Skip to content
XVault
Contact

Notes

Field notes from the practice.

Short pieces on GRC delivery, third-party risk, AI automation, and the operational mechanics of running a small consultancy across jurisdictions.

  1. Compliance ships with code.

    Why programs that live in PDFs drift, and what shipping the controls as infrastructure actually looks like.

    Read