Tag
All topics →Everything tagged compliance.
32 stories, newest first.
Latest
Nine questions to ask before buying an AI product or API, why each matters, what a good answer looks like, and which document actually holds the binding answer. With a copy-paste questionnaire.
Read the article
The NIST AI RMF is voluntary, is not a checklist, and is being revised. What Govern, Map, Measure and Manage actually ask for, what the Generative AI Profile's 12 risks add, and a twelve-artefact minimum viable version for a SaaS company.
Colorado's AI Act was repealed and rewritten, and the big deployer obligations start 1 January 2027. What Texas, Illinois, NYC, Utah and California require today, from the statute text.
Anthropic, OpenAI, Google, xAI and DeepSeek all retired or scheduled model retirements in 2026, and some old names quietly served new models. Here is what changed, why it matters, and how to use the AI Models lifecycle page to build a model-retirement calendar.
Credits can pay for a startup's identity, edge and AI stack, but they expire in about a year and enterprise buyers ask security questions early. How to pick credits by what they protect, using Startup Offers by stage, category and program.
The 2026 Big Tech enforcement record in one place: four penalties worth about $14.1B, led by US states rather than Brussels, and dominated by children's safety. Here is what the Tech Fines tracker shows and how to follow it.
Picking an age verification vendor is the last decision, not the first. The duty you are actually under, the methods ladder, the one-bit record, and where the age claim lives in your identity model.
Zero data retention is not a setting, it is a contract term with a scope. The gap between what founders think ZDR covers and what it contractually covers is wide enough to fail an enterprise review.
ISO 42001 went from obscure standard to procurement line item in about eighteen months. It does not certify that your model is safe, and the certificate scope is where buyers consistently misread it.
Most founders think the EU AI Act is the model provider's problem. If your output is used in the EU, you carry obligations of your own, and the enforcement machinery went live in August 2026.
Three RFPs out, three decks back, cheapest bid wins, and six months later you are over budget. The problem is the selection process, not the firms.
An enterprise prospect just asked for your SOC 2. Here is what the report really is, Type I vs Type II, the ten policies auditors expect, and how Vanta and Drata changed the work.
Vanta, Drata, Sprinto, Secureframe, Scytale, Thoropass, Scrut, Hyperproof, Delve, and Comp AI compared by frameworks, integrations, auditor network, and best-fit company size.
Most engineers think about data storage and data processing as one technical problem. Regulators treat them as two very different things, and the gap between those views is where compliance violations quietly accumulate. Here is what the distinction actually means.
OWASP and NIST get mentioned in the same breath, but they answer different questions. One tells you what to fix in your code; the other tells you how to run a security program. Here is what each framework actually does and how to use them together.
A Comprehensive Analysis of the Delete Request and Opt-out Platform
Ten identity verification platforms compared on liveness, deepfake and injection defense, coverage and published pricing, plus specialist tools and use cases.
Age assurance vendors compared on independent certification, estimation accuracy and published pricing, plus the laws in force in September 2026.
Ten KYC platforms compared on verification, AML screening and verified pricing, plus a vendor-neutral framework for evaluating them.
One in five law firms isn't sure if they've been hacked. Don't be one of them. Learn the 5 cybersecurity risks that could shut down your practice and
Your data is constantly at risk, but who's required to tell you when it's compromised?
Navigate the complex landscape of cybersecurity compliance with comprehensive guide to regulatory frameworks.
Data breaches are on the rise, but so are customer expectations. Learn how to safeguard your business and build trust.
Data compliance is no longer a back-office task. Brands that build it into product, marketing, and culture win long-term customer trust.
Businesses need to gear up for the new reality and ensure they create a seamless user experience by adhering to privacy and compliances while delivering a
In the battle of the old vs. the new, it is evident that traditional identity and access management (IAM) solutions are gradually getting phased out by
The security of personal identity and other details is at increasing risk today, with hackers finding new ways to hack into websites.
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
Why we shipped a consumer-level audit trail at LoginRadius and what it changed for enterprise risk and compliance teams.
Shipping consent management at LoginRadius and what we learned about turning a regulation into a platform feature.
When CCPA hit in 2020, most enterprises were unprepared. Here is what LoginRadius shipped to make compliance a configuration, not a rebuild.
Deepak Gupta lays out the steps businesses need to take to avoid fines under GDPR and California's CCPA.
