Security & when things break
Privacy
16 guides across 7 sections
Compliance6
- CCPA & CPRA basics for businesses serving CaliforniaWhat California's consumer privacy law means for your website, who it applies to, and the practical steps we take to help you align with it.
- Cookie consent law: when & howWhen your website needs a cookie consent banner, what it must include, and how we set one up to follow GDPR and CCPA rules.
- GDPR basics for businessesWhat the EU's General Data Protection Regulation means for your website, even if your business is based outside Europe.
- HIPAA basics for websites handling health infoWhat HIPAA means for your website if you work in healthcare or collect health-related information, and the technical safeguards we implement.
- How to write a privacy policy that's actually trueWhat a website privacy policy has to say under California, Delaware, Nevada, CCPA and GDPR rules, where to put it, how to use a generator well, and how to keep it accurate as your site changes.
- Why your website needs legal pages, and which onesWhich legal pages your website actually needs (privacy policy, terms of service, refund policy, cookie notice, disclaimers), which are required by law, which by the platforms you use, and the real cases that show why.
AI for your business4
- Adding an AI chat assistant to your website: options and risksThe main ways to add an AI chat assistant to a business website, what each involves, and the risks to plan for before it starts talking to customers.
- AI and your customer data: privacy basicsWhat happens to customer information you put into AI tools, how to choose settings and plans that protect it, and simple rules your team can follow.
- Automating repetitive admin with AI and Zapier or MakeHow to pair Zapier or Make with AI steps to take repetitive admin off your team's plate, with examples, a build process and the safeguards to add.
- How to evaluate an AI tool before you pay for itA practical process for trialling and judging an AI tool for your business, covering real-task testing, data and security terms, pricing models, and your exit plan.
Security for your company2
- Security questionnaires and SOC 2: what bigger clients will ask youWhat security questionnaires and SOC 2 reports are, the difference between Type I and Type II, and how a small company can answer larger clients honestly.
- Vendor and third-party risk: what to ask your software providersHow to check whether a software provider or contractor will keep your data safe, with the questions to ask and how to judge the answers.