·01

Thursday, 11 June 2026

Archive
33min total · 4Stories
01 / 04 · Law & Governance
8 min read

Brussels Turns AI Labelling From Slogan Into Pipeline Code

The first full draft of the EU's AI content-marking Code lands seven weeks before Article 50 bites, forcing DAX40 firms to retool every channel that ships pixels..

·01Primer

On 10 June 2026 the European Commission put out a near-final draft of the rulebook that tells anyone shipping AI-generated images, audio, video or text inside the EU how to mark it so a machine can tell it apart from human work. It is called the Code of Practice on marking and labelling of AI-generated content, and it spells out the practical detail behind Article 50 of the AI Act, the transparency clause that becomes binding on 2 August 2026. In plain terms: if your bank's chatbot writes an email, your carmaker's infotainment voice answers a driver, or your agency's tool generates a campaign visual, that output now has to carry a hidden tag that downstream platforms can read. The Code arrives a week after the EU's broader Technological Sovereignty Package, which bundles in a Cloud and AI Development Act. Marking is no longer optional polish.

·02What Happened

In a glass-walled press room above Rue de la Loi, Lucilla Sioli, director of the EU AI Office, walked reporters through a slide that did something unusual for a Brussels deck: it showed code. Not legal code, but a snippet of C2PA-style manifest data, the kind of cryptographic metadata that travels with a file from the moment a model spits it out. “The principle is simple,” she said, paraphrasing the room's mood more than reading from her notes. “If a machine made it, a machine has to be able to say so.” Behind her, a slide listed the four mandatory layers the Code now formalises: digitally signed provenance metadata, imperceptible watermarks robust to crops and re-encodes, generator-side fingerprinting and logging, and detection protocols that downstream platforms can call. That was the choreography of 10 June 2026. The substance had been building for half a year. The first draft, published just before Christmas 2025, ran shorter and softer; the March revision absorbed more than 500 stakeholder comments; this June text reads like an engineering brief. Signatories — the major model providers who voluntarily commit — will be listed publicly in July, mirroring the pattern set last summer when 24 firms put their names to the General-Purpose AI Code on a similar timeline. The Code does not stand alone. One week earlier, on 3 June, Executive Vice-President for Tech Sovereignty Henna Virkkunen rolled out the European Technological Sovereignty Package, a bundle that includes a Chips Act 2.0, an Open Source Strategy and the new Cloud and AI Development Act (CADA). “We live in a world where geopolitics and technology are inseparable,” Virkkunen told the CNBC camera scrum that followed. “It is time for Europe to be in control of its data, of its supply chains, and of its future.” CADA defines four sovereignty assurance levels for cloud and AI services, aims to triple EU data-centre capacity within five to seven years, and gives public bodies a single rulebook to procure against. Read together, the two files describe a Europe that wants both the substrate (sovereign infrastructure) and the surface (provenance-tagged output) under its own jurisdictional control. For enterprise teams the practical date is 2 August 2026. That is when Article 50 obligations kick in for providers of generative AI systems and for the deployers who push their output into the world. Compare it to the GDPR ramp: that regulation passed in April 2016 and applied in May 2018, giving firms 25 months of runway. Article 50 has effectively given marketing, comms and product teams 51 days from this Code's publication. “The runway,” as one Frankfurt CISO put it on a private channel, “is a taxiway.” Not by accident: the Commission wants the rulebook locked before the obligation lands, so signatories can claim a presumption of conformity rather than argue case by case.

·03Inside the Architecture

Strip away the legal preamble and the Code prescribes four interlocking layers. The first is digitally signed metadata, in practice the C2PA manifest format that Adobe, Microsoft, Google, Leica, Nikon and OpenAI have spent two years stitching into cameras, editors and model APIs. A signed manifest records who generated the asset, with what tool, when, and whether human edits were declared. It is tamper-evident: break the seal and downstream verifiers can tell. The second is imperceptible watermarking inside the pixels or audio waveform itself — Google DeepMind's SynthID is the reference implementation cited in stakeholder workshops — designed so that even a cropped fragment carries enough signal for detection. The third is fingerprinting and content logging on the generator side, an optional layer that lets a provider check whether a suspect file came from its model. The fourth is a detection and verification protocol that platforms, broadcasters and fact-checkers can query. This multi-layered choice is deliberate and contested. Article 50(2) of the AI Act demands marking be “effective, interoperable, robust and reliable” — four adjectives that, as an arXiv paper from researchers at TU Munich noted in March 2025, no single technique currently satisfies. Watermarks survive re-encoding but can be degraded; metadata is precise but strips out the moment a screenshot is taken; fingerprinting works well at scale but only if the original generator cooperates. The Code's answer is to stack them. The Computer & Communications Industry Association, the lobby that represents Google, Meta, Amazon and most of the big foundation-model players, has called the requirements “burdensome” and warned of “banner blindness” if every AI-touched pixel triggers a user-facing notice. The Information Technology Industry Council went further in a TechWonk post, arguing that prescriptive technical mandates risk freezing a still-evolving research field. The catch is what counts as a “deepfake”. The AI Act defines it as image, audio or video that resembles real persons, objects, places or events and would likely mislead a viewer into believing it is authentic. That sweeps in everything from a synthetic ad voiceover to a customer-service avatar to a re-aged car commercial. Deployers — not just model providers — must “clearly and distinguishably” disclose. For a DAX40 marketing team that means two layers of obligation: the agency using Midjourney or Runway has to ship machine-readable provenance, and the brand publishing the campaign has to add a human-readable label. For text on “matters of public interest,” publishers face a parallel disclosure rule, with carve-outs for content that has been substantively edited by a human under editorial responsibility. The historical analogy is GDPR, but the closer parallel is the U.S. Volcker Rule. Volcker, at adoption, ran to roughly 950 pages of preamble and rule text per major bank — a document so dense that compliance teams spent years mapping their trading books against it. The AI Act plus the marking Code is shaping up similarly: not by page count, but by the depth of plumbing changes it forces. Every generative pipeline that produces customer-facing output across an EU operation has to gain a provenance hook, a watermark insertion point, and a logged audit trail. Most do not have one today. And because CADA arrived in the same fortnight, the question of where those pipelines run also got harder. CADA's four assurance levels (from baseline self-attestation up to fully EU-controlled cloud) will shape procurement at every Bundesministerium and, through public-sector demand signals, at the regulated industries that sell into them.

