Tag

ZEROCK

Articles about "ZEROCK"

117 articles

117 articles (showing 12)

What Actually Changed in Version 1.2 of Japan's AI Business Operator Guidelines

Japan's AI Business Operator Guidelines moved to version 1.2. Read next to version 1.1, the update is less about new rules than about settling what words mean. Here are the seven agenda items behind the revision, and where the document sits relative to the AI Promotion Act and the AI Basic Plan, checked line by line against the primary sources.

2026-09-06Ryuta Hamamoto

ZEROCK

Is Sending Personal Data to an LLM API a Cross-Border Transfer? Reading Article 28 of Japan's APPI From the Text

If you put a prompt into an overseas LLM API, is that a cross-border provision under Article 28 of Japan's personal data protection act? The Commission's generative AI alert contains no reference to Article 28, to "a third party in a foreign country" or to cross-border transfers. Here is what the statute, Enforcement Rules 16, 17 and 18, the Guidelines and Q&A items Q7-53 and Q12-4 actually say.

2026-09-06Ryuta Hamamoto

ZEROCK

If You Pick Azure's Data Zone, How Much Actually Stays in Japan?

"We chose the Data Zone, so we are inside Japan" does not match what the official documentation actually says. Data at rest stays in the designated geography, but inference is described as "any Asia Pacific nation", which is not Japan. Here is what japaneast really offers, read from primary sources on 6 September 2026.

2026-09-06Ryuta Hamamoto

ZEROCK

Reading DS-920, Japan's Government Guideline for Procuring Generative AI

Japan's Digital Agency put DS-920 into force on September 1, 2026. Read all 64 pages and two things stand out. The government never uses the word "region" to pin down where data sits, and its procurement checklist treats being able to swap the model out later as a baseline requirement rather than a bonus. Here is what a private buyer can lift from it.

2026-09-06Ryuta Hamamoto

ZEROCK

Generative AI at Japanese Banks: What the Public Documents Say About Where Data Sits

When a Japanese financial institution runs generative AI, what do the public documents actually require about where the data sits? The FISC Security Guidelines themselves are a paid publication that outsiders cannot verify, so this piece uses only free sources: the FSA's AI Discussion Paper, FISC's own public reports, and the privacy regulator's Q&A. It separates knowing your data's location from confining it, and lists what belongs in the contract.

2026-09-06Ryuta Hamamoto

ZEROCK

Which Government Can Reach Your Data Abroad? Reading the CLOUD Act, China's Intelligence Law and GDPR Article 48

US law says disclose "regardless of whether" the data sits inside or outside the country. GDPR Article 48 says a foreign order is enforceable only through an international agreement. Japan's cabinet has stated that the "based on laws" exemption covers Japanese law only. Here is what the texts actually say, and where we stand.

2026-09-06Ryuta Hamamoto

ZEROCK

ISMAP Never Says "Keep the Data in Japan": I Searched All 45 Pages of the Control Standard

The service passed Japanese government procurement, so the data must be in Japan. Read the actual program documents and that inference falls apart. Across all 45 pages of the ISMAP control standard, the words for "Japan", "outside the country" and "cross-border" never appear once, and the clauses that touch location go no further than notifying customers which countries may hold their data and assessing the risk of foreign law reaching it. Here are the clause numbers.

2026-09-06Ryuta Hamamoto

ZEROCK

Japan's Medical Information System Safety Management Guidelines v7.0: what the text actually says about cloud and AI

Japan's Ministry of Health, Labour and Welfare has moved its Guidelines for the Safety Management of Medical Information Systems to version 7.0. A new volume for maintenance contractors, an explicit push toward cloud services, and a storage clause written around the reach of domestic law rather than geography. I also ran a full-text search across all 169 pages and found no mention of generative AI anywhere.

2026-09-06Ryuta Hamamoto

ZEROCK

Vertex AI in the Tokyo Region: Seven Models You Can Call, Eight That Are Processed in Japan

Seven Google models answer at the Tokyo endpoint (asia-northeast1). Eight entries are committed to ML processing inside Japan. Those two lists live on different pages, in different tables, and they do not match. Here is what the official documentation actually says about endpoints, context length and jurisdiction.

2026-09-06Ryuta Hamamoto

ZEROCK

Can You Actually Run an LLM Inside Japan? What the Providers' Own Docs Say

"Available in the Tokyo region" and "processed only in the Tokyo region" are two different claims. Read the official documentation from AWS, Microsoft and Google and a pattern shows up: the newer the model, the less likely it can stay inside Japan. Here is what the docs actually say, and which rules genuinely require domestic processing.

2026-09-05Ryuta Hamamoto

WARP

How FDE Differs from AI Accompaniment | They Are Different Jobs Once You Look at What Is Being Sold

MIT NANDA's research finds that against an estimated 30 to 40 billion dollars spent on generative AI, 95% of organisations have not seen a measurable return. Putting an engineer on the floor as an FDE, and the AI accompaniment Japan talks about a lot, look similar. Follow what is being sold, who owns the work, and whether anything is written back into the system, and they are different jobs.

2026-08-13Ryuta Hamamoto

ZEROCK

Why Cloudflare OS Is Open Source: Borrow the Design, or Run the Software?

On 5 August 2026 Cloudflare open-sourced the AI agent platform it had been running internally. Agents that start with zero access, Gatekeepers that hold credentials so agents never touch them, and an observation log of everything an agent reads. The design ideas are worth taking today. The claim that open source means freedom from vendor dependence deserves a closer look.

2026-08-13Ryuta Hamamoto