over. This makes long-running agents (30+ tool calls) viable in production for the first time. The visual debugger is genuinely useful for diagnosing why an agent chose a particular path through the graph.

Basic RAG — embed query, retrieve top-k, generate — is table stakes now. The differentiator is what you do when retrieval fails or when the question requires connecting information across multiple documents. CRAG is the most immediately practical: it catches the case where your vector search returns irrelevant results and falls back gracefully. Graph RAG is powerful for structured knowledge domains (legal, compliance, technical documentation) but complex to implement. Agentic RAG is the highest quality but adds 3-5x latency from the reasoning loop.

We've moved from 'can AI understand images?' to 'AI handles all media types at production quality'. The enterprise implications are significant: document processing now includes diagrams and charts, customer service includes image-based troubleshooting, and compliance monitoring extends to video. The companies winning here are those who built flexible AI platforms — they add multimodal capabilities without rebuilding their entire AI stack.

The talent gap is reshaping AI strategy. Companies waiting to hire 'perfect' AI teams will wait forever — they don't exist in sufficient quantity. The winning approach is a hybrid: a small core AI team (3-5 people) with deep technical skills, combined with AI tooling that allows business units to build and iterate without ML expertise. The tools have matured enough that a product manager with AI literacy can build useful AI features without a dedicated data scientist.

49% on SWE-bench is remarkable — but it means 51% failure rate on production software tasks. Agents are powerful for well-defined, constrained tasks: code review, test generation, documentation, data transformation. They're not yet reliable for open-ended software development without human checkpoints. The right deployment pattern: human approves the plan, agent executes, human reviews the output. Fully autonomous for reversible tasks; human-in-the-loop for irreversible ones.

The GPAI provisions affect anyone building on foundation models — which is most enterprise AI teams today. The key obligation for deployers: if you use GPT-4, Claude, or Mistral as the foundation for a high-risk AI application, you must conduct your own conformity assessment. The model provider's compliance does not automatically transfer to your application. Legal counsel is essential here — the chain of responsibility between provider and deployer is still being interpreted.

The democratization of reasoning capabilities is accelerating faster than I expected. 12 months ago, o1-level reasoning was exclusive to OpenAI. Today, you can run equivalent reasoning capability on a single A100 GPU using open-weight models. For enterprises that need on-premise deployment — defense, healthcare, regulated industries — this is the development that makes complex AI tasks viable without cloud dependency.

DSPy is the most interesting development in the LLM tooling ecosystem this quarter. The idea: instead of hand-writing prompts, you define what you want (a signature), define a metric, provide examples, and let DSPy optimize the prompt automatically. It's the difference between gradient descent and hand-tuning neural network weights. The results are often better than expert-crafted prompts, especially for multi-step pipelines. The learning curve is real, but for teams doing serious prompt optimization work, it's worth it.

MLflow is addressing the operational gap that's been holding back enterprise LLM adoption: how do you track, version, evaluate, and deploy prompts and LLM pipelines with the same rigor as traditional ML models? MLflow 3.0 brings the experiment tracking discipline that data scientists already understand to the LLM world. The LLM-as-judge evaluation is particularly valuable — it lets you evaluate thousands of outputs automatically using a stronger model as the judge, without manual annotation.

The fine-tuning landscape has matured significantly. RLHF with a separate reward model is still theoretically optimal but operationally complex — you're training two models. DPO is now the default for most fine-tuning work: simpler, more stable, and achieves 90-95% of RLHF performance. GRPO is worth considering if you specifically need to improve reasoning performance on structured tasks. For teams starting fine-tuning work, I'd recommend DPO as the starting point.

The productivity measurement problem is real. When AI helps a junior analyst produce work that previously required a senior analyst, the 'time saved' framing misses the scope expansion. The analyst didn't just do the same work faster — they did work they previously couldn't do. This is the argument for measuring AI ROI in revenue and quality terms, not just cost reduction. The companies that measure AI ROI comprehensively invest more confidently and achieve better outcomes.

