Technology articles.

17 September 20267 min read

The FIPS 140-2 Sunset and Why Your Integrity Proofs Need a Crypto Inventory

On 21 September, the remaining FIPS 140-2 certificates move to historical status. The immediate impact is procurement.

1 September 20265 min read

The Long Life of a Signature: Post-Quantum Integrity for Records You Must Keep for Decades

Today's signature algorithms may not survive quantum computing, but many records must. How to separate the proof of integrity from the signature and plan the transition.

Can You Tell If an AI Model Was Trained on Tampered Data? A Forensic Approach

After an incident, the question isn't whether the model behaved oddly. It's whether you can prove what it was actually trained on in the first place.

25 August 20267 min read

ISO 42001 vs NIST AI RMF: Where the Data Integrity Gap Actually Lives

Both frameworks tell you to govern your AI data. Neither tells you how to prove, independently, that you actually did.

20 August 20267 min read

Model Cards Are Not Data Provenance: Why Documentation Alone Won't Satisfy Regulators

A model card tells you what a team says about a model. It doesn't prove any of it. Regulators are starting to notice the difference.

12 August 20266 min read

What "AI-Ready Data" Actually Means: An Auditability Definition, Not a Marketing One

Every vendor claims their data is AI-ready. Here is a definition that holds up when a regulator, not a sales deck, asks the question.

7 August 20266 min read

How Data Poisoning Attacks Actually Work, and Why Signature-Based Defenses Miss Them

Poisoning doesn't look like an attack. It looks like data. That's what makes it effective, and hard to catch after the fact.

5 August 20267 min read

Cryptographic Audit Trails: How They Work and Why Regulators Now Require Them

Standard audit logs can be modified. Cryptographic audit trails cannot. Here is the difference, and why it matters for compliance.

30 July 20266 min read

Why Data Tampering Is More Dangerous Than Ransomware

Ransomware announces itself. Data tampering does not. And that invisibility is exactly what makes it the more serious threat.

29 July 20266 min read

Blockchain for Compliance in 2026: Beyond the Hype, Into the Use Cases

After years of overpromising, blockchain has found its real enterprise use case - and it is not cryptocurrency.

28 July 20266 min read

How to Prove Your Intellectual Property Came First: The Case for Verifiable Timestamps

In AI-accelerated innovation environments, the ability to prove when you created something is becoming as important as the creation itself.

26 July 20265 min read

API Security and Data Integrity: What Every Developer Should Know in 2026

APIs are the attack surface that most enterprises underestimate. This is what data integrity means at the API layer.

25 July 20266 min read

Cryptographic Data Fingerprinting in RAG Pipelines: A Technical Guide

Retrieval-Augmented Generation is only as reliable as the data it retrieves. Here is how to verify it.

15 July 20267 min read

Data Lineage vs. Data Integrity: What Every AI Team Needs to Know

They sound similar. They are not. Understanding the difference determines whether your AI evidence will hold up under audit.

10 July 20265 min read

eIDAS 2.0 and the EUDI Wallet: What Enterprises Must Know Before December 2026

Europe's mandatory digital identity rollout is months away - here is what regulated organizations must do now to prepare for EUDI Wallet integration.

9 July 20266 min read

What Is Cryptographic Data Integrity? A Plain-English Guide

The term is everywhere in compliance and AI governance. Here is exactly what it means, how it works, and why it matters.

6 July 20265 min read