Product updates & insights

Insights on privacy, security, and AI governance. Plus product updates, regulatory news, and practical guidance for teams operationalizing risk.

Industry Insight card

Privacy and security are better together

Why third-party vendor reviews work best when privacy and security teams collaborate from the start.

Product Updates card

Product Updates

Improved logging on Google App Engine

Application logging improvements for our Google App Engine Java 11 runtime — better visibility for engineering teams.

Service provider checklist

Service provider guide: CPRA and CCPA

Definitions, requirements, and vendor contract agreements service providers need to understand for CPRA and CCPA.

Federal trade commission with balancing scale

Get ready for the FTC and GDPR

How to align your privacy program with shifting FTC enforcement priorities and active GDPR regulators.

Product Updates card

Product Updates

Introducing the TerraTrue API

Programmatic access to TerraTrue's privacy review workflows — built for teams scaling adoption across the org.

CPA and map of Colorado

Colorado's draft regs heat things up

A breakdown of the new requirements in Colorado's draft Privacy Act regulations — and how they differ from CPRA and CCPA.

Phone with apps on screen

Four steps to faster mobile app approvals

The privacy requirements that determine how quickly your mobile app makes it through review.

Data governance meets privacy

Why these two functions need a shared playbook — and what to do when they're operating in silos.

Federal trade commission and scales

What should the FTC codify?

Our take on which commercial surveillance practices the FTC should formalize — and which would be a stretch.

Industry News card

California's Age-Appropriate Design Code

What the new law requires, who it covers, and why privacy by design is now legally mandated for products serving minors.

Two coworkers discussing metrics

Using privacy metrics to your benefit

How the right metrics can shift your program's reputation from compliance overhead to strategic asset.

Camera surveillance on computer

The FTC moves on commercial surveillance

What the FTC's commercial surveillance rulemaking signals — and what privacy programs should be doing now.

Vendor checking processes by TerraTrue

The complete guide to TPRM

Everything to build, run, and scale a third-party vendor risk management program — from intake to ongoing monitoring.

Shifting left in privacy policy

Ready, set, shift left

The case for moving privacy upstream — and the foundational shifts your team needs to make it stick.

The Privacy Beat Podcast

Industry Insights

Why is it hard to get a privacy job?

A podcast recap on what privacy hiring looks like right now — and what's behind the disconnect between roles and candidates.

Checking Vendors

Everything you need for vendor management

The full toolkit for managing third-party vendors — workflows, criteria, and team coordination patterns that scale.