Org card: tools, trainings and consultancy; add Arx

README.md

@@ -9,50 +9,91 @@ pinned: false
 
 <div align="center">
 
-<img src="https://huggingface.co/spaces/Devseis/Nox/resolve/main/devseis-logo.png" width="96" alt="Devseis logo" />
+<img src="https://huggingface.co/spaces/Devseis/Nox/resolve/main/devseis-logo.png" width="160" alt="Devseis" />
 
-# Devseis Consultancy SARL-S
+### Tools, training and advice for EU cyber, GDPR & AI Act compliance
 
-### Cybersecurity · Data Protection · AI Governance — Luxembourg 🇱🇺
+Devseis helps organisations in Luxembourg 🇱🇺 and across the EU check where they stand and close the gaps. Try our **free, open-source tools**: Arx audits a computer, Caveat sorts AI use cases into AI Act risk tiers, and Nox is a free AI assistant. Join a **hands-on course** on cybersecurity, GDPR or AI automation. Or bring us in for **GDPR, ISO 27001, AI Act and NIS2 consultancy**.
 
-[![Website](https://img.shields.io/badge/🌐_Website-devseis.com-004aae?style=for-the-badge)](https://devseis.com)
-[![Email](https://img.shields.io/badge/✉️_Email-umer.wasim%40devseis.com-004aae?style=for-the-badge)](mailto:umer.wasim@devseis.com)
-[![LinkedIn](https://img.shields.io/badge/💼_LinkedIn-Follow_Devseis-004aae?style=for-the-badge)](https://www.linkedin.com/company/12603388)
-[![Try Nox](https://img.shields.io/badge/🤖_Try-Nox_AI_Assistant-ff914d?style=for-the-badge)](https://huggingface.co/spaces/Devseis/Nox)
+[![Devseis Hub](https://img.shields.io/badge/★_Devseis_Hub-all_tools_&_live_stats-ed2939?style=for-the-badge)](https://huggingface.co/spaces/Devseis/Hub)
+[![Website](https://img.shields.io/badge/Website-devseis.com-171717?style=for-the-badge)](https://devseis.com)
+[![LinkedIn](https://img.shields.io/badge/LinkedIn-Devseis-171717?style=for-the-badge)](https://www.linkedin.com/company/12603388)
+[![Contact](https://img.shields.io/badge/Contact-umer.wasim%40devseis.com-171717?style=for-the-badge)](mailto:umer.wasim@devseis.com)
 
 </div>
 
 ---
 
-Luxembourg-based cybersecurity, data protection and AI governance consultancy and accredited training provider, founded and directed by **Dr. Muhammad Umer Wasim (PhD)**, with a client network across the EU. We help SMEs, startups and technology companies **assess and reduce cyber risk** through phased missions — diagnostic → prioritised recommendations → costed action plan → follow-up — carried out on site and reported in plain language for management.
+### 🚀 Products
 
