6 min readPrivacy & Compliance
Five Questions To Ask An AI Vendor About Your Data
Vendor privacy pages are written to reassure. Five specific questions that produce answers you can act on, and what an evasive response tells you.
Read article →Topic
Compliance
22 articles tagged Compliance. For the wider topic, see Privacy & Compliance.
6 min readPrivacy & Compliance
What AI Detectors Can And Cannot Prove
Detection scores are being used to make decisions about people. What the tools actually measure, why they misfire on specific groups, and how to respond to an accusation.
Read article →6 min readPrivacy & Compliance
What AI Tools Log Even In Private Mode
Private mode rarely means nothing is recorded. The six categories of data most AI tools keep regardless, and which ones actually matter for confidential work.
Read article →6 min readPrivacy & Compliance
When You Actually Have To Disclose That You Used AI
Not every AI-assisted sentence needs a footnote. Where disclosure is genuinely required, where it is courtesy, and how to say it without undermining the work.
Read article →6 min readPrivacy & Compliance
AI Copyright in 2026 Moved From Training Data to Outputs
Courts have largely accepted that training is transformative. The live question is now what the model produces and who is liable for it, which reaches ordinary users.
Read article →6 min readPrivacy & Compliance
AI Vendors Are Adding Real-Time DLP: What Inference Hooks Actually Do
Providers began shipping enforcement points that inspect content before it reaches the model. Useful, and not the same thing as the text staying on your machine.
Read article →6 min readPrivacy & Compliance
Content Credentials Are Coming for Text: What Provenance Marking Means for Writing
The C2PA standard now covers text, and Article 50 requires machine-readable marking of synthetic content. What that actually means for the email you just rewrote.
Read article →6 min readPrivacy & Compliance
Two Regulators, One AI Tool: GDPR and the AI Act Now Apply Together
Data protection authorities and the AI Office now cover overlapping ground. What that means when you choose where your text gets processed.
Read article →6 min readPrivacy & Compliance
The EU AI Office Can Now Enforce: What Its Powers Actually Are
From 2 August 2026 the Commission can investigate general-purpose AI providers, demand model access, and fine them. What that means for the companies you buy AI from.
Read article →7 min readPrivacy & Compliance
US State AI Rules Are Now the Harder Compliance Problem
Colorado delayed, California finalized, Illinois took effect. A patchwork of state AI employment rules is now the practical constraint for US employers.
Read article →7 min readPrivacy & Compliance
AI Disclosure Obligations in 2026: What You Must Say and When
Article 50 transparency rules took effect on 2 August 2026. What legally requires disclosure, what does not, and how to write a policy you can actually apply.
Read article →8 min readPrivacy & Compliance
What Changes Under the EU AI Act on 2 August 2026
Transparency obligations, general-purpose AI enforcement, and the full penalty regime take effect. High-risk duties were deferred. What applies to an ordinary business using AI writing tools.
Read article →7 min readPrivacy & Compliance
The EU AI Act Digital Omnibus: What the Delay Actually Bought
High-risk obligations moved to December 2027 and August 2028. Why the deferral happened, what it changes, and why treating it as breathing room is the wrong reading.
Read article →7 min readPrivacy & Compliance
How to Audit an AI Vendor in 2026
Nine questions that produce contractual answers instead of marketing copy, and what each answer tells you about your actual exposure.
Read article →7 min readPrivacy & Compliance
How to Document Your AI Workflow for an Auditor
A one-page record that answers the questions an auditor, client, or regulator actually asks. What to write down, and why doing it now costs an hour instead of a week.
Read article →7 min readAI Models & News
Sovereign AI and Where Your Text Is Actually Processed
Data residency, jurisdictional control, and operational access are three different things. What sovereignty claims mean, and the configuration that settles all three.
Read article →6 min readAI Models & News
Chinese AI Models in 2026: What Professionals Should Actually Know
DeepSeek, Qwen, Kimi, GLM, MiniMax, and Hunyuan now define the open-weights frontier and undercut Western pricing dramatically. The capability story, and the procurement questions it raises.
Read article →6 min readLocal & Private AI
How to Read an AI Model Card (and a System Card)
Model cards and system cards are the closest thing to a datasheet AI has. What to look for, what the omissions tell you, and why this is becoming a compliance document.
Read article →6 min readLocal & Private AI
Mistral, Open Models, and European Data Sovereignty
For European organizations, where a model runs is a compliance question. How Mistral's open lineup fits, and why sovereignty is solved by architecture more often than by geography.
Read article →6 min readLocal & Private AI
Open-Weights Model Licenses Explained: Apache, MIT, and Community Terms
Apache 2.0, MIT, Llama community licenses, and research-only terms give you very different rights. A plain-English guide to what you can legally do with a downloaded model.
Read article →4 min readPrivacy & Compliance
Legal Professionals and AI: Balancing Efficiency with Confidentiality
How attorneys and paralegals are navigating the ethical complexities of AI by adopting secure, local tools for document review and drafting.
Read article →4 min readPrivacy & Compliance
Why Your Company NDA Means You Cannot Use ChatGPT
A deep dive into the legal and ethical conflicts between standard Non-Disclosure Agreements and the use of public cloud AI services.
Read article →