AI-assisted coding is transforming how we build software - from copilots to autonomous agents, developers ship faster than ever. But in enterprise environments governed by ISO 27001, SOC 2, and strict SDLC requirements, speed doesn't exempt you from compliance. If you didn't write the code, where do you safely run it?
This talk explores sandboxing strategies for AI-generated code: isolated environments that sit between your laptop and production, providing network isolation, ephemeral reproducibility, and audit trails. We'll also tackle the data problem - why empty sandboxes aren't enough, and how AI-generated mock data and copy-on-write production snapshots each solve different challenges.
Through real-world stories, we'll see why the "legacy user" can't be mocked, and what a proper AI-assisted development workflow looks like in a compliance-driven organization.
This talk has been presented at AI Coding Summit Berlin, check out the latest edition of this Tech Conference.



















