Reading up on compliance

AWS Bedrock’s launch of Claude Fable 5 requires users to share prompts with Anthropic, ending its promise of data neutrality for regulated shops.

Solo entrepreneurs can adopt SOC2-aligned practices and transparency to satisfy early customers, but full Type 2 certification is nearly impossible without significant cost and staff for required governance roles.

Y Combinator removed Delve, an AI compliance startup, from its program following allegations of license violations and fraud in its compliance verification service.

Binance fired employees who alerted that $1.7B in crypto had been sent to sanctioned Iran, sparking debate about crypto regulation and corporate accountability.

The author proposes defining a company's structure, roles, and processes as declarative code, enabling versioning, testing, and automation.

HN commenters debate soft delete tradeoffs, noting schema drift, compliance conflicts, and performance issues, with many preferring archival tables or CDC over flags.