GDPR, NIS2 and the AI Act from the perspective of outsourced processes: what the client should ask for in the contract and what the authority looks at.