Three Perspectives What this story means for different readers
01

For a DAX40 CIO the Code translates into a quarter of unglamorous integration work. Marketing stacks need C2PA manifest insertion at the point of asset export from agency tools — a non-trivial change because most agencies hand over final files via cloud buckets that strip metadata by default. Banks deploying chatbots for retail customers must ensure that AI-drafted messages on “matters of public interest” carry disclosures; the carve-out for human-reviewed text is the operational lever, and it will reshape how customer-service editors are staffed. Automotive infotainment is the most exposed corner: synthetic voice assistants and AI-curated audio briefings inside the car cabin fall squarely under Article 50. HR teams generating role descriptions, candidate outreach or training videos through generative tools must mark output and, increasingly, document the provenance to defend against discrimination claims. The August deadline turns a 2025 governance slide into a 2026 procurement requisition.

02

The marking Code is the operational sister to three other Brussels files. It plugs into the Digital Services Act, which already obliges very large online platforms to mitigate systemic risks from synthetic content; DSA enforcement now has a technical hook to verify. It overlaps with GDPR where biometric likenesses are involved — a synthetic voice clone of a real employee triggers both Article 50 and Article 9 special-category rules. And it sits inside the wider Technological Sovereignty Package, where CADA's four assurance levels will tier where regulated data can live. Member-state regulators — BNetzA in Germany, ARCEP-style bodies in France — are expected to coordinate via the AI Board. Enforcement will likely follow the DSA template: focused first on the largest providers, with fines of up to 3% of global turnover under the AI Act's penalty schedule.

03

A new layer of provenance plumbing is exactly the kind of compliance surface that European deep-tech investors have been waiting for. Munich-based Truepic, Berlin's Originstamp, the French outfit IMATAG and a clutch of CISPA spin-outs are already pitching watermark-insertion and detection APIs to brands that have no appetite to build them in-house. Expect a wave of seed and Series A rounds across H2 2026 around three thin slices: C2PA-as-a-service for marketing stacks, watermark-detection SDKs for platforms and broadcasters, and audit-grade logging tools that feed straight into a CISO's evidence binder. CADA's preference for EU-controlled infrastructure tilts the field further toward European challengers — a Bavarian provenance startup running on OVHcloud or IONOS suddenly looks easier to procure than a U.S. equivalent. Corporate venture arms at Bosch, Siemens and Allianz X are reportedly already circling.

Sources 9 references
  1. [1]Code of Practice on marking and labelling of AI-generated content
  2. [2]Commission publishes first draft of Code of Practice on marking and labelling
  3. [3]The EU AI Act's Transparency Rules: A Practical Guide to Article 50
  4. [4]Proposal for the Cloud and AI Development Act (CADA)
  5. [5]Strengthening Europe's tech sovereignty (European Commission)
  6. [6]What the EU's New AI Code of Practice Means for Labeling Deepfakes (TechPolicy.Press)
  7. [7]Tech's Expectations for the EU AI Act Transparency Code of Practice (ITIC)
  8. [8]Adoption of Watermarking for Generative AI Systems in Practice (arXiv)
  9. [9]Inside Europe's AI Strategy with EU AI Office Director Lucilla Sioli (CSIS)
02 / 04 · Markets & Distribution
8 min read

Oracle becomes the second front door to OpenAI

A procurement footnote on 10 June quietly turned every Oracle Fusion, NetSuite and Cerner customer into a one-click buyer of GPT-class models — and gave OpenAI its second hyperscale shortcut into the enterprise..

·01Primer

On 10 June 2026 OpenAI and Oracle published a short joint note: from the coming weeks, any Oracle customer can spend existing Oracle Cloud Universal Credits on OpenAI frontier models and the Codex coding agent through Oracle Cloud Infrastructure. No new vendor onboarding. No new SaaS contract. No fresh security review. For a Fusion ERP buyer in Wolfsburg or an Allianz finance team in Munich, the OpenAI API becomes a line item against a cloud commitment they already signed. It is the second time in the history of generative AI that a hyperscaler has welded OpenAI directly onto its enterprise distribution rails. The first time was Microsoft. This one matters because it lands on a different installed base: ERP, healthcare, and database. The procurement layer just became the AI distribution layer.

·02What Happened

The press release went up on openai.com at the end of the New York trading day, an unsigned company note dated 10 June 2026 and tagged Partnerships, 2026, Codex, API Platform. No event, no joint keynote, no shareholder call. Two paragraphs and a line of fine print: “Contact your Oracle sales representative for details, timing, and availability.” Inside Oracle Park in Redwood Shores, the news travelled the way enterprise software news usually does — through a Slack channel of field reps who had been pre-briefed days earlier and whose pipeline reviews had already been rewritten around the offering. The mechanism is mundane and that is the point. Oracle Cloud Universal Credits — known internally as UCM — are the prepaid currency of OCI: a pool of money committed up front, drawn down as customers consume Autonomous Database, compute, storage, MySQL HeatWave, or any other OCI service. From the coming weeks, eligible credits can also be drawn down against calls to OpenAI frontier models and Codex. The OpenAI post described the goal as letting enterprises “deploy AI through the procurement processes and governance frameworks they already trust” and “move from AI ambition to production impact.” There was no joint pricing schedule, no rev-share number, and no mention of which exact model tier — GPT-5.5, GPT-5.4, the open-weights gpt-oss family, or all of them — would be available at launch. The corporate context is what gives the footnote its weight. In July 2025 OpenAI signed what is now described as a $300 billion, five-year cloud agreement with Oracle, starting in 2027, to develop up to 4.5 gigawatts of additional Stargate capacity — capacity Oracle CEO Clay Magouyrk casually defended on CNBC last October with the phrase, “of course OpenAI can pay $60 billion per year.” In April 2026, Microsoft and OpenAI publicly renegotiated their relationship, ending the Azure exclusivity that had defined enterprise GenAI distribution since 2023; Microsoft kept a non-exclusive licence through 2032 and a capped revenue share, but lost the right to be the only hyperscaler reselling OpenAI's models. Oracle was the first to convert that change into a procurement product. AWS Bedrock followed within weeks. Google has so far stayed on Gemini. The pivot is this. The Microsoft–OpenAI relationship was built on capital and compute: Azure was where the models lived because Microsoft had paid for them to live there. The Oracle relationship has the same compute spine — Stargate, the 4.5 GW build, the contracted orders that pushed Oracle's remaining performance obligations past $523 billion this spring. But the 10 June announcement is not about compute. It is about the demand side: the millions of seats inside Oracle Fusion ERP, NetSuite, Cerner, JD Edwards and E-Business Suite that already have a buying relationship, a security review, a data-processing addendum, and a renewal date. OpenAI just rented that distribution channel. As one Oracle field engineer put it on LinkedIn within hours of the post: “Customers don't have to argue with procurement anymore. The argument is already won.”

