In a nutshell: One quarter of German companies does not systematically control which AI development tools are deployed and how these tools process data.
One quarter of German companies has no control whatsoever over the inputs and outputs of their AI development tools — a significant risk given the increasingly critical importance of these systems in software development.
German companies are restructuring their tech stacks and are considered leaders across Europe in securing build pipelines in the software development process. However, this technical progress stands in stark contrast to a significant control deficit: approximately 25 percent of surveyed German companies lack any systematic monitoring or management of AI development tools with respect to their inputs and outputs.
For CTOs and development leaders, this situation represents a substantial governance and security risk. Without transparency regarding the AI tools used and their data flows, blind spots emerge in the control of code quality, security standards, and compliance requirements. Simultaneously, resource allocation cannot be tracked, which jeopardizes cost control and license management.
The solution lies in structured tool governance: inventorying all AI systems in use, documenting API connections and data flows, defining usage policies, and integrating them into existing security and audit processes. This is particularly necessary under regulatory frameworks such as the EU AI Act, in order to demonstrate that the deployment of these systems is controlled and traceable.
Source: borncity.com · Published 28 June 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.2.