CEO, FounderSheba
Nazir Hossain
Nazir Hossain is the CEO of FounderSheba Limited and an advisor to BrotCode. He reviews BrotCode's regulatory coverage for practical soundness: how EU rules like the GDPR, NIS2, and the AI Act actually land for the teams that have to implement them. He brings an operator's lens on governance, risk, and getting compliance done without stalling the business.
Articles reviewed by Nazir Hossain
CI/CD for Teams That Ship Weekly
The minimum viable deployment pipeline for a team of five: which CI/CD best practices pay off at weekly releases, and which ones are premature.
The EU AI Act: What Software Teams Need to Know
The EU AI Act's high-risk deadlines moved to December 2027 and August 2028. What already binds today, what shifted, and what to do about it now.
EU Compliance for Software Teams: GDPR, AI Act, NIS2, and Beyond
A practical overview of EU regulations that affect software development: what's required, key deadlines, and how to build compliance into your architecture.
Monorepo vs. Polyrepo for Small Teams
Monorepo vs polyrepo for teams under ten developers: when the question actually matters, what Nx, Turborepo, Lerna and Bazel are for, and when to skip it.
The EU Data Act: What It Means for Connected Products and IoT
The EU Data Act's access-by-design rule has applied since September 2026. What connected product makers owe users now, and what the installed base escapes.
AI Without the Cloud: On-Premise and Privacy-First AI for European Companies
Why European companies are choosing on-premise AI deployment. Data sovereignty, GDPR compliance, architecture options, and cost comparisons.
Kotlin Multiplatform vs Flutter: Why We're Watching KMP Closely
Kotlin Multiplatform shares logic and leaves the UI native. Flutter paints everything itself. An agency's honest read on which bet is worth making.
The European Accessibility Act: Website Compliance, Explained
The European Accessibility Act has been enforceable since June 2025. What the EAA requires, who it covers, and how to make your website compliant.
Third-Party Risk: How to Vet Software Vendors for EU Compliance
NIS2 and GDPR make you responsible for your vendors' security. A practical framework for assessing third-party risk in your software supply chain.
How to Conduct a Data Protection Impact Assessment (DPIA)
A practical guide to DPIAs under GDPR: when they're required, how to conduct one, and what to include. Template and real examples for software teams.
Data Residency in the EU: Where Should Your Software Store Data?
EU data residency for software teams: GDPR rules, cloud provider options, sovereignty trade-offs, and the practical architecture decisions that matter.
Security by Design: Building Software That Passes Compliance Audits
How to embed security into your development lifecycle so compliance audits become routine, not panic events. Architecture patterns, checklists, and real practices.
Need help building this?
We turn complex technical challenges into production-ready solutions. Let's talk about your project.