Writing · Nº 041065 essays
The writing
Ideas from inside the work. Explore technology, entrepreneurship, and the practice of building things that last.
30 essays found · Page 2 of 3
Clear filtersStrategySSO Is Table Stakes for Enterprise, Not an UpsellCharging extra for SSO signals you do not understand enterprise buyers. Here is why single sign-on is table stakes for enterprise AI deals, not a premium add-on.OperatingDoes Self-Hosting Help or Hurt Compliance?Does self-hosting make compliance harder or easier? It shifts the burden onto you but gives you control auditors reward. Here is how the tradeoff really works.EngineeringSSH Hardening Checklist for a Production VPSA practical SSH hardening checklist for a self-hosted VPS: keys only, no root login, non-standard config, and the settings that actually stop brute-force attacks.StrategyThe Right-to-Audit Clause: How AI Vendors Handle ItEnterprise contracts include a right-to-audit clause. Here is what it means for an AI vendor, how to scope it, and how to satisfy buyers without opening your whole shop.EngineeringHow to Prevent Vote Buying in Token GovernanceVote buying quietly hollows out governance by turning votes into a market. Here is how bribery works in token voting and the designs that actually blunt it.StrategyHow Long an Enterprise Security Review Actually TakesHow long does an enterprise security review take for an AI vendor? Weeks to months. Here is what drives the timeline and how to cut it in half with preparation.ThesisTrust and Security to Demand From Legal AI SoftwareWhat a personal injury firm must demand before AI touches client files: data ownership, audit trails, escalation, and honest claims. A trust checklist for legal AI.StrategySIG vs CAIQ: The Security Questionnaires You Will FaceEnterprise buyers send AI vendors a SIG or a CAIQ security questionnaire. Here is what each one is, how they differ, and how to answer both without stalling the deal.OperatingHow to Answer an Enterprise Security Questionnaire for AIAn enterprise security questionnaire is a sales asset, not paperwork. Here is how to answer one for an AI product so the risk team says yes instead of stalling.EngineeringEncrypt Your Backups Before They Leave the ServerClient-side backup encryption is non-negotiable when you self-host. Encrypt before backups reach object storage so a bucket breach never exposes your data.StrategyDoes Your AI Startup Need SOC 2 to Sell to EnterpriseDoes your AI startup need SOC 2 to sell to enterprise? Yes to open the door, but it does not answer the AI-specific risk buyers actually care about. Here is the gap.StrategyHow to Pass a Security Questionnaire Before You Have SOC 2You can pass an enterprise security questionnaire before SOC 2 by documenting real compensating controls and answering honestly instead of leaving fields blank.