France's e-invoicing mandate lands 1 September 2026. The developer's playbook.
The deadline nobody can opt out of On 1 September 2026, every business established in France that is subject to VAT — whether or not it actually charg…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
claude
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
tutorial
typescript
webdev
Where usability files actually break — and what I do about it
I stopped treating the usability file as a compliance artifact years ago — it’s where product design and real people collide. When it’s done badly, th…
Mexico’s PSM registry after CTA: what filings still matter
Mexico’s Public Registry of Commerce still runs through state-level implementation. Look up the same company twice and historical coverage can shift d…
EU AI Act compliance as API calls
We shipped eight endpoints on api.moltrust.ch (v2.5) this week. Three implement EU AI Act obligations directly. This is the short version for people w…
We built a SOC 2 reviewer for AI sessions, and kept AI out of the execution path
We built a SOC 2 reviewer for AI sessions — and kept AI out of the execution path AI coding tools now touch auth code, modify Terraform, handle creden…
If countries can restrict model access, your AI rollout needs an access register
Reuters reported this week that Beijing is considering limits on overseas access to China's most advanced AI models. No final rule has been announced.…
How Do You Prepare ECS Fargate for a SOC 2 Audit?
How to Prepare ECS Fargate for SOC 2 Compliance Originally published at https://fortem.dev/blog/ecs-compliance-soc2 AWS being SOC 2 certified doesn't …
What KYB regulations actually demand (and where most implementations quietly fail)
TL;DR: Global organisations faced £1.23 billion in KYC/AML penalties in H1 2025. TD Bank's £3 billion fine was not really about money laundering. It w…
How to Build a Compliant Fintech App in the UAE
The UAE fintech sector spans three distinct regulatory authorities. Whether you are building for the CBUAE-licensed mainland, the DIFC, or the ADGM, t…
The ISO 27001 Statement of Applicability, explained for engineers
If your startup is going for ISO 27001, the document the auditor opens first is the Statement of Applicability (SoA) . Most engineering teams build it…
Monaco’s RCI registry: what you actually get from the data
Monaco lists roughly 14,000 active entities in the Registre du Commerce et de l’Industrie (RCI). The register is small. That scale changes how you rea…
What building HIPAA-compliant lakehouses taught me about real-world encryption
Eighty-two percent of data breaches in healthcare don't happen because of a sophisticated nation-state actor; they happen because a junior engineer ac…
AMLA Is Coming Online: What the EU's New Anti–Money Laundering Authority Means for Builders and Regulators
If you work anywhere near payments, banking, crypto, or fintech in Europe, a new acronym is about to land in your backlog: AMLA — the EU's Authority f…
Picking an eQMS for an EU medtech SME — practical pros and cons of six vendors
I support CE-marked Class IIa/IIb devices under MDR every week. Choosing an eQMS is rarely a technology decision alone — it’s a systems, audit-readine…
Government procurement and public-sector tenders: why managed cloud infrastructure wins contracts
Why your cloud hosting keeps losing government contracts (and how to fix it) Your infrastructure might be bulletproof, but if you can't document it pr…
I Built a Free Open-Source EU AI Act / NIST AI RMF / ISO 42001 Crosswalk Tool - Here Is What I Found
Every week I see the same question in AI governance communities: "We already have NIST AI RMF implemented. Does that cover our EU AI Act obligations?"…
HIPAA Risk Assessment in 2026: A Healthcare Engineer's Field Guide
If you build, run, or audit systems that touch protected health information (PHI), the HIPAA risk assessment is the document that quietly decides whet…
Your compliance team will ask for an AI agent audit trail before August 2. Here's the part most teams haven't built.
The deadline, stated plainly On August 2, 2026 — two months out as I write this — the EU AI Act's high-risk obligations under Annex III reach full enf…
Part 5 of 6: The Regulation That Cannot See the Bias It Was Built to Catch.
TL;DR: The EU AI Act's high-risk provisions take effect August 2026. Your multi-agent pipeline is covered. But the regulation doesn't define "bias," d…
ZeroDrift raises $10 million to protect AI models from themselves
A new AI compliance service sits between AI models and end users to flag and replace any messages that might present a compliance problem.
ISO 27001 Annex A and Email Security: A Simple Gap Analysis Guide
Your ISMS is certified. Your Statement of Applicability covers the controls. Your auditor arrives and runs a DNS lookup on your domain. dig _dmarc.you…
NIS2 for developers: translate 66 pages of EU regulation into 10 technical controls
The NIS2 directive became enforceable in EU member states in October 2024. It applies to roughly 160,000 organizations across Europe — significantly b…
How I built an FCA Register scraper on Apify (and why it's the B2B data gap nobody talks about)
When most people think about UK data sources to scrape, they go straight to Companies House. And they should — it's an excellent dataset. But there's …
The Delve Scandal Proved SOC 2 Is Broken — Here's What Micro-SaaS Founders Should Do Instead
You just watched a $32 million YC startup implode because they faked SOC 2 evidence for 494 companies. The Delve scandal, broken by Captain Compliance…
We spent 6 months feeding our compliance data to a major cloud AI. Here's what we got back.
TL;DR: We built our first generation of compliance tooling on top of one of the big three cloud AI platforms. We fed it our screening data, our edge c…
CLOUD Act, GDPR и ваш DNS: что на самом деле может ваш провайдер
Сразу важное: я не юрист. Я инженер, который пилит свой DNS-резолвер по ночам, и читал законы не от хорошей жизни, а потому что это мой бизнес, и мне …
Kubernetes-аудит после Wiz и Prisma: как живут без CNAPP в 2026
В 2022–2024 западные CNAPP-платформы — Wiz, Prisma Cloud, Lacework — закрыли доступ для российских компаний. Сбер и Яндекс собрали свой стек на коленк…
Hardware End-of-Support-Life (EOSL) — The EOL Risk Nobody Tracks
Everyone talks about software EOL. Nobody talks about hardware EOSL. End-of-Support-Life (EOSL) hardware creates exactly the same security exposure as…
Your EOL Dependencies Are a Compliance Problem — Not Just Tech Debt
Most developers know about EOL software the way they know about eating vegetables. Sure, you should stay current. But the real reason to act isn't hyg…
Hidden Compliance Risks from Unsupported Software — What Auditors Find First
Most compliance failures are not discovered in production. They're discovered in audit prep — when someone finally looks at what's actually running. S…