Blog

AI security insights, compliance guides, and product updates.

·11 min read

DORA and AI: How Financial Services Companies Should Test AI System Resilience

If you run AI models inside a European financial institution — or sell AI software to one — the Digital Operational Resilience Act is about to make your life…

doraai-compliancefinancial-services
·15 min read

EU AI Act Article 15: What Robustness Testing Evidence You Need Before August 2, 2026

August 2, 2026. That's the date the EU AI Act's requirements for high-risk AI systems become enforceable. As of this writing, that's five months away.

eu-ai-actai-compliancerobustness-testing
·12 min read

FINMA AI Compliance: What Swiss Financial Institutions Need to Know About AI Testing Requirements

Switzerland doesn't have an AI Act. It doesn't plan to have one anytime soon. And that's precisely why FINMA's approach to AI risk management deserves close…

finmaai-complianceswiss-finance
·15 min read

ISO 27001 and AI: Which Annex A Controls Require AI-Specific Security Testing

Your company has ISO 27001 certification. Your ISMS is mature. You passed your last surveillance audit without a single nonconformity. Your risk register is…

iso-27001ai-securitycompliance
·14 min read

ISO 42001 Compliance: How to Generate AI Testing Evidence for Annex B and Annex D

ISO 42001 is not another checkbox framework. It's an AI Management System standard — and if you treat it like a checklist, you'll fail the certification audit.

iso-42001ai-compliancecertification
·12 min read

SOC 2 CC9.2 and AI Security: What Your Auditor Actually Wants to See in 2026

If you shipped an AI-powered feature in the last 12 months, your next SOC 2 audit is going to feel different.

soc-2ai-securitycompliance