Covers the systems companies are obliged to get right: security, hosting, and where data physically sits.

Niels writes the reports where the answer has a legal consequence rather than a preference attached to it — endpoint security, cloud residency, and the compliance regimes that decide what a European company may and may not run. He came to research from infrastructure work, which is why his pages tend to lead with what breaks rather than with what a vendor promises.

Areas of focus

• Endpoint security
• Cloud residency
• NIS2 and DORA
• Infrastructure

How Niels works

Every page on this site passes through three people: one writes it, a second edits it, and a third checks the claims against the vendor's own documentation. Niels takes each of those roles across different pages, so no one person both writes and signs off the same guide. Which role falls to whom is fixed per page, so a page keeps the same names when it is rebuilt. Our editorial process sets out what each role checks.

Also on the team