·03The Distribution Logic

To understand why a clause about prepaid credits is the most consequential AI announcement of June, look at what failed to scale in 2024 and 2025. The bottleneck in enterprise GenAI adoption stopped being model quality eighteen months ago. GPT-4 was good enough for almost every realistic enterprise workload before the Microsoft–OpenAI exclusivity ended; GPT-5.5 is, by any honest read, well past it. The bottleneck became procurement: vendor risk reviews that take six to nine months at a German bank, data-processing addenda that have to be renegotiated when the data leaves an existing cloud region, an information-security questionnaire that demands answers about every sub-processor down the chain. Every one of those steps is a six-figure consulting line and a calendar quarter of delay. The historical comparison is Salesforce on AWS. From 2016 onwards, Salesforce ran the bulk of its public cloud workloads on AWS — but more importantly, AWS Marketplace let Salesforce ISVs draw down AWS Enterprise Discount Program commitments to buy adjacent software. EDP burn-down is the reason an unreasonable number of enterprise SaaS contracts get signed at year-end on the AWS Marketplace. It is plumbing, not strategy, and it generated tens of billions in ISV revenue that would otherwise have lived in a separate procurement queue. Office 365 did the same trick for Teams: an item already in the Microsoft enterprise agreement is an item you do not have to defend twice. The SAP–Microsoft alliance announced in 2024 tried to apply the same template to S/4HANA workloads on Azure. The 10 June announcement reaches further: it makes the frontier model itself a draw-down against an existing commitment, not a new SKU bolted on top. The numbers underneath are large in a way that has not registered with the equity market. Oracle's fiscal 2026 guidance — total revenue at least $67 billion, cloud infrastructure up over 70 percent, total cloud up over 40 percent — was already aggressive before the OpenAI integration was made part of the standard catalogue. The Fusion installed base alone runs into tens of thousands of enterprise customers, with DACH-region anchors including Volkswagen, BMW, Allianz, Siemens, Lufthansa and Deutsche Telekom on Fusion ERP or HCM, plus Bosch, Henkel and most of the German Mittelstand on a long tail of E-Business Suite and JD Edwards installations now being migrated to Fusion. Cerner, acquired by Oracle in 2022 for $28 billion, runs the electronic health records of roughly two-thirds of US hospitals and a growing number of European systems; the Codex part of the announcement matters here, because hospital IT teams have been quietly rewriting Cerner integration code for two years. The distribution effect compounds. An Oracle Universal Credit dollar that buys an OpenAI API call is a dollar of OCI gross revenue that did not need a separate sales motion — it converts a procurement department into a passive channel. For OpenAI, whose roughly $122 billion funding round earlier this year was justified in part by the need to push enterprise revenue past the consumer ChatGPT line, this is the cheapest enterprise customer acquisition channel available short of Microsoft. The contradiction is that Oracle has historically been the least loved hyperscaler in the developer community. By making OpenAI the front-door API on OCI, Oracle borrows OpenAI's brand to reach an audience Larry Ellison's company could never reach on its own merits — and OpenAI borrows Oracle's contracts to reach an audience its own sales team cannot scale to without burning ten years of margin.

Three Perspectives What this story means for different readers
01

For a DAX40 CIO running Oracle Fusion ERP, the 10 June note collapses a three-quarter procurement cycle into a budget reallocation. Volkswagen, BMW, Allianz, Siemens, Lufthansa and Deutsche Telekom all sit on multi-year Oracle Universal Credit commitments that already cleared legal, security and data-protection review; redirecting a slice of that commitment toward GPT-5.5 inference does not require a new vendor onboarding, a new DPA, or a new BaFin-relevant outsourcing notification under MaRisk AT 9. That is the actual moat. The practical near-term question for a DACH AI lead is not whether to use OpenAI on OCI but how to govern the shadow consumption that will appear by Q4: every Fusion business analyst who can write a SQL query can now write a Codex call against the same credit pool, with no separate cost centre and no separate audit trail. Expect the first internal policies on Oracle-routed OpenAI use to land in August enterprise architecture reviews.

02

Under the EU AI Act, the GPAI obligations that took full effect last August already require OpenAI to maintain technical documentation, training-data summaries and downstream integration disclosures for its frontier models, and to operate under the GPAI Code of Practice it signed in 2025. Routing those models through OCI does not transfer the GPAI obligation, but it does shift the data-processing chain: the deployer of record becomes whichever DACH entity holds the Oracle contract, and the sub-processor list now includes both Oracle and OpenAI. BaFin and BSI guidance on cloud concentration risk, already sceptical of single-hyperscaler dependencies, now has a second axis to worry about — model concentration on top of cloud concentration. The Data Act, in force since September 2025, makes the portability question sharper: an OpenAI workload that lives inside an OCI tenancy and consumes Universal Credits is technically portable, but the integration tax to move it to Azure or AWS rises with every Fusion-native connector built on top.

