Blog

Analysis on enterprise AI governance, inline policy enforcement, agentic AI security, and regulatory compliance.

Shadow AI for Finance: MNPI, DORA, and the Audit Gap

Financial services firms face a compounding shadow AI exposure: material non-public information moving into unauthorized models, DORA Article 28 third-party AI risk obligations, and SEC enforcement under existing books-and-records rules. The historical DLP and surveillance stack was built for email and chat, not for AI prompts. This piece walks through how shadow AI surfaces in trading, research, and operations, and what the architectural fix actually requires under DORA, SR 11-7, and the EU AI Act.

Industry Verticalsshadow-aifinancedoramnpicomplianceai-security
Read post →

Shadow AI for Legal: Privilege, Confidentiality, and the ABA Opinion 512

Law firms and in-house legal teams face a sharper version of the shadow AI problem. Client confidences pasted into a model can break attorney-client privilege under the inadvertent disclosure doctrine. ABA Formal Opinion 512, issued in July 2024, sets out the duties of competence, confidentiality, and supervision that apply to lawyer use of generative AI. This piece walks through where shadow AI surfaces in legal work, what Opinion 512 actually requires, and what the architectural fix looks like.

Industry Verticalsshadow-ailegalprivilegeconfidentialityabaai-security
Read post →

Shadow AI for Government: FedRAMP, CUI, and the OMB M-24-10 Mandate

Federal agencies and government contractors face a shadow AI exposure that compounds across FedRAMP boundary controls, CUI protection under NIST SP 800-171, and the OMB M-24-10 AI governance memo. Pasting controlled unclassified information into a non-FedRAMP-authorized model violates the boundary by definition. This piece walks through where shadow AI surfaces in agency work, what M-24-10 actually requires, and what the architecture for compliant AI use looks like.

Industry Verticalsshadow-aigovernmentfedrampcuiombai-security
Read post →

Shadow AI vs Sanctioned AI: Why the Line Moves Every Quarter

Shadow AI is unauthorized employee use of AI tools. Sanctioned AI is the set of tools the organization has reviewed and approved. The line between them moves every quarter as vendors add LLM features inside SaaS products that were already on the approved list. This piece walks through the operational distinction, why traditional CASB classification fails to keep up, and what the architecture has to look like for the sanctioned-versus-shadow boundary to mean something at the request layer.

Problem-Awareshadow-aiai-governancesanctioned-aicasbenforcementai-security
Read post →

How to Write an AI Usage Policy That Holds Up Under Audit

An AI usage policy that survives a regulatory review covers data classification, identity binding, sanctioned tools, prompt content rules, audit retention, and incident handling. The pattern that fails most often is a policy written for HR distribution that the security team cannot demonstrate compliance with. This piece walks through the eight sections every policy needs, the enforcement layer the policy depends on, and the audit evidence the policy has to produce.

Problem-Awareai-usage-policyai-governancecomplianceshadow-aipolicy-templateaudit
Read post →

AI Usage Policy Examples: Six Working Templates by Industry

Working AI usage policy examples have to match the regulatory regime they live under. The healthcare policy turns on PHI and the BAA. The financial services policy turns on MNPI and DORA. The SaaS policy turns on customer data and the EU AI Act deployer obligations. This piece walks through six industry-calibrated policy examples, the specific clauses that distinguish them, and the enforcement layer all six share.

Problem-Awareai-usage-policypolicy-templatecomplianceai-governanceshadow-aiindustry
Read post →

Shadow AI Breach Examples: Five Patterns That Keep Repeating

Shadow AI breaches now cost an average of $670,000 more than standard breaches and take 247 days to detect, per the IBM 2026 Cost of Data Breach study of 600 organizations. The breach patterns repeat across industries: source code into consumer ChatGPT, PHI into unauthorized models, MNPI in research workflows, customer PII through embedded SaaS AI, and prompt injection on agentic workflows. This piece walks through five patterns, the architectural common cause, and the enforcement layer that removes the surface.

Problem-Awareshadow-aibreachincidentai-securitydata-lossai-governance
Read post →

Agentic AI Compliance: Where the Existing Frameworks Apply and Where They Fall Short

Agentic AI compliance is the application of EU AI Act, NIST AI RMF, ISO 42001, and sector regulations to autonomous AI systems that take actions on behalf of users. The frameworks were written before agentic systems were widely deployed. The Article 12 logging obligation applies. The NIST identity and authorization framework applies. The audit and disclosure obligations apply. The gap is that none of them name the action-level evidence requirement explicitly. This piece walks through where existing frameworks apply, where they fall short, and what the per-action evidence layer has to produce.

Problem-Awareagentic-aiai-agentscomplianceeu-ai-actnist-ai-rmfai-governance
Read post →

AI Agent Control Plane: Identity, Authorization, and Action Lineage

An AI agent control plane is the architectural layer that authorizes agent actions, enforces identity-bound policy on each action, and records action lineage for audit. The pattern emerged because the chatbot architecture (one prompt, one response, one log) does not cover the action surface autonomous agents produce. This piece walks through the control plane primitives, the integration points with the agent framework, and the performance characteristics the layer needs to maintain under production load.

Platform & Architectureai-agentsagentic-aiai-control-planeauthorizationai-securityarchitecture
Read post →

AI Gateway Sub-50ms Latency: What the Number Actually Buys You

Sub-50ms latency on an AI gateway sets the per-request overhead below the noise floor of LLM inference (500ms to 5 seconds). The architectural property the number reflects is local policy evaluation, in-memory classification, and stateless horizontal scaling. This piece walks through how the budget is spent, where the latency typically hides, the benchmark methodology that produces production-actionable numbers, and how sub-50ms behavior changes the decision about inline versus out-of-band enforcement.

Platform & Architectureai-gatewaylatencyperformanceinline-enforcementarchitectureengineering
Read post →

Copilot DLP: Inspecting What Microsoft Copilot Sends to the Model

Copilot DLP is the practice of detecting and preventing sensitive data movement through Microsoft Copilot, GitHub Copilot, and the broader Copilot product family. The Copilot products operate inside enterprise workflows where confidential data is the default content. Traditional DLP at the email gateway, the endpoint, and the network layer misses the prompt-content movement. This piece walks through where Copilot DLP needs to operate, what classifiers matter for the Copilot data surfaces, and how the per-request audit record satisfies the Article 12 disclosure obligation.

AI Security Solutionscopilotai-dlpllm-dlpmicrosoft-365github-copilotdata-protection
Read post →

PII Detection in LLM Prompts: Classifier Choices and the Per-Request Decision

PII detection on LLM prompts has to operate at request latency, work on free-form text, and produce a deterministic classification that drives a policy decision. The classifier choices fall into three categories: regex and lookup tables, small purpose-trained models, and LLM-based classifiers. Each has a latency and coverage profile. This piece walks through the choices, where each fits, the integration into the AI request boundary, and the audit record the classification produces.

AI Security Solutionspiiai-dlpllm-dlpclassificationgdprdata-protection
Read post →