Writing · Nº 041065 essays
The writing
Ideas from inside the work. Explore technology, entrepreneurship, and the practice of building things that last.
21 essays found · Page 2 of 2
Clear filtersStrategyThe EU AI Act: What You Actually Have to DocumentThe EU AI Act turns governance into paperwork obligations. Here is what a high-risk AI system must document, and why most of it you should keep anyway.EngineeringWhat an Audit Trail for Automated Bookkeeping Must CaptureAn audit trail for automated bookkeeping has to capture source, decision, confidence, and every change. Here is exactly what to record and why it matters.EngineeringThe Myth That Public Data Is Free to ScrapePublic does not mean free to take. This breaks down the myth that any public web data is legal to scrape, and what actually determines your real risk.OperatingHow Long to Keep AI Audit Logs (and When to Delete)How long to keep AI audit logs: balancing defensibility, storage cost, and privacy risk. A retention policy that protects you instead of becoming a liability.StrategySIG vs CAIQ: The Security Questionnaires You Will FaceEnterprise buyers send AI vendors a SIG or a CAIQ security questionnaire. Here is what each one is, how they differ, and how to answer both without stalling the deal.StrategyCompliance Theater vs Real Governance in AICompliance theater looks like governance and protects no one. Here is how to tell real AI governance from the paperwork that only exists to pass an audit.EngineeringHealthcare Notification Emails Without Putting PHI in ThemHealthcare notification emails can trigger a HIPAA problem in one line of body copy. Here is how to notify patients without exposing protected health information.EngineeringFintech Transactional Email: What the Rules ExpectFintech transactional email carries money movements and legal disclosures. Here is what your app emails must include and log to survive an audit.ThesisWhy a SOC 2 Report Does Not Prove Your AI Is SafeSOC 2 proves you have controls, not that your AI behaves. Here is the trust myth that gets AI vendors in trouble and what buyers should actually ask for.