Privacy Policy Requirements: What Your Policy Must Disclose (Guide)
A privacy policy must disclose who you are and how to contact you, what personal data you collect, why you collect it, who receives it, how long you […]
Research & intelligence
Follow the data. Find the risk.
Research, analysis, and conversations that connect privacy, AI, and cyber decisions to observed data movement.
Browse the evidence libraryInsight
Latest analysis
Field intelligence and practical analysis.
Read the evidence
Session replay: what it records, and who’s sued over it?
Session replay is a digital analytics technology that records what a visitor does on a website (clicks, scrolls, form entries, including text never submitted) and rebuilds it as […]
What Is GDPR? EU’s Data Protection Law Explained
The General Data Protection Regulation (GDPR) is the EU’s comprehensive data privacy law, effective since 25 May 2018. It applies to any organization worldwide that offers goods or […]
Research Article
Research Lab
Original research with transparent methods, findings, and evidence.
Broadcast, Not Stolen: How Passwords and Customer Records Reach Third Parties by Default
Passwords and personal data don’t have to be stolen to end up somewhere they shouldn’t. When an application writes them into a URL or a page title, ordinary analytics, monitoring, and fraud tools collect them by default. A Klaviyo sign-up form with no method attribute sent our test password to 31 third-party hostnames – the same omission we measured on 7,874 websites with credential- or PII-bearing forms across the top 100,000 websites
White paper
White papers
Executive guidance for high-consequence decisions.
Silent AI: The Next Coverage Gap
How non-affirmative AI coverage, hidden AI dependencies, and unobserved data flows create growing underwriting and portfolio risk.
Webinar
Webinars
Live and recorded conversations with risk leaders.
Editorial queue
The first publication in this collection is being prepared.
Case study
Case studies
Evidence stories from underwriting, privacy, AI governance, and remediation workflows.
Editorial queue
The first publication in this collection is being prepared.