compliance

The article explains that SOC 2 compliance does not require pull requests; Amp demonstrates alternative controls like restricted push access, signed commits, automated CI, and audit trails to achieve compliance, emphasizing risk-based approaches over standard processes.

The article discusses Anthropic's implementation of watermarking in their AI models to comply with the EU AI Act, raising concerns about its potential to alter content meaning and enable misuse.

Anthropic has released an FAQ explaining how watermarking will be implemented for Claude to comply with the EU AI Act, emphasizing that it won't affect output quality or traceability.

The paper investigates why AI agents break rules by applying compliance theory from law and economics, showing how framing, context, and social signals lead LLMs to violate regulatory constraints in enterprise settings.

The article discusses how the EU's new AI transparency rules are affecting enterprise AI adoption, questioning whether compliance burdens slow down deployment or provide clearer guidance for safe scaling.

This paper proposes a compliance-first Agentic AI pattern catalogue and orchestration framework for hospital information management systems, moving from single chatbots to governed multi-agent ecosystems with risk stratification, governance hooks, and support for EHR systems like Epic and Cerner.

Tavily promotes its web retrieval API for financial AI agents, highlighting use cases like real-time risk research, due diligence automation, and AML case work, with security features like zero data retention and prompt injection protection.

The EU AI Act may become a de facto global standard as companies choose to comply with one demanding regulatory regime, potentially shaping AI development worldwide even outside Europe.

LangChain announces it has added ISO 27001:2022 certification along with SOC 2, GDPR, and HIPAA compliance, strengthening its enterprise security posture.

This article discusses a decision tree for AI labelling under Article 50 of the EU AI Act, highlighting the nuanced requirements for labelling AI-generated text and images, especially deepfakes.

The EU's AI Act transparency obligations are now in effect, requiring companies to disclose AI interactions and label AI-generated content like deepfakes, with fines for non-compliance.

The EU AI Act's transparency obligations take effect August 2, requiring Europeans to be informed when interacting with AI systems or viewing AI-generated content, with fines up to €15 million for non-compliance.

An analysis of 10,000 production AI support prompts found 12.4% contained personally identifiable information, arguing that LLM security should focus on data minimization and redaction rather than only prompt injection or jailbreaks.

Dili raised $21.7M to use AI for compliance in infrastructure projects, helping manage complex regulations for construction and data centers.

AIGen is a modular tool that automatically generates SPDX 3.0-compliant AI Bills of Materials (AIBoMs) by integrating MLOps frameworks with LLMs, enabling transparent AI supply chain governance and regulatory compliance.

The author shares experience using AI tools for real estate lead generation, noting they work well but require careful handling due to compliance and fair housing regulations, as AI errors can have legal consequences.

This paper presents a mixed-method survey and expert interview study examining how LLM-based validation tools can help organizations translate EU AI Act obligations into testable, auditable requirements and evidence artifacts.

This paper introduces Copyright-Bench, a benchmark to evaluate LLM agents' compliance with copyright law in commercial tasks. Experiments show agents often select copyrighted works even when legal alternatives exist, and violation rates increase under certain user preferences and time pressure.

A real-world case reveals the critical difference between AI agents being autonomous (taking steps without approval) and unsupervised (no human oversight), leading to compliance risks and customer damage when agents confidently do the wrong thing at scale.

French regulator ANJ has classified Polymarket as illegal gambling, ordered ISPs to block it, and is now targeting users and intermediaries like VPNs. The platform still saw 205k French users in June, setting a precedent for EU regulation of prediction markets.