XM Group — DORA on the books?
Public-web AI readiness signals for xm.com. Covers EU AI Act, GDPR, DORA & NIS2 language — Illustrative / dated public-web estimate, not a live rescore or certification.
Welcome — start here
Who should we scan?
Search a company name, or type a website. We add www. for you. You will confirm both before the audit runs.
This audit uses publicly available data only. Results may be published as a research article on AGICY Research.
How many employees use AI tools today?
XM Group
Qualitative public-web reading — Mixed public signals. Not a numeric score or certification.
Audit analysis and scores stay historical. Registry and company facts are refreshed on load.
GEMI Open Data was not queried. This target is marked outside Greece (for example Cyprus, US, or UK). Name overlap is not a Greek identifier.
HPE's $1.2 billion deal with AMD for Helios AI rack solutions signals a significant shift in the AI hardware landscape. This analysis explores how this development, alongside Cerebras's strategy in Finland, impacts the pursuit of European sovereign AI, data residency, and the growing demand for secure, high-performance compute.
As the AI landscape evolves, the demand for compute, energy, and robust infrastructure intensifies. This analysis explores the challenges and opportunities for Europe to build sovereign AI capabilities, focusing on the critical role of sustainable compute infrastructure and strategic partnerships to mitigate supply chain risks and ensure data sovereignty.
External Perimeter
Regulatory
EU Framework Compliance
Download a branded OG share card for LinkedIn, board decks, or compliance reports.
XM Group
Data governance signals detected. Gaps in AI-specific controls ahead of EU AI Act deadline.
Future Risks
AGICY reading of public rules · not legal advice
Given XM’s handling of EU client financial data, its expanding AI‑based surveillance and marketing tools, and the stringent operational resilience and data‑localisation requirements of DORA/NIS2, a sovereign AI infrastructure is essential to maintain regulatory compliance and protect client trust.
This paragraph is AGICY's commercial reading of public regulation. It is not a mandate from the company, a regulator, or legal counsel.
AGICY recommendations
Advisory AGICY copy · not the company's published roadmap · not a live re-scan
XM Group: ~€108.6K/year via AGICY Gateway
Modeled estimate vs Claude Sonnet 4.6 direct list ($3/$15 M) on raw volume. Gateway priced on post-SCE compressed tokens at ~€4.72/M blended (compressed upstream pass-through + €0.15/M platform fee). SRA intro €0.10/M in + out available separately. Not official reseller pricing. Route frontier models through the sovereign EU proxy and lock capacity with a Sovereign Resource Agreement.
Audit Methodology
Analysis generated via LLM-assisted correlation of public records.
Explore a Sovereign Resource Agreement
Dedicated AI compute with fixed-term pricing. Pre-construction reservation — not a DORA, NIS2, GDPR, or EU AI Act certification.
DISCLAIMER:This report is generated from an LLM reading of public web material plus AGICY's indicative scoring model. CYSTAT, data.gov.cy, and WHOIS are not queried unless a later pipeline actually calls them. All estimates, scores, and assessments are indicative only and should not be construed as legal, financial, or professional advice. Compliance scores reflect estimated posture based on public information and may differ from the company's actual compliance status. Revenue, employee counts, and financial figures are estimates derived from public sources and may be higher or lower than actual figures. AGICY makes no warranties regarding the accuracy, completeness, or timeliness of the information presented. This report does not constitute an official audit, certification, or endorsement. Named executives, competitor cards, and review themes are AI-compiled from public signals and may be outdated or incorrect — they are not statements from the company or its people. News headlines use the AGICY AI NEWS ingest on page view — not Google News RSS, not official IR, and not frozen at audit-creation time. Companies featured in these reports are analyzed using publicly available data only — no non-public, proprietary, or confidential information is accessed or disclosed. For verified compliance assessments, please consult qualified legal and compliance professionals. By using this tool, you acknowledge that results are for informational purposes only. Campus is pre-construction. © AGICY.AI — Sovereign Intelligence Division.
Top 3 AI Readiness Risks for Financial Services Companies
Our sovereign AI readiness audit identifies the critical compliance gaps that financial services organisations face under evolving European regulation. This free AI compliance assessment tool evaluates posture across four regulatory frameworks — and surfaces the top risks requiring immediate attention.
- Data Sovereignty & Cross-Border Transfers — GDPR Article 44 requires documented safeguards for AI workloads processed outside adequate jurisdictions. Shared cloud infrastructure may not satisfy regulator expectations for financial services data.
- ICT Risk Management Under DORA — The Digital Operational Resilience Act places direct board responsibility for AI infrastructure risk. Organisations with elevated public-web gaps may face remediation requirements before the next audit cycle.
- EU AI Act High-Risk Classification — Financial Services AI workloads are likely to qualify as high-risk under the EU AI Act, requiring model isolation, audit trails, and infrastructure that supports verifiable compliance.