03

For application-layer AI startups selling into the Oracle estate, the announcement is a free distribution upgrade and a long-term margin threat in the same paragraph. Anything built as a thin wrapper around the OpenAI API just lost its differentiation against a Fusion-native equivalent that Oracle's field will happily quote. The startups that benefit are the ones with proprietary data, vertical workflows, or domain models — particularly in healthcare around Cerner, in supply chain around JD Edwards, and in financials around NetSuite, where the integration moat is real and the buyer is already an Oracle customer. The European angle is sharper: French and German foundation-model challengers — Mistral, Aleph Alpha, Silo, the surviving cohort of nyonic-style projects — now face a procurement reality where OpenAI is a budget-neutral choice for a Fusion buyer and they are not. Expect a renewed lobby push in Brussels for sovereign-model procurement preferences and for OCI-equivalent draw-down mechanisms on Bleu, S3NS and the upcoming GAIA-X-aligned sovereign cloud frameworks.

Sources 7 references
  1. [1]Access OpenAI models and Codex through your Oracle cloud commitment (OpenAI, 10 June 2026)
  2. [2]OpenAI and Oracle's $300B Stargate Deal: Building AI's National-Scale Infrastructure
  3. [3]OpenAI signs $300bn cloud deal with Oracle (Data Center Dynamics)
  4. [4]Oracle Introduces Multicloud Universal Credits (Oracle Newsroom)
  5. [5]Oracle appoints Clay Magouyrk and Mike Sicilia as co-CEOs (DCD)
  6. [6]EU AI Act GPAI Obligations at Nine Months
  7. [7]From Lock-In to Leverage: Multi-Cloud AI Procurement in 2026
03 / 04 · Enterprise & Architecture
8 min read

The Meeting Becomes the Record: a16z's Bet, Europe's Brake

a16z argues the new enterprise system of record is the meeting recording, not the wiki — a thesis that collides head-on with German co-determination, Article 88 GDPR and the EU AI Act's August 2026 high-risk regime..

·01Primer

On 10 June 2026 a16z general partner David Haber, writing under the firm's enterprise banner alongside Martin Casado's category, published “Everything is Recorded Now.” The argument: meeting recording has silently crossed from edge case to default inside AI-native companies, and the accumulated voice corpus — not the CRM, not the wiki — is becoming the enterprise system of record. The reason is operational. Agents onboarded onto a company's recorded meetings outperform those fed only documentation, because culture, edge cases and the unwritten rules live in conversation. For DACH leaders, the essay is less a forecast than a provocation. Germany's Betriebsverfassungsgesetz, Article 88 GDPR and the EU AI Act's 2 August 2026 high-risk obligations make a US-style default-on rollout legally and politically unworkable without a works-council agreement signed first.

·02What Happened

The essay opens with a line that has already been screenshotted into a hundred Slack channels: “You should probably assume that everything you say at work is getting recorded from here on out.” Haber, writing for a16z's enterprise practice, is not predicting the shift. He is describing one that, in his view, has already happened inside OpenAI, Shopify and the firm's own portfolio. “OpenAI now runs with essentially everything recorded, with agents standing in for senior leaders in meetings they can't attend,” he writes. The reference example is Granola, the bot-free meeting notetaker that closed a $125 million Series C in March 2026 at a $1.5 billion valuation, led by Index and Kleiner Perkins, on the back of roughly 250 percent quarter-over-quarter revenue growth. Haber calls it out by name: “Granola has better context on a16z's culture, our investments, and how we actually think than almost any other tool we use, because it's been in the room.” The historical reference is Bridgewater. Ray Dalio's policy of taping every meeting, in place since the late 1990s, was for two decades treated as the eccentric house style of a hedge fund obsessed with radical transparency. Dalio's own lawyers initially warned him he was manufacturing discoverable evidence. He bet the opposite way — that recordings would reduce the probability of misconduct and protect the firm in regulatory exchanges — and Bridgewater's unusually thin litigation record became one of the quieter pieces of evidence for the policy. Haber's claim is that what looked like a personality quirk turned out to be infrastructure. The closest analogue from the prior cycle is email becoming archived by default in the early 2000s after Enron and SOX: a behavioural default flipped, and twenty years of e-discovery jurisprudence followed. The narrative pivot is that this is no longer a productivity story; it is a data-moat story. Haber sketches a two-sided ledger. Bottom-up, an AI with full company context becomes a force multiplier for individual contributors who can finally see where the institution is leaking. Top-down, executives get a handle on alignment by sending their agent into the meetings they cannot personally attend. Both sides compound: every recorded meeting makes the model smarter, and the cumulative corpus becomes proprietary in a way a public LLM cannot replicate. “The system of record today is structured data: CRM entries, tickets, docs,” he writes. “But the highest-value context lives in conversation.” The market is responding. Granola is now positioned as an enterprise context layer, not a notetaker. Microsoft has finally pushed Recall out of preview into broader Copilot+ PC availability after two rounds of privacy delays and is integrating it with Purview for enterprise controls. Fireflies, Otter, Sembly and Plaud are each carving a sub-segment: sales calls, platform-native transcription, decision extraction, hardware capture. Glean is buying its way into the conversational layer from the search side. The category that a16z's investment memo from twelve months ago labelled “meeting tools” is being rewritten in real time into “voice-native system of record.”

