Workspace

Since August 2, every chatbot on the EU market carries a legal duty to tell users it's AI, and AI-generated content needs a machine-readable mark. Fines go up to 15 million euros, and Croatia still has no named authority to supervise any of it.

Most of the confusion comes from one mix-up: the high-risk rules moved to 2027 and 2028, the transparency rules did not.

We wrote a guide on who counts as a provider or deployer, the four duties under Article 50, and what to ship this week versus what waits until the December 2 marking deadline.

Full post → workspace.hr/blog/eu-ai-act-transparency-obligations

WordPress runs over 40% of the web, and most of those sites ship with the same security holes: a nulled plugin, the default table prefix, PHP running freely in the uploads folder.

Our Roko breaks down every common attack vector and the exact commands to close each one, all tested on production.

Read the full guide → workspace.hr/blog/what-a-secure-wordpress-site-looks-like

At Google I/O 2026, the message was clear: your customers will stop visiting your website, AI agents will visit it for them.

Your site still matters, but its role has shifted from a place people browse to a source agents read on their behalf. Our Luka wrote a full breakdown of what this means and how to make your website agent-ready.

Full post → workspace.hr/blog/google-new-ai-powered-search

95% of AI pilots fail within 6 months. Not because of the technology, but because of a missing strategy.

We wrote a step-by-step guide for small businesses: how to map workflows, identify the right problems, run a focused pilot, and measure whether it worked.

Full post → workspace.hr/blog/ai-strategy-small-business

Two major npm attacks hit Axios and TanStack in 2026. One used stolen credentials, the other exploited GitHub Actions to push 84 malicious package versions in six minutes.

Toni from our team wrote a full breakdown of both attacks and the practical steps frontend developers should take now.

Full post → workspace.hr/blog/npm-supply-chain-attacks-2026

Every AI design tool we tested generates screens from scratch. Stitch, Pencil, Figma Make, Claude Design. They sit inside a project with 200+ components and build everything as if the design system does not exist.

The problem is not only the tools. Most design systems are not built in a way that gives AI anything structured to read.

Our Product Designer Ante wrote about what a proper foundation looks like, from token architecture to form components, and why it matters more now that AI tools are entering the design workflow.

Full post → workspace.hr/blog/how-to-build-a-proper-design-system

We designed and built a luxury yacht charter booking platform.

Destination search, yacht filtering, real-time pricing from major charter databases, curated itineraries, a guided booking wizard, and a travel blog for organic reach.

Workspace builds digital products for the charter industry. Message us to start yours.

Ask ChatGPT, Claude, Perplexity, or Gemini for a custom software team in Split. There's a good chance we show up in the answer. Here's why.

We built an 8-component AI discovery infrastructure on our own website. Structured data, markdown content negotiation, agent skills discovery, and five more layers that tell AI assistants who we are, what we do, and when not to recommend us.

Our Software Engineer Roko Ponjarac wrote a step-by-step guide covering what we did and how you can do the same for your website.

Full breakdown on the blog → workspace.hr/blog/ai-search-visibility

One partnership. Three brands. Five years of building together.

We started working with F Group in 2021, redesigning the websites for Fabrique and Terminal F. Two restaurant brands, two digital identities, one shared standard for quality.

Now we delivered the website for Mimi Italian Clubino & Ristorante, the newest addition to their hospitality portfolio, located on Žnjan beach in Split.

Mimi brings the spirit of Italy and a feeling of home. Warm, intimate, with attention to every detail. The website needed to carry the same energy before a guest ever steps inside.

See the full case study → workspace.hr/work/fgroup