One question, argued properly.

Mapped but Not Governed: Third-Party Dependency and the Board's Resilience Obligation

Regulators in the EU, the UK, and the US have converged on a single test for critical technology dependencies, and the test is substitutability rather than inventory.

Authorised at Entry, Answerable in Use: Governing AI in English Legal Practice

England and Wales has produced, within a single year, both the first regulatory authorisation of an AI-driven law firm and the sharpest judicial warning yet issued about unverified AI output, and the space between those two decisions is where professional AI governance now lives.

From Disclosure to Interdiction: What Forced-Labour Border Enforcement Demands of Compliance Architecture

Forced-labour enforcement has moved from disclosure statutes to border interdiction, and the EU Forced Labour Regulation's December 2027 application date sets the deadline for compliance architecture built in the reporting era.

The Workforce Decision and the Operational Test: What the 2024-2026 AI-Driven Reversals Reveal About Hiring Architecture

When the chief executive of a public fintech announces that the company will rehire human customer-service agents after the AI deployment that replaced them did not meet quality standards, the institutional finding is not about artificial intelligence; it is about the architecture of the workforce decision that produced both the reduction and the reversal, and about the cost asymmetry that makes the wrong workforce decision one of the most expensive errors a P&L owner can make.

Who Is Accountable for the Supply Chain: Responsibility Allocation Under Mandatory Human Rights Due Diligence

A decade after the United Nations Guiding Principles on Business and Human Rights established the corporate responsibility to respect, six jurisdictions now operate mandatory human rights due diligence regimes in parallel, and the institutional question that distinguishes compliance from exposure is no longer whether a company has a supply chain policy but which function inside the company owns each tier of the diligence, and whether that allocation survives contact with operations.

After Mata: The Documentation Standard For Law Firms Using Generative AI

After Mata v. Avianca, AI hallucinations are now a sanctions risk. The documentation standard for law firms using generative AI in practice.

Hiring Under The Algorithm: AI Employment Decisions And The New Compliance Domain

AI systems used in hiring are now a defined high-risk category under the EU AI Act and EEOC guidance. What employment AI compliance requires from HR, legal, and operations teams.

After The Omnibus: What Remains Of European Human Rights Due Diligence and What It Means For The Operational Standard

The EU Omnibus raised CSDDD application thresholds. What remains of European human rights due diligence obligations — and what the operational standard looks like for companies that remain in scope.

Mining At The Source: The Operational Architecture Of Human Rights Due Diligence In The Extractive Sector

The operational architecture of human rights due diligence in mining and extractive industries — aligning the UN Guiding Principles, OECD Due Diligence Guidance, and Voluntary Principles with real operational requirements.

Governing What You Deploy

AI governance for regulated industries: what it means to govern AI deployment responsibly, and what the EU AI Act, NIST AI RMF, and ISO 42001 actually require of mid-market organizations.