Compliance
How do you implement GDPR yourself? A step by step plan
Implement GDPR in order: map your data, set lawful bases, publish notices, handle requests, contract processors, secure data and rehearse a breach.
Oct 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
How to choose a SOC 2 auditor for your Type 1 report
Eight questions to ask when choosing a SOC 2 auditor for a Type 1 report, from licensing and independence to evidence format and the path to Type 2.
Oct 18, 20265 min read
Compliance
HITRUST technical controls checklist for an engineering team
A practical HITRUST checklist for engineers, grouped by technical area, with the evidence to keep and how e1, i1 and r2 change the amount of work.
Oct 18, 20265 min read
Compliance
HITRUST with spreadsheets: what works and when to automate
Use spreadsheets to prepare for HITRUST e1, i1 or r2: the tracker layout, where it breaks, and the signs that evidence collection should be automated.
Oct 18, 20265 min read
Compliance
How to scope a HITRUST assessment before you start
Scope decides HITRUST cost and difficulty. Pick the assessment type, then define systems, data and facilities, and use inheritance to shrink the work.
Oct 18, 20265 min read
Compliance
HITRUST: preparing evidence and getting through the assessment
Prepare for a HITRUST assessment: choose e1, i1 or r2, scope carefully, build evidence for each requirement and rehearse the external assessor's tests.
Oct 18, 20265 min read
Compliance
HITRUST policies and documents: how to work out what you need
HITRUST has no fixed policy list. Your assessment type and tailored requirements set the documents you need. Here is how to work out and organise them.
Oct 18, 20265 min read
Compliance
How do you implement HITRUST yourself? A step by step plan
Plan a HITRUST effort yourself: pick e1, i1 or r2, scope the system, run a readiness pass, fix gaps, then work with an approved external assessor.
Oct 18, 20265 min read
Compliance
HITRUST first timer mistakes: assessment choice, scope and inheritance
First time HITRUST teams pick the wrong tier, scope too wide, start late with an assessor, miss inheritance and confuse HITRUST with HIPAA. Avoid these.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.