A blog from compliance software vendor Surveill covering supervision, AI and regulatory technology for financial firms, especially marketing and communications oversight. Posts explain FINRA, SEC and NFA supervision rules and argue for consistent, explainable AI-driven review, while promoting the company's own product.
Website: https://blog.surveill.ai/
Analysis of AI agent security, cost and compliance, drawing on benchmarks, industry data and the author's experience building and securing agent platforms. Each issue argues a specific position, such as treating tool surfaces as dependency trees or the context window as a budget.
Severian publishes in-depth technical and regulatory analysis of Microsoft Purview data security, focused on compliance work such as encryption revocation behavior and HIPAA Security Rule readiness. Readers get practitioner-level explanations of how Purview features behave in practice and where they fall short of regulatory requirements.
Explains CMMC Level 2 assessment requirements for small defense contractors, with close readings of NIST SP 800-171A, 32 CFR Part 170 and the CMMC Assessment Guide. Includes practical macOS guidance such as FIPS-validated cryptography and managing Mac fleets with an MSP.
A practitioner-focused newsletter on migrating organizations to post-quantum cryptography, covering regulatory deadlines, standards developments and planning frameworks. Issues pair news such as Let's Encrypt's Merkle Tree Certificates commitment and CNSA 2.0 timelines with concrete guidance for migration programs.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