·03The European Friction

The thesis breaks on contact with German labour law, and DACH CIOs need to be clear-eyed about why. Recording a work meeting in Germany is not a product-launch decision; it is a co-determination event. Section 87 (1) 6 of the Betriebsverfassungsgesetz gives the Betriebsrat a hard veto over the introduction of any technical device suitable for monitoring employee behaviour or performance. Federal Labour Court (BAG) rulings handed down through 2026 have read “suitable” expansively: a transcription tool does not have to be used for monitoring to trigger co-determination, it merely has to be capable of it. Zoom AI Companion, Teams Copilot, Granola, Fireflies and Otter all meet that bar by construction. The practical consequence is that a DAX40 CIO cannot enable meeting AI by toggling a tenant switch. The rollout requires a Konzernbetriebsvereinbarung negotiated with the central works council that specifies purpose limitation, access rights, retention windows and an explicit ban on performance evaluation use. Layered on top is Article 88 GDPR, which lets member states write their own employment-data rules. Germany's Section 26 BDSG and the Beschäftigtendatengesetz draft circulating in Berlin both require that employee data processing be “necessary” — a sharper test than legitimate interest. Storing every meeting on the off chance an agent might need the context is the opposite of necessity. Fines under Article 88 reach EUR 20 million or four percent of global turnover. From 2 August 2026, the EU AI Act adds a third layer. Annex III, Category 4 designates most workplace AI that scores, classifies or evaluates employees as high-risk, triggering conformity assessment, risk management, human oversight and registration in the EU database. Emotion recognition in the workplace is now categorically banned, which directly limits the “sentiment on the customer call” use case Haber celebrates. For meetings involving European customer data, the high-risk obligations bite again under the December 2027 omnibus timeline. The DAX40 precedent base is unambiguous. Volkswagen's central works council under Daniela Cavallo has spent two years extracting concessions on every AI rollout from Cariad through to HR analytics. Deutsche Telekom and SAP, currently building the Bund's sovereign AI stack for federal administration, have both signed framework AI-Betriebsvereinbarungen that explicitly carve out meeting transcription as a use case requiring its own subsidiary agreement. SAP's own union history — the 2018 fight over the introduction of SuccessFactors performance modules — is the template every German HR director will reach for. The contradiction with Haber's argument is sharp. He writes that “widespread recording simply happens, because it's too hard to stop, and the controls get retrofitted on top.” In Germany, that sequence is illegal. Controls come first or the rollout does not happen. The deeper question for DACH leaders is not whether to record but whether to concede the data moat to US-native competitors who can compound a voice corpus their European rivals are legally barred from building at the same speed. That is the strategic problem the Casado-Haber thesis hands to every German board this quarter, and it does not have a comfortable answer.

Three Perspectives What this story means for different readers
01

For a DAX40 CIO or CHRO, the operating question is not whether to deploy meeting AI but in what sequence. The wrong order — pilot first, negotiate later — invites a Betriebsrat injunction that freezes the entire Copilot or Granola rollout, as several Mittelstand firms learned in late 2025. The right order is a Konzernbetriebsvereinbarung that pre-authorises a narrow class of meetings (external sales, customer support) with explicit exclusion of HR, legal, works-council and one-to-one performance conversations. Retention should be capped, ideally at 90 days for raw audio and 12 months for structured summaries, with deletion auditable. Architecturally, the choice between Microsoft Recall, Granola, a Glean-style overlay or a sovereign German vendor like Vinia or AlphaIQ now carries data-residency consequences that did not exist eighteen months ago. The CIOs who win this cycle will treat the meeting corpus as a regulated data asset on the balance sheet, not a productivity feature in the Microsoft 365 SKU.

02

Three regimes apply in parallel and none of them defers to the others. GDPR Article 88 plus Section 26 BDSG demand necessity and proportionality for any employee-data processing, with a Datenschutz-Folgenabschätzung required before deployment. The Betriebsverfassungsgesetz Section 87 (1) 6 grants the works council a genuine veto, not a consultation right, over any system capable of behavioural monitoring — and 2026 BAG case law confirms transcription tools qualify. The EU AI Act, fully effective for high-risk employment use cases from 2 August 2026, adds conformity assessment, fundamental-rights impact assessment under Article 27, human oversight obligations and outright prohibition of workplace emotion recognition. The IAPP's June 2026 mapping note flags the interplay risk: GDPR compliance does not satisfy the AI Act and vice versa. For DACH legal teams, the practical artefact is a four-document stack: DPIA, FRIA, AVV with the vendor, and the works-council agreement. Without all four, deployment is exposed.

03

The investable category here is not the notetaker — that race is largely run, with Granola at $1.5 billion, Otter dominant in mid-market, Fireflies entrenched in sales-tech and Microsoft taking the platform play. The opening is the European compliance and sovereignty layer underneath. ASR providers with EU-hosted inference (Aleph Alpha's Pharia-1, Mistral, the French acquisition target Hume, Dresden-based Speechmatics rival Spitch) become strategically interesting because every German meeting-AI deployment now needs an on-prem or sovereign-cloud transcription option. Above that, a thin layer of Betriebsrat-aware policy and audit tooling — think of it as a Vanta for AI-Betriebsvereinbarungen — is the kind of vertical SaaS that European DPOs will pay for and that US-based meeting vendors will struggle to ship. Founders should also note Haber's observation about verbal versus written cultures: the European enterprise market skews written, which paradoxically lowers the moat for any single voice-corpus vendor and raises the value of integration into the document and ticket systems that already hold the institutional context.

Sources 10 references
  1. [1]Everything is Recorded Now — a16z (David Haber, 10 June 2026)
  2. [2]Granola raises $125M, hits $1.5B valuation — TechCrunch, March 2026
  3. [3]Microsoft Rolls Recall Out to General Public After Privacy Backlash — TechRepublic
  4. [4]Radical Transparency at Bridgewater Associates — Verified Investing
  5. [5]BAG 2026: Betriebsrat hat Mitbestimmung bei praktisch jeder KI — Skill-Sprinters
  6. [6]Teams Transkription Datenschutz: DSGVO, Betriebsrat & DSFA 2026 — Pexon
  7. [7]EU AI Act & Employee Monitoring: HR Compliance Guide 2026 — PeopleGrip
  8. [8]EU AI Act: Mapping the Interplays with the GDPR — IAPP
  9. [9]AI Employee Monitoring Germany: August 2026 GDPR & AI Act Guide — Compound Law
  10. [10]SAP and Deutsche Telekom Put Sovereign AI at the Center of German Public Administration — ERP Today
04 / 04 · Markets & FinOps
9 min read

Return on Tokens: The Q3 Reforecast That Will Reset DAX40 AI Budgets

Packy McCormick and Markie Wagner have given CFOs the FinOps vocabulary they were missing, and Q3 2026 reforecast season will be the first time agent spend is treated like cloud spend..

