Hey everyone 👋 Question for those of you building AI chatbots for clients (or your own product): When you deploy a chatbot on a website, are you actually GDPR-compliant — or are you hoping nobody notices? I’m based in Austria, building AI automation solutions for European SMBs, and the #1 question I get asked isn’t “how smart is your bot?” — it’s: “Where is the data going? Who processes it? Do you have an AVV?” Most US-built chatbots fail this conversation immediately because: • No signed Data Processing Agreement (Art. 28 GDPR requirement) • Subprocessors (OpenAI, Pinecone, Vercel) not disclosed • No Datenschutzerklärung (privacy notice) in the local language • EU AI Act transparency requirements ignored (mandatory from August 2026) Curious — how are you handling this for European clients? Or are you avoiding the European market entirely because it feels too complicated? Happy to share what I’ve built (a 10-point GDPR transparency package) if anyone wants to dig in 🙌

Andrej Karpathy just shared his method for building LLM-powered knowledge bases using nothing but markdown files and Claude Code. In this video, I walk you through exactly how to set it up in about 5 minutes using Obsidian as a front end. I also show you two of my own wikis, one for YouTube transcripts and one for my personal second brain, and break down how this compares to traditional semantic search RAG. https://gist.github.com/karpathy/442a6bf555914893e9891c11519de94f https://ai-2027.com/