Field notes on AI in business
Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.
AI compliance
The Audit Log Your AI Vendor Should Be Giving You (and Probably Is Not)
The Audit Log Your AI Vendor Should Be Giving You (and Probably Is Not) I was reviewing an AI vendor's SOC 2 report last month and noticed something that should bother more people than it does. The...
Basel IsmailMay 23, 2026
AI compliance
Why Your AI Acceptable Use Policy Should Be Three Pages Not Three Sentences
Why Your AI Acceptable Use Policy Should Be Three Pages, Not Three Sentences I keep seeing the same thing when companies share their AI acceptable use policies. It is some variation of: "Employees...
Basel IsmailMay 23, 2026
AI compliance
Sales Teams Using AI on Customer Lists: The CRM Leak Nobody Tracks
Sales Teams Using AI on Customer Lists: The CRM Leak Nobody Tracks Your sales team is almost certainly pasting customer data into ChatGPT, Claude, or some other public AI tool right now. They are...
Basel IsmailMay 22, 2026
AI compliance
HR and the Employee Data That Should Never Be Pasted Into a Public Chatbot
HR and the Employee Data That Should Never Be Pasted Into a Public Chatbot A recruiter needs to summarize 40 resumes before a hiring committee meets at 2 PM. A manager wants help drafting a...
Basel IsmailMay 22, 2026
AI compliance
How to Run an AI Tool Discovery Audit in Your Own Organization
How to Run an AI Tool Discovery Audit in Your Own Organization A compliance officer at a mid-size financial services firm recently told me that during a routine vendor review, they discovered 47...
Basel IsmailMay 22, 2026
AI compliance
The Inevitability of Insider Misuse: An AI Risk Framework Built Around It
The Inevitability of Insider Misuse: An AI Risk Framework Built Around It Every information governance policy I have ever read assumes good faith. Employees will classify documents correctly. They...
Basel IsmailMay 22, 2026
Get the next article by email
One short email when something new goes up. Practical, no fluff, written by the people who build.
Free. Unsubscribe any time. Privacy policy
AI compliance
Open Source LLMs and the False Sense of Security
Open Source LLMs and the False Sense of Security A CISO I spoke with recently described their self-hosted Llama 2 deployment as "air-gapped AI." No data leaves our walls, they said. Problem solved....
Basel IsmailMay 22, 2026
AI compliance
Why Air-Gapped AI Deployments Are Coming Back
Why Air-Gapped AI Deployments Are Coming Back Air-gapped networks were supposed to be a relic. The cloud migration wave of the 2010s made them feel like an anachronism, something you maintained for...
Basel IsmailMay 22, 2026
AI compliance
M&A Due Diligence Should Now Include an AI Tool Audit
M&A Due Diligence Should Now Include an AI Tool Audit Somewhere right now, a deal team is running diligence on a target company and completely ignoring the fact that 40% of the target's employees are...
Basel IsmailMay 21, 2026
AI compliance
The Departing Employee, the AI Chat History, and the Trade Secret Lawsuit
The Departing Employee, the AI Chat History, and the Trade Secret Lawsuit A pattern is emerging in trade secret litigation that should concern every company with employees who use generative AI...
Basel IsmailMay 21, 2026
AI compliance
Cyber Insurance Exclusions for AI-Related Incidents Are Showing Up Everywhere
Cyber Insurance Exclusions for AI-Related Incidents Are Showing Up Everywhere If you haven't looked closely at your cyber insurance policy since your last renewal, now would be a good time. Carriers...
Basel IsmailMay 21, 2026
AI compliance
Confidentiality Obligations to Third Parties When You Use AI on Their Data
Confidentiality Obligations to Third Parties When You Use AI on Their Data You signed an NDA with a customer three years ago. Standard mutual confidentiality agreement, nothing exotic. Now someone on...
Basel IsmailMay 21, 2026
1,319 articles