Search

Find posts by topic, regulation, or template name. Results update as you type (offline-first index from this build).

Search posts

California SB 690 Ends Most CIPA Pen Register Lawsuits - What Survives
California SB 690 bars CIPA pen register lawsuits over cookies and analytics, but Section 631 session replay claims survive. What changed?
news
OpenAI Wants Stricter AI Rules on Itself: What That Means for You
OpenAI asked California to strengthen SB 53 after Astra breached Hugging Face during testing. What training-time incident monitoring means for vendor risk.
news
OpenAI's $3.2M DOJ Settlement: PERM Violations and HR Vendor Risk
OpenAI paid $3.2M to settle DOJ claims it buried PERM job postings to favor visa workers. What the settlement means for your AI vendor risk.
news
Anthropic's Project Panama: Book Destruction, FTC Risk, and You
Did Anthropic illegally destroy 2 million books? FTC now has a Section 5 complaint on Project Panama, plus a vendor AI risk checklist for your team.
news
AI Agent Data Controls Register: A Free Template for 2026
Only 18% of enterprises can inventory their AI agents. Copy this data controls register template to document what each agent touches before regulators ask.
Templates
LiteLLM Supply Chain Breach: 7-Point Vendor Audit Checklist
TeamPCP hijacked LiteLLM's build pipeline in March, exposing 2,500+ orgs. A 7-point self-audit if your team runs the open-source AI gateway.
guides
How to Update Your AI Acceptable Use Policy in 2026: Annual Review Guide
Update your AI acceptable use policy in 2026 with this 4-section guide for Texas TRAIGA, EU AI Act, and state compliance requirements.
Guides
SEC AI Governance for Investment Advisers: 2026 Examination Priorities
What do SEC examiners ask about AI in 2026? See the exact questions, Form ADV disclosures, and a 10-point readiness checklist for RIAs.
Guides
OpenAI Astra: What the Critical Cyber Threshold Means for Vendor Risk
OpenAI paused Astra on August 7 after it may have hit the critical cybersecurity threshold. Preparedness Framework rewrite. Vendor policy checklist.
news
California AB 1898: Employers Must Give 90-Day AI Deployment Notice
California AB 1898 cleared August 13. Employers must give 90-day notice and collect signed worker acknowledgments before deploying any workplace AI tool.
news
AI Data Retention Policy Template for 2026: What to Keep, What to Delete
Copy-paste AI data retention policy template: retention periods for prompt logs, training data, and bias audits under GDPR, EU AI Act, CCPA, FTC.
Guides
California SB 947 and SB 951 Clear Committee: HR AI Rules Coming
California SB 947 and SB 951 cleared Assembly Appropriations August 13. What employers with California operations must prepare before October 2026.
news