·01Primer

Tokenmaxxing is the AI-era practice of measuring progress by how many tokens an organisation consumes from frontier labs. Anthropic, OpenAI and their peers shifted enterprise contracts from per-seat subscriptions to consumption pricing in Q1 2026 and then encouraged customers to chase volume through internal leaderboards, badges and discounted commits. Spend went vertical. Return did not. Return on Tokens, or ROT, is the framework Markie Wagner and Packy McCormick introduced on 10 June 2026 to fix that: value of output minus cost of tokens, divided by cost of tokens, times one hundred. It is the same arithmetic a CFO applies to a new machine or a new hire. For DAX40 finance chiefs entering Q3 reforecast season, ROT supplies the vocabulary they have been quietly missing while signing nine-figure token commits.

·02What Happened

A month before publication, Packy McCormick walked into Soho Diner in Manhattan, ordered a milkshake, and sat down across from a founder he had been told about in hushed tones. Markie Wagner, the co-author of the 2023 Founders Fund essay Choose Good Quests, the ex-Waymo ML engineer and Thiel fellow, had gone quiet for two years. McCormick wanted to know why. She asked them to cut up a bowl of fruit, gave him her lore, and then said the line that became the spine of the essay. “She told me, before everyone else came to the same conclusion, that tokenmaxxing was bullshit,” McCormick wrote, “because behind closed doors, the Fortune 500 CEOs she works with were all saying some version of: We committed to all this token spend and I have no idea what we are getting out of it.” On 10 June 2026, Not Boring published the essay to 269,285 subscribers. Wagner used the platform to do two things at once: announce her stealth company Poetic, backed by Founders Fund, Kleiner Perkins, Genius Ventures and OpenAI with a $50M round at roughly $500M, and bury the metric the labs had been pushing on her customers. Her formula is deliberately CFO-shaped: ROT equals value of output minus cost of tokens, divided by cost of tokens, times one hundred. Two levers, value up or cost down. The essay then introduces a companion ratio, Thinking-Doing Ratio, currently sitting near 1000:1 in most AI deployments, which Wagner argues is upside down. The scene Wagner described in Soho Diner had already started leaking into the open. Uber CTO Mihir Sukthankar admitted the company burned through its entire 2026 Claude Code token budget by April, four months in. COO Andrew McDonald told staff Uber was “having trouble justifying the AI spend based on the actual return that one could actually measure.” Uber then capped employees at $1,500 per month for AI tools. Amazon shut down its internal AI leaderboard in May. Legora CTO Jacob Lauritzen told Harry Stebbings the leaderboards “lead to tokenmaxxing, which is people just burn tokens just to look good. That is a really stupid way to do anything.” Ramp's Veeral Patel called the entire regime the “Token Casino: useful software wrapped in mechanics that make spend feel like progress.” Palantir CEO Alex Karp compared tokenmaxxing to “a porn addiction.” Even Sam Altman conceded on CNBC that companies are “spending a ton of money on AI” without knowing when it shows up in revenue, calling it “a huge issue.” McCormick reaches for a historical comparison that lands hard for European industrial CFOs: every cycle has its dumb metric. In the mid-nineteenth century the market rewarded miles of railroad track laid, and roads were duplicated route by route. At the turn of the millennium it was eyeballs. In the 2010s it was top-line gross revenue, which is how WeWork happened. Each metric eventually got disciplined by a return-on-capital framework. Tokens are next. The closest analogue for DACH readers is the FinOps movement that took hold around AWS spend in 2015, when CFOs stopped trusting line-of-business engineers to right-size instances and started instrumenting cloud bills the way procurement instruments steel. ROT is FinOps for inference.

·03The FinOps Pivot

The plumbing is being built around the new vocabulary in real time, and a CFO who knows where to look can already assemble the toolchain. On 4 June 2026, six days before the Wagner essay, Ramp closed a $750M Series F at a $44B valuation, led by ICONIQ, GIC and Ontario Teachers' Pension Plan, with Goldman Sachs Alternatives, D.E. Shaw, Morgan Stanley Investment Management and Generation Investment Management joining. Ramp's pitch deck, according to TechCrunch's reporting, explicitly positions the platform to bring “the same visibility and control to token spending that it already provides for corporate cards, travel, and vendor payments.” CEO Eric Glyman has crossed $1B in annualised revenue and is free-cash-flow positive. Investors did not pay 44x ARR for an expense-card company; they paid it for a token-FinOps platform. The benchmarking layer is moving just as fast. Mercor CEO Brendan Foody told Harry Stebbings on 20VC that Mercor now “spends more on tokens for our internal agents than we are on employee head count,” and predicted that “in five years the average enterprise spends more on compute than headcount.” Mercor's APEX benchmark family scores frontier models on economically valuable professional-services tasks rather than abstract reasoning, and APEX-Agents extends that to long-horizon, cross-application work. APEX is becoming the equivalent of a TPC benchmark for agent workloads: the number a CFO can put next to a token line item to ask whether the model bought was the right model for the job. Gergely Orosz's Pragmatic Engineer Pulse, drawing on conversations with engineers at fifteen companies, reports that enterprise token spend has risen roughly 10x in six months with no sign of slowing, and that GitHub Copilot and Anthropic have begun rate-limiting unprofitable individual users to protect business accounts. The infrastructure for treating tokens as a managed cost category, the equivalent of compute units in a 2015 AWS bill, is now in place. The playbook Wagner sketches and Pragmatic Engineer's field reporting confirms has five concrete levers, and they are the levers that will dominate Q3 2026 reforecast conversations in Frankfurt, Munich and Walldorf. First, per-team caps modelled on Uber's $1,500-per-head ceiling, set against a measured baseline rather than a vendor commit. Second, default-model downgrades, the move Pragmatic Engineer documented at a large SaaS shop that quietly switched its internal IDE default from Claude Opus to Sonnet and saw bills drop without measurable quality loss. Third, multi-model routing, with frontier models reserved for the 20% of tasks Coinbase CEO Brian Armstrong flagged as “IQ-maxing” work and the remaining 80% sent to cheap open-source Chinese models via OpenRouter; the OpenRouter rankings already show this migration in lockstep with consumption pricing. Fourth, prompt-cost coaching, treating verbose chain-of-thought prompts the way procurement once treated unbatched API calls. Fifth, the abolition of internal token leaderboards, the Amazon move, which removes the perverse incentive structure that Veeral Patel calls the Token Casino. The counter-case is not weak. Ed Zitron has spent six months arguing on his Where's Your Ed At newsletter and on Bloomberg that AI “doesn't have ROI, it's nothing like AWS or Uber, and it's got no post-bubble recovery story.” His view: ROT is a polite framework that lets the bubble continue to inflate while the labs run negative 122% non-GAAP margins. Gary Marcus has made a similar argument from a more academic perch. Wagner's essay does not engage Zitron directly, but Poetic's go-to-market answers him by implication, claiming 100x less token usage and “nines of accuracy” at AIG, SoFi and Chime, with AIG CEO Peter Zaffino quoted as saying Poetic has “achieved 99%+ quality outcomes on multi-hour processes, delivering real enterprise value.” One subscriber comment on the Not Boring post sharpened the macro stake: if Wagner is right and tokens are spent only when the world changes rather than every time work happens, lab revenue tracks volatility rather than work volume. The hyperscalers, on that view, end up long volatility, starved in quiet years and fed in chaotic ones. That is a very different business from the one currently priced into Anthropic's reported $350B valuation talk and Microsoft's capex curve.