This matters for European companies who need data sovereignty. Until now, the 'use the best model' and 'keep data in Europe' goals conflicted. Mistral Large 2 closes that gap. For regulated industries — banking, healthcare, government — this changes the calculus. You can now get GPT-4-class performance while keeping every byte of data under EU jurisdiction.

Llama 4 is a watershed moment. The MoE architecture means the active parameter count is much smaller than the total — Maverick runs at 17B active parameters but draws on 400B total parameters, giving you GPT-4o-level quality at Mistral 7B-level inference cost. For enterprises with serious data privacy requirements, running Llama 4 on your own infrastructure is now genuinely viable for most tasks. The catch: you still need the hardware, and self-hosting at scale is an engineering challenge most companies underestimate.

The shift from experiment to mandate is complete at the Fortune 500 level. When 78% of boards have a formal AI strategy, this is no longer a technology decision — it's a governance decision. The companies that still treat AI as an IT initiative (rather than a CEO and board priority) are falling behind structurally. The Chief AI Officer role, which barely existed 3 years ago, is now standard in large enterprises.

Speculative decoding is one of those rare improvements: free performance. You get 2-4x faster inference with zero quality tradeoff if the draft model is well-chosen. For latency-sensitive applications — real-time chat, voice assistants, interactive tools — this is significant. If you're self-hosting open-weight models and haven't implemented speculative decoding, you're leaving significant performance on the table.

The NIST AI RMF has become the reference framework for US enterprises, particularly those with federal contracts or government customers. The 2.0 update's generative AI extensions are pragmatic — they translate abstract risk principles into concrete controls for LLM-based systems. Even if you're not in a regulated industry, the NIST framework is a useful checklist for enterprise AI governance. It's vendor-neutral and process-focused rather than technology-prescriptive.

Constitutional AI is one of the most practical alignment techniques for enterprise AI governance. The idea: instead of handcrafting rules for every edge case, write a set of principles (a 'constitution') and train the model to evaluate its own outputs against those principles. For enterprises, this means your AI behaves according to your company values without hard-coding every scenario. Drafting an explicit AI constitution is becoming a practical part of enterprise governance frameworks.

o3 is a paradigm shift — not faster, but smarter. For enterprise use cases like legal analysis, financial modeling, or engineering design, the extra reasoning time is a worthwhile trade-off. My advice: don't default to o3 for everything. Use fast models for simple tasks, reasoning models for complex ones. The real innovation is knowing when to use which.

Edge AI changes the privacy calculus entirely. If you can run a 2B parameter model on a mobile device with no data leaving the device, GDPR compliance becomes trivial for that use case. In healthcare and financial services, edge deployment is worth evaluating for any AI feature that handles sensitive data. The quality is not yet equal to cloud models, but for structured tasks — classification, extraction, formatting — it's close enough for production.

The 90% cost reduction in 24 months is the most important economic trend in enterprise AI. Use cases that were NPV-negative 18 months ago at $30/1M tokens are highly profitable today at $3/1M. If your organization rejected an AI initiative on cost grounds in 2023 or 2024, it's worth revisiting. The curves suggest another 50-70% reduction in the next 18 months. Model the business case at current prices and at 50% of current prices.

Embedding quality is often the underrated variable in RAG systems. Switching from a basic embedding model to a top MTEB performer can improve retrieval recall by 15-25% without changing anything else in your pipeline. If you built your RAG system in 2024 with older embeddings, re-indexing with a 2026 model is often the highest-ROI improvement you can make.

vLLM is now the default infrastructure for enterprises self-hosting open-weight models. The PagedAttention algorithm eliminates GPU memory fragmentation — the single biggest performance bottleneck in naive implementations. Multi-LoRA serving is the killer feature for enterprises with many fine-tuned models: instead of running 10 separate inference servers, run one vLLM instance serving 100 LoRA adapters. This is the architecture for large-scale enterprise AI platforms.

