Blog

Privacy

Articles tagged "Privacy".

SecurityJune 28, 2026

Data-at-Rest Security for Builders: Encryption, Key Management, and Backups

Protecting data at rest is not a single switch. Choose the encryption layer (app / DB-TDE / disk), keep keys out of code (env vars → KMS → envelope encryption), encrypt and test-restore backups, and tighten access control — mapped by "which threat, defended by what," with US (breach laws, HIPAA, PCI DSS) and EU (GDPR Art. 32) drivers.

Privacy Cryptography Solo dev

RightsJune 19, 2026

Handing Your Data to US Providers — CLOUD Act, FISA 702, and the Sovereignty Asymmetry

Data you hand to US providers (OpenAI, Google, AWS) is reachable by the US government through the CLOUD Act, FISA 702, and NSLs — fast — while a non-US government's MLAT route averages ~10 months, and Japan has no CLOUD Act executive agreement. The sovereignty asymmetry the EU litigated in Schrems II, mapped for builders.

Data sovereignty Privacy

RightsJune 22, 2026

Where does your data go after you hit delete? Retention, managed enclaves, and cross-border access in AI/cloud

What happens to data you hand to AI/cloud services after you delete it? Retention, government access (CLOUD Act, FISA, NSL), managed enclaves, and the EU view (GDPR, Schrems II) — mapped for builders, kept separate from the training-use question.

Data sovereignty Privacy

SecurityJune 11, 2026

ChatGPT & Claude Security Settings in Three Tiers (US/EU)

AI service safety splits into three tiers: enforced by settings, per-use discipline, and enterprise contracts. Training opt-outs and retention, the three mechanical layers for CLI and autonomous agents, a pre-input five-question checklist, and contract-only guarantees (ZDR, audit logs) — with the US/EU drivers (FTC, state laws, GDPR, AI Act).

AI workflow Privacy Solo dev

RightsMay 25, 2026

The Legal Boundaries of Web Scraping for US/EU Builders — CFAA, GDPR, DSM & AI Training

A US/EU-focused guide: when you scrape — or let an AI fetch pages — sort your case into four legal lenses (CFAA, copyright/fair use, GDPR, contract) before you use the data. Covers hiQ, Meta v. Bright Data, the Ross/Bartz/Kadrey AI-training split, and Clearview.