Three Perspectives What this story means for different readers
01

For DAX40 CIOs and CFOs, the ROT essay arrives exactly six weeks before Q3 reforecast packs are due. The political problem is that most German enterprises walked into Q1 2026 budget cycles with vendor-supplied token commits and no internal benchmark for value delivered. SAP's Sapphire 2026 keynote set the tone with a 50-assistant, 200-agent Joule Autonomous Enterprise pitch that customers signed against. The CIOs who built their FY26 plans on that pitch now need a defensible answer when supervisory boards ask what changed between the slide and the invoice. The five-lever playbook is the answer: instrument per-team caps, downgrade defaults to Sonnet-class or open-source equivalents, route via OpenRouter or an internal gateway, coach prompt cost, and kill the leaderboards that landed in pilot KPIs. The cleanest internal framing borrows from chemical-industry ROIC discipline: tokens are operating capital, and operating capital that does not clear its hurdle rate gets cut, even when the vendor relationship is strategic.

02

From a Frankfurt compliance seat, ROT lands on top of two converging disclosure regimes. The EU AI Act's GPAI obligations under Articles 53 and 55 become enforceable on 2 August 2026, with the AI Office empowered to fine up to 3% of global turnover or EUR 15M. While Article 53 targets model providers, the documentation chain it triggers flows downstream into deployer reporting, including compute and training-data summaries that will inevitably surface in vendor due diligence. Separately, KonTraG and the German Lieferkettengesetz already require management boards to identify material risks early, and unbudgeted nine-figure token overruns now qualify. For US-listed DAX40 cross-listings, SOX Section 302 and 404 controls extend to material AI cost variances. The practical implication: audit committees will want a documented ROT framework on file before the FY26 audit, not a forensic reconstruction after a Q4 cost-overrun disclosure.

03

The capital is already pricing in the FinOps category. Ramp's $44B mark, Mercor's APEX benchmark business, and now Wagner's Poetic, backed by Founders Fund, Kleiner Perkins, Genius Ventures and OpenAI at roughly $500M, form a coherent stack: cost visibility, benchmark scoring, and compiler-style code generation that replaces agent runtime. Wagner's pitch is that “agents should do the thinking, code should do the doing,” and that the right architecture for enterprise process work is AI-as-compiler producing deterministic code, not AI-as-runtime burning tokens forever. Expect a wave of European agent-ROI and token-governance startups out of Munich, Berlin and Zurich pitching the same thesis with EU AI Act compliance baked in. The hyperscaler-side risk is the one a Not Boring commenter flagged: if Poetic's model wins, lab revenue stops tracking work volume and starts tracking world change. Quiet quarters become structurally bad for OpenAI and Anthropic, which is not the curve currently underwriting their valuations.

Sources 10 references
  1. [1]Return on Tokens (ROT), Not Boring by Packy McCormick, 10 June 2026
  2. [2]Ramp raises $750M at $44B valuation, TechCrunch, 4 June 2026
  3. [3]The Pulse: token spend breaks budgets, Pragmatic Engineer
  4. [4]Mercor CEO on token spend exceeding salaries, 20VC with Harry Stebbings
  5. [5]AI Doesn't Have ROI, Ed Zitron, Where's Your Ed At
  6. [6]Tokenmaxxing is dead, Fortune, 28 May 2026
  7. [7]Choose Good Quests, Trae Stephens and Markie Wagner, Founders Fund, 2023
  8. [8]Poetic emerges from stealth with $50M from OpenAI, Silicon Republic
  9. [9]EU AI Act Article 53 GPAI Provider Obligations
  10. [10]SAP Sapphire 2026: SAP Unveils the Autonomous Enterprise
·02 Enterprise AI Moves 4 Items
01
Neura Robotics closes record $1.4B Series C with Bosch, Schaeffler, Nvidia, Amazon and EIB

On 10 June Metzingen-based Neura Robotics announced a Series C of up to $1.4 billion at a roughly $7 billion valuation, with Tether leading and Nvidia, Amazon, Qualcomm, Bosch, Schaeffler, the European Investment Bank, Lingotto Horizon, InterAlpen Partners and imec.xpand joining. Neura calls it the largest round ever for a full-stack robotics company; existing orderbook and deployment pipeline already exceed $1 billion. Capital funds the Neuraverse shared-intelligence platform, serial production toward multi-million units by 2030, and the Neura Gyms physical-AI training sites. For DAX40 industrials this hands Mercedes-Benz, VW, BMW and Siemens a sovereign humanoid option versus US (Figure, Apptronik) and Chinese vendors, with two Tier-1 suppliers and the EIB now actively backing the cap table.

