Compliance
What counts as a significant incident under NIS2?
NIS2 defines a significant incident by severe disruption, financial loss or damage to others. For some digital providers, EU rules add concrete thresholds.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
What counts as an AI system under the EU AI Act?
The Act defines an AI system as a machine-based system with varying autonomy that infers outputs from inputs. What that means for your software.
Oct 18, 20263 min read
Compliance
What counts as a cyber device under FDA section 524B?
A cyber device has software, can connect to the internet and could be vulnerable to threats. FDA reads internet ability broadly: USB and Bluetooth count.
Oct 18, 20264 min read
Compliance
What a good security trust center should contain
A trust center answers buyer questions before they are asked. Here is what to publish openly, what to gate behind NDA, and what to keep out entirely.
Oct 18, 20263 min read
Compliance
What a HIPAA business associate agreement must contain
A HIPAA BAA must set permitted uses, require safeguards, incident and breach reporting, subcontractor flow-down, access rights and PHI return at termination.
Oct 18, 20264 min read
Compliance
Checking a SaaS vendor's security before you buy, with one page
A one page vendor check for small companies: what to ask, what evidence to accept, and how the FTC says to limit vendor access and contract for security.
Oct 18, 20263 min read
Compliance
Vendor says 'no customer data affected': questions to ask
A vendor claim that no customer data was affected is a start, not an answer. Ask about scope, evidence, credentials, dates and what to do meanwhile.
Oct 18, 20263 min read
Compliance
Vendor onboarding security checklist: what to ask and verify
A one page checklist for onboarding a new vendor: scope the data, ask for evidence, check access and exit terms, and set a review date before you sign.
Oct 18, 20263 min read
Compliance
Security training for contractors and vendors with access
Contractors who touch your systems or data need security training too. How to decide who, what to require in contracts, and how to verify completion.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.