Analysis on enterprise AI governance, inline policy enforcement, agentic AI security, and regulatory compliance.
PromptPeek reconstructs another tenant's prompt via KV-cache sharing timing. Here is how the NDSS 2025 attack works, why no application bug or stolen credential is required, and what actually limits an attacker who shares your infrastructure.
Read post →A FedRAMP AI compliance review should test the authorization boundary, model inventory, identity propagation, least-privilege rules, data classification, event logging, evidence integrity, and continuous monitoring. This checklist translates those requirements into request-level tests an assessor can repeat.
Read post →BSA recordkeeping under 31 CFR 1010.410 obliges a transmittor financial institution to retain named details for transmittals of 3,000 dollars or more. Operations and fraud teams now send that same data to language models to draft summaries and investigation notes. This article maps the recordkeeping duty onto the authenticated model request and sets out what the per-request record has to carry.
Read post →The FTC Safeguards Rule obliges covered businesses to monitor and log the activity of authorized users and to detect unauthorized use of customer information by those users. Support agents and agentic workflows sending order data to language models are authorized users doing exactly that. This article maps 16 CFR 314.4(c)(8) onto the model request and sets out what the record has to hold.
Read post →Google Agentspace compliance work should begin by reconciling the name and edition in the contract with Google Cloud’s current Gemini Enterprise documentation. The operating record then needs the project, location, connectors, agents, IAM roles, processing terms, regional limitations, control owners, evidence tests. This article focuses on that customer-owned compliance file. The security and audit-log reviews are published separately, as is the DLP review.
FERPA requires an institution to maintain a record of each request for and each disclosure of personally identifiable information from education records, kept as long as the education record itself. Advisors and faculty sending student data to language models create disclosures with no such record. This article maps 34 CFR 99.32 onto the model request and sets out what to capture.
Read post →Grok enterprise compliance depends on the exact xAI surface, endpoint, retention mode, enabled capability set and contract in use. The global API, US regional endpoint, Zero Data Retention, Files, Collections, server-side tools, and Grok Build have different boundaries. A defensible approval records those choices and verifies the active route in production.
Read post →IMO Resolution MSC.428(98) pushed cyber risk into the safety management system that every Document of Compliance rests on. Model requests from voyage planning, cargo documentation and shoreside operations now sit inside that scope. This article sets out what a per-request record has to carry so a flag state auditor can verify the control instead of reading a policy about it.
Read post →UN Regulation No. 155 obliges a manufacturer to detect cyber-attacks, support monitoring of its vehicle types, and provide data forensic capability for analysing attempted attacks. Those duties assume logging exists. This article applies the same reasoning to the model requests engineers and agents make inside the manufacturer, and sets out the per-request record an approval authority discussion can rest on.
Read post →EASA Part-IS has applied since 22 February 2026 and obliges aviation organisations to detect information security events, report qualifying ones within 72 hours, and retain incident records for five years. Model requests from operations, maintenance and crew systems sit inside that scope. This article maps the relevant points onto the authenticated request and sets out what the record has to carry.
Read post →When a language model drafts text that lands in a GxP electronic record, the validated system records the paste and nothing before it. This article maps 21 CFR Part 11 audit trail language onto the authenticated request between a scientist and a model, describes the fields a QA reviewer can reconcile, and marks where the predicate rule rather than Part 11 sets retention.
Read post →DFARS 252.204-7012 obliges a defense contractor to report a cyber incident within 72 hours and to preserve relevant monitoring data for at least 90 days. Both obligations assume the traffic was monitored. This article maps those clauses onto authenticated requests from engineers and agents to language models, and sets out the per-request record that makes the obligations answerable.
Read post →