Compliance
LGPL and dynamic linking: what you must still do when you ship
Dynamic linking to an LGPL library does not make your app free of duties. What section 4 of LGPLv3 still asks when you distribute a combined work.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
Legal hold vs retention period: what is the difference?
A retention period keeps data for a fixed time, while a legal hold keeps it until someone lifts it. How they interact and how GDPR storage limits apply.
Oct 18, 20263 min read
Compliance
Can law enforcement delay a breach notice? SEC and FTC compared
Both the SEC's 8-K rule and the FTC Safeguards Rule allow delay in narrow cases. Who can ask, how long it lasts, and what must be in writing.
Oct 18, 20263 min read
Compliance
Regular patches vs out of cycle fixes under FDA section 524B
Section 524B separates known unacceptable vulnerabilities, patched on a regular cycle, from critical uncontrolled risks that need an out of cycle fix.
Oct 18, 20263 min read
Compliance
Joiner, mover, leaver evidence: what to keep for an audit
Auditors test onboarding, role changes and offboarding with samples. Here is the evidence to keep for each step and where timing gaps cause exceptions.
Oct 18, 20263 min read
Compliance
Joiner, mover, leaver: a procedure for access changes
A joiner, mover, leaver procedure ties account changes to HR events. Here are the steps, owners and timing rules that keep access from piling up.
Oct 18, 20263 min read
Compliance
ISO/IEC 42001 explained: clauses 4 to 10 and Annex A
ISO/IEC 42001 is a management system standard for AI. What clauses 4 to 10 require, how Annex A controls are selected and what to read first.
Oct 18, 20263 min read
Compliance
ISO 27002:2022 themes and attributes, explained
ISO 27002:2022 regrouped 114 controls into 93 under four themes and added five attribute types. What that means for how you filter and plan controls.
Oct 18, 20263 min read
Compliance
ISO 27001 vs ISO 27002: what each one is for
ISO 27001 sets the management system you certify against. ISO 27002 is the control guidance behind Annex A. How the two fit and which to cite in your SoA.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.