Collibra 已收购慕尼黑初创公司 trail ML，该公司主要利用智能体来确定哪些人工智能规则适用于某个系统、检查其控制措施是否有效，并阻止违反政策的智能体操作，交易金额未予披露。该市场的存在归功于《欧盟人工智能法案》（EU AI Act），该法案的执法权力已于 8 月 2 日正式生效，其前沿模型监管部门拥有 36 名员工。
Collibra has acquired trail ML, a Munich startup whose agents work out which AI rules apply to a system, check whether its controls work, and block agent actions that break policy, with no price disclosed. The market exists because of the EU AI Act, whose enforcement powers arrived on 2 August and whose frontier model unit has 36 staff.
Collibra 已收购了一家总部位于慕尼黑、专注于实现《欧盟人工智能法案》合规自动化的公司。这家买方企业创立于布鲁塞尔，并于 2015 年迁至纽约。欧洲制定了规则，从而催生了它所收购的这个市场。
Collibra has bought a Munich company that automates compliance with the EU AI Act. The buyer was founded in Brussels and moved to New York in 2015. Europe wrote the rules that made the market it is buying into.
Collibra 表示，trail ML 的智能体能够计算出哪些规则适用于某个人工智能系统，以及其控制措施是否正在发挥作用。该公司由安娜·施皮茨纳格尔（Anna Spitznagel）、尼古劳斯·平格（Nikolaus Pinger）和斯文·霍尔策尔（Sven Hoelzel）于 2023 年创立。交易金额未予披露。
trail ML’s agents work out which rules apply to an AI system and whether its controls are working, Collibra said. It was founded in 2023 by Anna Spitznagel, Nikolaus Pinger and Sven Hoelzel. No price was disclosed.
它实现自动化的框架包括《欧盟人工智能法案》、ISO 42001 标准以及美国国家标准与技术研究院（NIST）的风险框架。评估工作会在底层证据发生变化时重新运行，而不是每年进行一次。它还能阻止智能体采取行动，这是该产品更具挑战性的一半功能。
The frameworks it automates are the EU AI Act, the ISO 42001 standard and the American NIST risk framework. Assessments run again whenever the underlying evidence changes, rather than once a year. It also stops agents, which is the harder half of the product.
运行时层会在智能体采取违反政策的行动之前对其进行拦截，这一点至关重要，因为如今的安全事件往往始于智能体自主做事，而不是模型在回答问题。OpenAI 自己的智能体曾在 5 月对 Hugging Face 进行了探测，随后在 7 月实施了违反安全规定的入侵。
The runtime layer blocks an action that breaks policy before the agent takes it, which matters because incidents now start with agents doing things rather than models answering questions. OpenAI’s own agents probed Hugging Face in May before breaching it in July.
Collibra 表示其拥有 700 多家客户，其中包括 78 家财富 500 强企业。这笔针对慕尼黑公司的交易既未公布价格，也未透露客户数量。
Collibra says it has more than 700 customers, including 78 of the Fortune 500. No price was put on the Munich company, and no customer numbers either.
欧洲的执法权力已于 8 月 2 日正式生效。行使这些权力的部门拥有 36 名工作人员。
Europe’s enforcement powers arrived on 2 August. The unit wielding them has 36 people.
这些执法权力是切切实存在的。欧盟委员会可以要求进行评估、限制市场准入，并处以最高 1500 万欧元或全球营业额 3% 的罚款（以较高者为准）。
The powers themselves are real. The Commission can demand evaluations, restrict market access and fine up to EUR 15M or 3% of global turnover, whichever is larger.
正如一位律师在该执法权力生效时所言，美国的地址并不能让实验室逃脱监管机构的管辖范围，来自欧盟以外的服务提供商必须在欧盟境内指定一名代表。
An American address does not put a lab outside the regulator’s reach, one lawyer put it when the powers began, and providers from outside the bloc must appoint a representative inside it.
合规义务与实际检查之间的差距正是该市场赖以生存的土壤，而且这一差距正在不断拉大。
The distance between the obligation and the inspection is where this market sits, and it is widening.
自动合规之所以能卖得出去，是因为合规责任沉重，而监管检查却疏于执行，而且谁也不想知道欧盟委员会会先依据这两者中的哪一个采取行动。
Automated compliance sells because the duty is heavy and the checking is thin, and because nobody wants to find out which of those two facts the Commission acts on first.
Collibra 于 2015 年从布鲁塞尔迁往纽约，比如今影响其业务方向的法规出台早了十年，因此这次搬迁与法规无关。
Collibra left Brussels for New York in 2015, a decade before the law that now shapes what it sells, so the move had nothing to do with it.
该公司后来重返德国，以获取相关能力。Anthropic 在八月份以不同的方式得出了同样的结论：它选择在全球范围内统一 Claude 的输出内容，而不是为欧洲和其他地区分别运行不同版本。
It has gone back to Germany to buy the capability. Anthropic made the same calculation differently in August, marking Claude’s output worldwide rather than running one version for Europe and another for everywhere else.