Compliance
Direct marketing opt outs: build a suppression list that works
A person who objects to direct marketing must be removed from it. How to build a suppression list that survives imports, exports and tool changes.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
The delete or return data clause: what to ask for at contract end
GDPR Article 28(3)(g) lets you choose deletion or return when services end. Here is how to write the clause so it is testable, dated and confirmed.
Oct 18, 20263 min read
Compliance
Data retention and deletion in analytics stores: where copies hide
Deleting a person's data from a warehouse is rarely one query. A map of the copies, snapshots and caches that make deletion and retention hard.
Oct 18, 20263 min read
Compliance
What will EU buyers ask software vendors about the Cyber Resilience Act?
CRA reporting duties apply from 11 September 2026, main duties from 11 December 2027. Expect questions on vulnerability handling and support periods.
Oct 18, 20263 min read
Compliance
Cyber Essentials vs Cyber Essentials Plus: which one should you buy?
Both cover the same five controls. Plus adds independent technical testing. Here is how to choose based on who is asking and how much proof they want.
Oct 18, 20262 min read
Compliance
Cyber Essentials routes: self led or supported by a Certification Body
Cyber Essentials offers a self led route through IASME and a supported route with a licensed Certification Body. How to choose, and how to prepare either.
Oct 18, 20263 min read
Compliance
Cyber Essentials five controls: a plain checklist for a small team
Cyber Essentials rests on five technical controls: firewalls, secure configuration, update management, access control and malware protection. A checklist.
Oct 18, 20263 min read
Compliance
What belongs in a customer security summary for vulnerability management?
A customer security summary should state scope, process, targets, recent results, exceptions handling and date. One accurate page beats a long deck.
Oct 18, 20263 min read
Compliance
What a customer breach notice must say, based on FTC guidance
The elements of a good customer breach notice, from FTC guidance and GDPR Article 34: what happened, what data, what you did and what recipients should do.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.