3
- 301 redirect
The server's response saying a page has permanently changed its address. The browser and Google go to the new address and transfer the old one's value to it.
Site migration and 301s
A
- Active Directory
The directory of users, groups and computers in a company's Windows network. An internal app can take sign-in and permissions from it.
Active Directory sign-in- AI Act
The EU Regulation 2024/1689 on artificial intelligence. It assigns obligations by risk level and by role: provider or deployer of AI.
The AI Act in a small business- API
The way programs talk to each other: one program sends a request in an agreed format, the other replies with data. APIs let you connect systems without retyping data by hand.
n8n, Make, Zapier or Python
B
- Brief
A short document in which the client describes the project's goal, audience, scope, content, budget and timeline.
Website brief with a template
C
- Chunk
A piece of a document, usually a few hundred words, into which texts are split before searching in RAG. Splitting along headings works best.
Preparing documents for AI- CLS
Cumulative Layout Shift: a measure of how much page elements move while loading. Good when it doesn't exceed 0.1.
Site speed (Core Web Vitals)- CMS
A content management system, for example WordPress: a panel where you change the text and photos on a site without programming.
What a website or app costs- Content-Security-Policy
A header that tells the browser where a page may load scripts, styles and images from. It blocks injected, foreign scripts from running.
Website security checklist- Core Web Vitals
Three Google metrics describing a page's speed and stability: LCP, INP and CLS.
Site speed (Core Web Vitals)
D
- Deepfake
A realistic image, video or recording generated or altered by AI that shows real people or events and could pass for genuine.
The AI Act in a small business- Digital signage
Information screens managed from one panel: content, schedules, urgent messages and alerts.
Office screens (digital signage)- DKIM
A digital signature the mail server adds to every email. The recipient checks it with the public key stored in the domain's DNS.
Email in spam: SPF, DKIM, DMARC- DMARC
A DNS record that tells recipients what to do with an email that fails SPF and DKIM, and where to send reports.
Email in spam: SPF, DKIM, DMARC
E
- Embedding (vector)
The meaning of a piece of text written down as numbers. It makes it possible to find passages with a similar meaning, even when they use different words.
AI on company documents (RAG)
F
- FUKO
A Polish feedback model: facts, feelings, consequences, expectations.
1:1 meetings with employees
H
- Hallucination
An AI answer that sounds plausible but is untrue or doesn't follow from the available data.
AI on company documents (RAG)- Hosting
A service that stores a website and makes it available on a server reachable from the internet.
What a website or app costs- HSTS
A header that tells the browser to always connect to the site over HTTPS, even when someone types the address with http.
Website security checklist- HTTPS
An encrypted connection between the browser and the site. It protects data from being read or swapped on the way.
Website security checklist
I
- INP
Interaction to Next Paint: how fast a page responds to clicks and taps. Good when it doesn't exceed 200 milliseconds.
Site speed (Core Web Vitals)
K
- Kiosk mode
A browser mode in which it shows one page full screen, without toolbars and without a way to close it.
Office screens (digital signage)- KSeF
Krajowy System e-Faktur, Poland's national e-invoicing system, through which structured invoices in XML format are issued and received.
KSeF and invoice automation
L
- Language model (LLM)
An AI program trained on a large amount of text that can write, summarise, answer questions and organise information. It can be wrong and make things up, so its output has to be checked.
AI on your server or in the cloud- LCP
Largest Contentful Paint: the time after which the largest element visible on screen appears. Good when it doesn't exceed 2.5 seconds.
Site speed (Core Web Vitals)- LDAP and LDAPS
The protocol an app uses to talk to the user directory: it looks up accounts and checks passwords. LDAPS is its encrypted version, usually on port 636.
Active Directory sign-in- Local model
A language model running on the company's own hardware rather than in a provider's cloud. The data doesn't have to leave the company.
Hardware for local AI
M
- Median
The middle value: half the results are lower, half higher. In time reports it resists single extreme cases, unlike the average.
Helpdesk report
N
- n8n
A tool for building automations from ready-made blocks that can run in the cloud or on your own server.
n8n, Make, Zapier or Python- No-show
An appointment the client didn't attend and didn't cancel. Reminders with a cancel link reduce such cases.
Appointment reminders by text
O
- OCR
Recognising text in images and scans so that a computer can search and process it.
AI on company documents (RAG)
P
- Privacy notice
The information required by Article 13 of the GDPR: who processes the data, why, on what basis, who receives it and how long it's kept.
Contact form and the GDPR- Process automation
Replacing repetitive, manual steps with a program that performs them by itself according to agreed rules. Decisions usually stay with people.
Where to start with automation
Q
- Quantisation
Storing a model's parameters with less precision, for example in 4 bits instead of 16. The model takes several times less memory with a small loss of quality.
Hardware for local AI
R
- RAG
Retrieval-Augmented Generation: the AI first searches for matching passages in documents and then answers based on them, citing the sources.
AI on company documents (RAG)- Ransomware
Malicious software that encrypts data and demands a ransom to unlock it. The best protection is a backup that can't be changed or deleted.
3-2-1 backups- Reverse proxy
A server that receives traffic from the network and passes it on to an app running behind it. It usually also handles HTTPS and the site address.
An app on a server without internet- RPO and RTO
RPO is the amount of data a company can afford to lose (for example one day). RTO is the time within which it must be back at work after a failure.
3-2-1 backups
S
- SPF
A DNS record listing the servers allowed to send email on behalf of a domain.
Email in spam: SPF, DKIM, DMARC- Static site
A site made of ready files, without a database or login panel on the server. Fast and harder to attack, but content changes require rebuilding it.
Website security checklist- System integration
Connecting the programs a company already uses so that they pass data to each other by themselves.
n8n, Make, Zapier or Python
T
- The 3-2-1 rule
Three copies of the data, on two different types of media, one of them off-site.
3-2-1 backups- Two-factor sign-in (2FA)
Signing in that requires a second confirmation besides the password, for example a code from an app. A stolen password alone isn't enough to take over the account.
Website security checklist
V
- VRAM
The graphics card's memory. It decides how large a language model can run locally and how fast it will be.
Hardware for local AI
W
- Webhook
A notification one system sends to another the moment something happens, for example “a new order has arrived”. Instead of asking every now and then whether anything changed, the system is told straight away.
n8n, Make, Zapier or Python- Wheel
A ready-to-install Python library package, a .whl file. It installs without compiling, also on a server without internet access.
An app on a server without internet