-## 🛡️ Services
-| | |
+| | Product | What it does | Runs on | Status |
+|:-:|---|---|---|---|
+| <img src="https://huggingface.co/spaces/Devseis/Arx/resolve/main/app/build/icon.png" width="40" alt="" /> | **[Arx](https://huggingface.co/spaces/Devseis/Arx)**<br><sub>Endpoint audit</sub> | Audits a computer in about a minute: **70 checks** mapped to ISO 27001, GDPR and the EU AI Act. A small fine-tuned AI writes the report on the device, and Arx can fix problems for you. Nothing is uploaded. | macOS · Linux · Windows (beta) | ![Live](https://img.shields.io/badge/LIVE-16a34a?style=flat-square) |
+| ⚖️ | **[Caveat](https://huggingface.co/spaces/Devseis/Caveat)**<br><sub>AI Act risk check</sub> | Describe an AI use case and two models place it in an EU AI Act risk tier, side by side. Includes a 14-lesson plain-language course on how AI classifiers work. | Browser | ![Experimental](https://img.shields.io/badge/EXPERIMENT-d97706?style=flat-square) |
+| <img src="https://huggingface.co/spaces/Devseis/Nox/resolve/main/icon-192.png" width="40" alt="" /> | **[Nox](https://huggingface.co/spaces/Devseis/Nox)**<br><sub>AI assistant</sub> | A free AI assistant: chat, questions about your documents, 5 languages including Luxembourgish, and an offline mode that runs in the browser. | Browser · installable app | ![Live](https://img.shields.io/badge/LIVE-16a34a?style=flat-square) |
+
+<sub>Caveat is an experiment, not a compliance tool, and nothing here is legal advice. Arx flags gaps; it is not a certification.</sub>
+
+### 🧠 Models
+
+| Model | Built for | Base · size | What it does |
+|---|---|---|---|
+| [endpoint-auditor-0.5b](https://huggingface.co/Devseis/endpoint-auditor-0.5b) | Arx | Qwen2.5 0.5B · LoRA | Writes Arx's findings and report summaries from audit evidence |
+| [-q0f16-MLC](https://huggingface.co/Devseis/endpoint-auditor-0.5b-q0f16-MLC) · [-q4f16_1-MLC](https://huggingface.co/Devseis/endpoint-auditor-0.5b-q4f16_1-MLC) · [-q4f32_1-MLC](https://huggingface.co/Devseis/endpoint-auditor-0.5b-q4f32_1-MLC) | Arx | WebLLM builds | The same model, compiled to run on the computer's graphics chip |
+| [devseis-ai-act-classifier-v6](https://huggingface.co/Devseis/devseis-ai-act-classifier-v6) | Caveat | LEGAL-BERT-SMALL · 36 MB | Sorts AI use cases into EU AI Act risk tiers, in the browser |
+| [eu-ai-act-classifier-experiment](https://huggingface.co/Devseis/eu-ai-act-classifier-experiment) | Caveat | DistilBERT | Versions 1–3 of the experiment, kept for the record |
+
+### 📊 Datasets
+
+| Dataset | Built for | What's inside |
+|---|---|---|
+| [endpoint-auditor-synthetic](https://huggingface.co/datasets/Devseis/endpoint-auditor-synthetic) | Arx | Synthetic audits and training examples (no real customer data) |
+| [endpoint-auditor-vulndb](https://huggingface.co/datasets/Devseis/endpoint-auditor-vulndb) | Arx | Signed offline vulnerability bundle from OSV, NVD and CISA KEV |
+| [endpoint-auditor-releases](https://huggingface.co/datasets/Devseis/endpoint-auditor-releases) | Arx | Arx installers for macOS, Windows and Linux, with checksums |
+| [devseis-ai-act-classifier-v6-data](https://huggingface.co/datasets/Devseis/devseis-ai-act-classifier-v6-data) | Caveat | 366 synthetic, law-grounded AI Act scenarios |
+| [eu-ai-act-risk-classification](https://huggingface.co/datasets/Devseis/eu-ai-act-risk-classification) | Reference | AI use cases mapped to Article 5 / Annex III risk tiers |
+| [nis2-dora-cra-applicability](https://huggingface.co/datasets/Devseis/nis2-dora-cra-applicability) | Reference | Which EU cyber regulation applies, by sector, entity and product |
+| [gdpr-ropa-dpia-templates](https://huggingface.co/datasets/Devseis/gdpr-ropa-dpia-templates) | Reference | Field and section templates for Article 30 RoPA and Article 35 DPIA |
+
+🗂️ Collection: **[EU AI Act & AI Governance Toolkit](https://huggingface.co/collections/Devseis/eu-ai-act-and-ai-governance-toolkit-curated-by-devseis-6aba57c0c9f48f5baf62d3be)**
+
+### 🎓 Trainings
+
+Taught by Devseis in Luxembourg, in English, for beginners.
+
+| Course | Where | Length |
+|---|---|---|
+| [Cybersecurity for Beginners using agentic AI and n8n Automation](https://www.dlh.lu/shop/cybersecurity-for-beginners-using-agentic-ai-and-n8n-automation-3200) | Digital Learning Hub | 4 days |
+| [Project Management for Beginners using AI and n8n Automation](https://www.dlh.lu/shop/project-management-for-beginners-using-ai-and-n8n-automation-3199) | Digital Learning Hub | 5 days |
+| [Digital Marketing for Beginners using AI and n8n Automation](https://www.dlh.lu/shop/digital-marketing-for-beginners-using-ai-and-n8n-automation-3234) | Digital Learning Hub | 3 days |
+| [GDPR for Beginners](https://www.lifelong-learning.lu/recherche/formation/en?keyword=devseis) | lifelong-learning.lu | On request |
+| [Digital Marketing for Beginners using AI and Automation](https://www.lifelong-learning.lu/recherche/formation/en?keyword=devseis) | lifelong-learning.lu | On request |
+
+Dates and prices: **[Digital Learning Hub](https://www.dlh.lu/shop?categ-9=true)** · **[lifelong-learning.lu](https://www.lifelong-learning.lu/recherche/formateur/en?keyword=devseis)**
+
+### 🛡️ Consultancy
+
+Devseis Consultancy is a Luxembourg cybersecurity, data protection and AI governance consultancy. Each service can be ordered on its own.
+
+| Area | What we do |
 |---|---|
-| **ISO/IEC 27001** | ISMS implementation & certification-readiness audits |
-| **GDPR** | CNPD-CARPA compliance, RoPA, DPIA |
-| **Regulatory readiness** | EU AI Act · NIS2 · DORA · Cyber Resilience Act |
-| **Risk assessment** | MONARC (asset-based) & EBIOS Risk Manager (scenario-based) |
-| **Technical audits** | Architecture, source-code, backup & configuration review, penetration testing (SaaS & AI systems) |
-## 🏆 Recognition
+| **GDPR** | Policy review, Records of Processing Activities, full audit to CNPD expectations, DPIA |
+| **ISO/IEC 27001** | Gap audit, ISMS implementation and certification readiness |
+| **EU AI Act** | AI system inventory, risk classification, gap analysis, AI governance framework |
+| **NIS2 · DORA · CRA** | Applicability check, gap analysis, incident-reporting and supply-chain readiness |
+| **Risk assessment** | MONARC, EBIOS Risk Manager, ISO 31000 |
+| **Technical audits** | Configuration and source-code review, penetration testing of SaaS and AI systems |
+
+**[Request a quote →](https://devseis.com/contact-us/)**
+
+### 🏆 Recognition
 
