Insights
Lessons from building AI systems, enterprise software and cloud platforms for organisations in Malta and across the EU: where a person keeps the decision, how answers can be checked, and what the NIS2 Order, the AI Act and DORA expect of you.
For decision makers and engineers in Malta, each article with sources you can verify, from legislation.mt to the MFSA.
FeaturedPublic sector / AI engineering
The high-risk obligations were pushed back to December 2027, while the bans, AI literacy and the transparency rules are already in effect. Who supervises the Act in Malta, what changed in 2026, what a Government ministry, department or public entity must do as a deployer, and how to use the time that remains.
FromNine editorial team8 min read
Platforms / Architecture
Malta’s ministries, departments, public entities, regional authorities and local councils can receive structured e-invoices over Peppol, and from July 2030 the EU makes e-invoicing compulsory for trade between Member States. What an e-invoice is, how the network operates, what other EU markets require, and how to connect an ERP without manual rework.
FromNine editorial team9 min read
Architecture
Online shops, consumer banking, ticketing for passenger transport, e-books and a range of other consumer services have had to be accessible since 28 June 2025, the EU date of application; Malta transposed the rules in S.L. 627.03. This article covers the services caught, what a site or app has to do in practice, how Malta and other Member States enforce the rules, and how to bake accessibility into delivery instead of leaving it to a final audit.
FromNine editorial team11 min read
Architecture / Cloud
Malta’s NIS2 Order turns supplier security into a board-level duty for every organisation it covers. How the Order and the directive behind it reach the firms that build and operate your software, and what each side should be able to prove.
FromNine editorial team11 min read
Cloud / Architecture
For banks, insurers and investment services firms in Malta, DORA makes operational resilience a set of specific duties under the eye of the MFSA, and most of those duties travel to ICT suppliers by contract. What the regulation asks, what the first critical-provider designations changed, and what a supplier should have on file.
FromNine editorial team10 min read
AI agents / Public sector
Agents can prepare nearly anything a clerk or case officer does. The real design choice is which of those actions the agent may finish by itself and which wait for a person to approve them. A method for placing approval steps, and for relaxing them once the evidence supports it.
FromNine editorial team8 min read
AI engineering / Data
Getting an assistant to answer questions over your own files makes an impressive demonstration; getting people to trust it takes longer. Trust rests on five properties that can be designed in and checked continuously: access rights, traceable sources, currency, honest gaps and quality that is measured.
FromNine editorial team6 min read