Governance & privacy7 MIN READ
Permission-aware retrieval: the control most RAG diagrams omit
A retrieval system should establish the active principal and filter authorised resources before similarity ranking or model context assembly.
THE SOFTLANDER BLOG
Privacy engineering
Technical privacy controls for data flows, retrieval, memory and deletion.
In Privacy engineering
9 articlesGovernance & privacy6 MIN READ
AI agents in legal operations: assistance without invented authority
Legal agents can organize evidence and prepare work, but professional judgement, client authority and verified legal positions cannot be delegated by interface.
Governance & privacy7 MIN READ
Can your agent truly forget?
Deleting a chat is not the same as removing personal data from memory, retrieval, logs, caches, evaluations, backups and learned models.
Governance & privacy6 MIN READ
How to collaborate when client data cannot leave the environment
Keep sensitive data under client control by moving approved methods and people to the environment, exporting only the minimum reviewed evidence needed for collaboration.
Architecture & engineering6 MIN READ
Context is not memory: why the distinction matters
Context is the information available for one inference. Memory is a governed process for retaining, changing and recalling information across time. Confusing them creates silent risk.
Governance & privacy6 MIN READ
What a technical AI privacy review can—and cannot—conclude
A technical review can trace data and test controls, but it cannot alone determine lawful basis, resolve policy choices or certify compliance.
Cryptographic engineering6 MIN READ
Encryption at rest answers fewer questions than you think
Platform-managed encryption satisfies a procurement question and defends against one threat. Knowing which threat it covers—and which of your actual risks it leaves untouched—changes what you build next.
Governance & privacy7 MIN READ
Data minimisation for agents that always want more context
Better agent context is not the largest possible context. It is the smallest authorised, relevant and timely data set that supports the task.
Governance & privacy6 MIN READ
Healthcare administrative agents: useful workflows with strict boundaries
Administrative agents can reduce coordination work, but clinical meaning and patient access can enter the workflow sooner than the label suggests.
KEEP EXPLORING
Take the thinking
into your next discussion.
Read the method, assumptions and questions to ask.