 ![Cyber4Growth](https://img.shields.io/badge/Cyber4Growth-Laureate_2021-2f9e5c?style=flat-square)
 ![STARtup Award](https://img.shields.io/badge/EU_Cybersecurity_STARtup_Award-Finalist_2021-c98a1f?style=flat-square)
 ![Fit 4 Start](https://img.shields.io/badge/Fit_4_Start-2022-004aae?style=flat-square)
 
-## 🧰 On this profile
-
-- **[🤖 Nox](https://huggingface.co/spaces/Devseis/Nox)** — a free, general-purpose AI assistant, running entirely on free-tier infrastructure.
-- **[⚖️ Caveat](https://huggingface.co/spaces/Devseis/Caveat)** — check an AI use case against the EU AI Act risk tiers with two live models side by side, see the honest results, follow the build story, and learn how AI classifiers work in a 14-lesson plain-language course. Experimental, not a compliance tool.
-- **[🧠 Devseis AI Act Classifier v6](https://huggingface.co/Devseis/devseis-ai-act-classifier-v6)** — Devseis's own EU AI Act risk-tier model, built on LEGAL-BERT-SMALL; runs in the browser (36 MB). Experimental, not legal advice.
-- **[🧪 Devseis AI Act Classifier v6 data](https://huggingface.co/datasets/Devseis/devseis-ai-act-classifier-v6-data)** — the 366 synthetic, law-grounded scenarios the v6 model was trained and tested on.
-- **[📊 EU AI Act Risk Classification](https://huggingface.co/datasets/Devseis/eu-ai-act-risk-classification)** — reference dataset mapping AI use-cases to Article/Annex III risk tiers.
-- **[📋 NIS2 / DORA / CRA Applicability](https://huggingface.co/datasets/Devseis/nis2-dora-cra-applicability)** — reference dataset for which EU cyber regulation applies, by sector/entity/product.
-- **[📝 GDPR RoPA & DPIA Templates](https://huggingface.co/datasets/Devseis/gdpr-ropa-dpia-templates)** — field/section templates for Article 30 RoPA and Article 35 DPIA.
-- **[🗂️ Collection](https://huggingface.co/collections/Devseis/eu-ai-act-and-ai-governance-toolkit-curated-by-devseis-6aba57c0c9f48f5baf62d3be)** — EU AI Act & AI Governance Toolkit, curated datasets and models.
-
 ---
 
 <div align="center">
-<sub>Devseis Consultancy SARL-S · RCS B241407 · Ettelbruck, Luxembourg</sub>
+<sub>Devseis Consultancy SARL-S · RCS B241407 · 39A Chemin du Camping, L-9022 Ettelbruck, Luxembourg</sub>
 </div>