Resources
Notes from building the layer
Framework mappings, engineering guides and short notes, written by the people building the platform. None of them are published yet — this is what is being written, not a back catalogue.
Featured guide
The EU AI Act, mapped to engineering controls
Forty pages of obligation turned into a control list an engineering team can act on: what has to be inventoried, what has to be logged, what human oversight means in a deployment pipeline, and which of it your existing SOC 2 evidence already covers.
Publishing shortly
The plan
What is being written
- Guide
The EU AI Act, mapped to engineering controls
- Mapping
SOC 2 controls that break when agents hold credentials
- Note
What belongs in an AI system inventory
- Guide
Evidence that survives a change of auditor
- Mapping
ISO 42001 against what you already run for 27001
- Note
Why access reviews miss service accounts
One email a month
Sent when something new is published. Nothing else, and one click to stop.