2025 was the year of AI agent hype. 2026 is the year they actually work in production. The key difference? Guardrails. The frameworks that won aren't the most autonomous — they're the ones with the best human-in-the-loop patterns. If you're building AI agents, invest in evaluation and monitoring before you invest in capability. An agent that's 80% accurate but you can't monitor is worse than one that's 70% accurate with full observability.

A 1M context window fundamentally changes how you build certain applications. For legal tech, compliance, and code analysis, you can now pass entire document collections and ask cross-document questions without building a retrieval system. The cost is the catch — 1M tokens at Gemini pricing is $7-12 per query. For most applications, smart RAG still beats brute-force context stuffing on cost. But for one-off analysis tasks where accuracy matters more than cost, this is transformational.

The UK-EU regulatory divergence creates genuine complexity for companies operating in both markets. A UK-only approach: move faster, less documentation. An EU-facing approach: higher compliance bar but a single framework. A dual-market strategy: design to EU standards and you're compliant everywhere. My recommendation for most international companies: engineer to EU AI Act standards as your baseline. It's the highest bar, and compliance with it generally satisfies UK sector regulators as well.

Document processing quality is the silent killer of RAG applications. If your PDF parser strips tables, loses formatting, or misreads charts, your RAG system will hallucinate regardless of how good your retrieval algorithm is. LlamaParse's multimodal document parsing — treating pages as images and extracting content visually — is a step-change improvement for document-heavy applications. Worth evaluating before building a custom parser.

This is the theoretical foundation behind OpenAI's o-series and Anthropic's extended thinking. The implication is practical: for hard problems, you should let the model think longer. The optimal stopping point is task-dependent — math and code benefit from extended reasoning much more than simple classification. Budget reasoning tokens explicitly in your API calls rather than leaving it unconstrained.

The money is flowing, but the execution gap is widening. 65% with stuck pilots tells you everything — the bottleneck isn't budget, it's production ML engineering. Companies hire data scientists but not MLOps engineers. They build great models that never leave the notebook. If you're in that 65%, the fix isn't more R&D spend — it's an engineer who's shipped AI to production before.

Mistral Large 3 is my default recommendation for European enterprises right now. The combination of strong multilingual performance, EU data residency options, and competitive pricing makes it the pragmatic choice for most use cases. The function calling improvements are particularly notable — this was an area where Mistral was behind Claude and GPT-4o in reliability. That gap has narrowed significantly.

pgvector with HNSW indexing has closed most of the performance gap with dedicated vector databases like Pinecone and Weaviate. For enterprises already running PostgreSQL, adding pgvector is now a serious option — you get vector search without adding another infrastructure component to manage. The tradeoff: Pinecone and Weaviate are still faster at very large scale (>100M vectors) and have richer filtering capabilities. For 80% of use cases, pgvector is sufficient and dramatically simpler to operate.

Finally. The biggest risk with RAG systems isn't bad retrieval — it's confidently wrong answers. These evaluation frameworks let you catch hallucinations before users do. If you're running RAG in production, integrate automated eval into your CI/CD pipeline. Test every prompt template change against a golden dataset. This is the RAG equivalent of unit testing — nobody does it until something breaks in production.

The €4.4T figure grabs headlines, but the 3x performance gap between leaders and laggards is the actionable insight. What separates leaders isn't the models they use — it's how fast they deploy, iterate, and scale. Leaders have faster experimentation cycles, better data infrastructure, and more AI-literate leadership teams. Technology is table stakes; execution is the differentiator.

This is a game-changer for data sovereignty. Running Llama 4 or Mistral Large 3 on-premise with Blackwell means you get cloud-class inference without cloud-class data risk. For European companies under GDPR and the AI Act, on-premise AI just became viable. The cost is high upfront but the TCO calculation works for companies processing sensitive data at volume. If you're spending over €50K/month on API calls, do the math on self-hosting.

Europe is finally building its AI ecosystem, not just consuming American models. The rise of compliance-focused AI startups (Credo AI, Holistic AI) is uniquely European — we're turning regulation into innovation. For enterprise buyers: this means more choice and more European options. For founders: vertical AI with built-in compliance is the European advantage.