Blog

Field notes from the audit desk.

Written by the people who run the reviews, for the teams who have to ship the fixes.

AI governance

What an AI disclosure actually needs to say

Most product teams disclose that AI is used. Far fewer disclose what it decides, what data it uses, and how a person can contest the result.

Jun 18, 2026 · 6 min read

Consent

Banner installed, consent mode enabled, and trackers still setting identifiers on first paint. Here is the usual culprit chain.

May 30, 2026 · 8 min read

Accessibility

The other 70% live in focus order, custom widgets, and error messaging — all of which need a human on a keyboard.

May 12, 2026 · 5 min read

TCPA

A defensible record has the language shown, the timestamp, the source, and the version. Most stacks store one of the four.

Apr 22, 2026 · 7 min read

Security

Enterprise reviewers read your security page before your pricing page. Here is what belongs on it.

Apr 4, 2026 · 4 min read

Diligence

What acquirers and lead investors actually ask for, and how to have it ready before the data room opens.

Mar 19, 2026 · 9 min read