Workshops & Talks on Sovereign Digital Workplaces | Articles | Tobias Weiss

Workshops & Talks on Sovereign Digital Workplaces

Own your stack — and stay compliant. A sovereign digital workplace keeps your data, tooling and collaboration under your own control: self-hosted, open source, independent of hyperscalers. The talks explain why; the workshops turn it into practice for your team.

Dr. Tobias Weiss — computer scientist, researcher (VR/XR, AI) and conference speaker (incl. DELFI 2023). Trusted by teams that need compliance and sovereignty, not vendor lock-in.

All formats run on-site or remote, from a half-day session to a multi-day program, tailored to your stack and your risk profile.

Who this is for

HR & Compliance — meet the AI Act's AI-literacy duty (Art. 4) with auditable proof.
Product & Engineering — turn CRA security obligations into a process you can ship.
Public sector, universities & security-conscious teams — run your workplace yourself.

KI-Kompetenz-Training (AI Literacy)

The EU AI Act makes AI literacy a legal duty for everyone who uses AI tools (Art. 4, Reg. (EU) 2024/1689) — applicable since August 2026. A one-size-fits-all online course does not satisfy it: you must be able to prove competence. Breaches of the AI Act can trigger fines of up to €35 M or 7 % of global annual turnover.

Our KI-Kompetenz-Training delivers audit-ready, role-based AI literacy:

Before: unverified AI use, an audit gap, personal liability for managers. After: role-based, versioned, audit-ready evidence per employee.
For teams, HR, engineering and leadership
Modular learning paths per role and risk level
Versioned, audit-ready evidence per employee

→ Explore KI-Kompetenz-Training

Cyber Resilience Act Workshop

Product security is now law. The Cyber Resilience Act (CRA) makes security obligations mandatory for products with digital elements — conformity assessment, SBOM, vulnerability handling and coordinated disclosure. CRA duties phase in now and through 2027; breaches can mean fines of up to €15 M or 2.5 % of turnover (set nationally) and exclusion from public tenders.

This workshop maps CRA duties to your product reality:

Before: unclear obligations, last-minute scrambles. After: an operationalised vulnerability-reporting process your team actually runs.
What counts as a "product with digital elements"
Which conformity path applies
How to operationalise vulnerability reporting without drowning in process

Souveräner Arbeitsplatz (Sovereign Workplace)

A sovereign workplace that does not trade sovereignty for convenience: self-hosted collaboration built from openEduSuite (office suite), mailcow (mail) and the sovereign-cloud-stack pattern.

Before: locked into a SaaS, data leaving your perimeter. After: a workplace you run yourself, on your own hardware.
Self-hosted office + mail you control end to end
Sovereign-cloud-stack blueprint, documented and repeatable
Hands-on labs: from "we depend on a SaaS" to "we run it ourselves"
→ openEduSuite

Format & Booking

Combine any of the three tracks into a single program. Typical shapes (price on request, fixed packages):

Awareness half-day — 3–4 h, up to ~20 participants. Why sovereignty, what the regulation expects.
Hands-on day — 1 day, up to ~12. Stand up a sovereign tool, or run an AI-literacy sprint.
Multi-day track — 2–3 days. Assessment, training and auditable evidence.

→ Book a scoping call

Proof: talks & teaching

Beyond client work I publish and speak — recent highlights:

Conference talks and recordings: Presentations
Academic teaching and lecturing: Lehre (Teaching)
Interdisciplinary VR collaboration in higher education (DELFI 2023): research paper
Agentic AI hands-on workshop (IT4Science Days 2026): workshop materials & code

→ Book a scoping call