#compliance

Where machine learning improves credit, fraud, and treasury risk, what SR 11-7 and the EU AI Act require, and the math behind alert fatigue and drift.

CSRD now covers far fewer companies, SB 253 reports are due November 2026, and EU greenwashing rules apply from September 2026. Where AI fits in ESG work.

Where company data goes in a generative AI system and how to govern it: vendor terms, permission-aware RAG, prompt injection, embeddings, poisoning, and logs.

How compliance teams use AI for AML alert triage, regulatory change tracking, and control testing, and what the TD Bank case shows about monitoring gaps.

Zero trust rollout guide: NIST SP 800-207 tenets, CISA maturity stages, OMB M-22-09 lessons, NIST SP 1800-35 builds, and a phased privileged-access plan.

How to build AI governance that scales with risk: inventory, risk tiers, controls per tier, and EU AI Act dates after the 2026 Digital Omnibus.

Practical cloud data governance: data owners, classification and discovery, GDPR transfer rules, EU Data Act switching, AI data leaks, and retention costs.

What GDPR, the CCPA's new ADMT rules, Colorado's rewritten AI law, and the EU AI Act require from SaaS companies that train or use AI models, with deadlines.