02
SAP starts production rollout of Joule Studio 2.0 with Anthropic Claude as primary reasoning model

SAP confirmed that managed Joule Studio 2.0 began onboarding first production customers in June 2026, with general availability targeted for Q3 2026 and free design-time access for Early Adopter Care participants through year-end. Anthropic Claude is the primary reasoning model across the Autonomous Suite's 224 specialised agents and 51 Joule Assistants, with phased GA through end of 2026 and Autonomous HCM agents (Core HR, Payroll, Recruiting, Learning, Performance) generally available this month. For DAX40 SAP estates — effectively every large German group — this turns an architecture decision into a vendor lock-in moment: build agents in Joule Studio on Claude and BTP semantics, or maintain a parallel Copilot, Gemini or Mistral agent layer that no longer touches SAP's Knowledge Graph natively.

03
Siemens ships Intelligence Center X — Axiz reports 95% manual-effort reduction in first deployment

At Realize LIVE Americas in Detroit (3 June) Siemens launched Intelligence Center X, an industrial AI orchestration layer that stitches together the Mendix low-code platform, Graph Studio and the Rapidminer-derived AI Studio. The pitch: take industrial AI out of pilot purgatory by giving plant operators a governed substrate where data, models, workflows and AI agents share enterprise context with full auditability. South African distributor Axiz was named as the first enterprise globally to run Intelligence Center X as a full agentic system end-to-end, reporting a 95% reduction in manual effort and 100% data-ingestion accuracy on a pricing workflow. For BASF, Bayer, Henkel, Continental and the broader DAX/MDAX industrial base, this becomes the in-house counter-offer to a Microsoft Foundry or AWS Bedrock deployment — Siemens semantics, Siemens governance, Siemens accountability.

04
Deutsche Telekom expands German Industrial AI Cloud as anchor for sovereign DAX40 workloads

Deutsche Telekom this week confirmed continued expansion of its Munich Industrial AI Cloud, the joint build with Nvidia that went into operation in Q1 2026 and now houses more than one thousand DGX B200 systems and up to 10,000 Blackwell GPUs. Telekom's stated objective: a sovereign anchor that lets German firms train and run AI models on proprietary industrial data without leaving German jurisdiction, with capacity bookable directly by enterprise customers. For DAX40 buyers — particularly automotive, chemicals and defence-adjacent industrials — this is the operational answer when a BaFin or BSI memo flags single-hyperscaler concentration: a real alternative to Azure, AWS and Google Cloud that already runs Blackwell-class inference at scale in Bavaria.

·03 Papers & Essays 2 Items
01

Gergely Orosz & Jessica Salmon, "State of the software engineering job market in 2026, part 2" (The Pragmatic Engineer, 9 June 2026)

Using exclusive data from interviewing.io, Workforce.ai, SignalFire and TrueUp, the piece shows AI labs have overtaken Big Tech as the most desired employer (Anthropic alone draws 35% of coaching prep, vs 16% for OpenAI; combined they account for 51%). Intern intakes at large US tech firms have roughly halved since 2022, new-grad share fell from nearly 30% of engineering hires in 2023 to about 10% in 2025, frontend-only and native mobile titles are vanishing while Forward Deployed Engineer roles surge, AI engineering openings grew 60% YoY versus 7% for general SWE, and 2-year retention at Anthropic stands at 80% (FAANG: 67%). Why this matters: for DAX40 clients planning AI talent strategy, this re-prices the German market reality. The premium pool consultancies recruit from is being drained by US labs paying $300K+ base for senior AI engineers, and the entry-level pipeline that historically fed delivery teams is structurally shrinking — argues for FDE-shaped client engagement roles and a hard look at whether the graduate-hire pyramid still scales.

02

The VC Corner, "The Venture Capital Liquidity Crisis That Nobody Is Talking About" (10 June 2026)

Sober structural piece arguing the venture industry is in a multi-year liquidity doom loop: traditional exit doors have been welded shut, GPs raise new funds purely to stay alive while capital owed to LPs is trapped in paper-rich startups that may not see a payday for another decade. Paper wealth at record highs, distributions at multi-year lows. Why this matters: for corporate strategy heads at DAX40 firms, the piece is a useful counterweight to the AI-hype tape — it explains why later-stage AI rounds keep printing at record valuations even as cash distributions to European LPs (Allianz X, Bayern Kapital, KfW Capital, BPI France) have collapsed. Implication: expect more aggressive corporate acquisition windows in H2 2026 as starved AI scaleups accept industrial-strategic exits at discounts to last-round paper marks.

·05 Three Takeaways
01

The token-spend FinOps arc that began as a Ramp line-item on 6 June and graduated to CISO budget and board-level procurement now closes as a CFO framework: Wagner-McCormick's Return-on-Tokens, Uber's $1,500/month per-seat cap and Amazon killing its internal leaderboard set the template for Q3 reforecasts. CIOs should mandate a per-workflow ROT metric before the September close, pair every Fusion or Joule rollout with a hard token budget, and reclassify model spend from IT opex to a CFO-governed gross-margin line — otherwise the Oracle Universal Credits announced today will simply convert unused Oracle commit into unmonitored OpenAI burn.

02

Article 50 of the AI Act goes live on 2 August 2026 and today's Code of Practice from Lucilla Sioli's AI Office, combined with CADA's 4-tier sovereignty framework from 3 June, is now the operational artifact — multi-layered watermarking plus C2PA provenance on every synthetic asset. DAX40 communications, marketing and HR functions have roughly seven weeks to retrofit C2PA signing into their content pipelines, appoint a named Article 50 owner reporting to the board, and align procurement with the CADA tiers before Henna Virkkunen's office begins enforcement; the Omnibus VII deferral of Annex III to December 2027 explicitly does not buy time here.

03

The a16z 'Everything is Recorded Now' thesis — Granola at $1.5B, Bridgewater as precedent, meetings as the new system of record — collides head-on with §87(1)6 BetrVG, Article 88 GDPR and the AI Act high-risk regime, and it lands the same week CMA CGM put MAIA in front of 80,000 staff. Before any Granola-class transcription, Joule Studio 2.0 voice agent or Siemens Intelligence Center X rollout touches a German entity, CIOs need a signed works-council agreement, a documented Article 88 lawful basis and a high-risk classification decision on file — co-determination, not procurement, is now the gating path for the meeting-as-context layer.

·06 Archive 7 earlier drops →