Product updates & insights

Insights on privacy, security, and AI governance. Plus product updates, regulatory news, and practical guidance for teams operationalizing risk.

Understanding GDPR

EU court redefines 'sensitive' data

What the EU court's expanded definition of sensitive data means for processing, consent, and downstream compliance.

TerraTrue achieves SOC 2 certification

Our SOC 2 Type 2 certification is the latest signal of our commitment to information security and customer trust.

Processes for GDPR

GDPR basics: lawful processing

The six lawful bases for processing EU residents' personal data — and how to choose the right one for your use case.

Understanding privacy and encryption

Privacy essentials for PMs

What every product manager needs to know about privacy compliance — and how to build it into their workflow without slowing down.

Understanding GDPR

GDPR and ePrivacy: the big picture

How GDPR and ePrivacy intersect, where they diverge, and what that means for your data and marketing programs.

Industry Insight card

Your guide to Colorado compliance

What the Colorado Privacy Act requires, who it applies to, and the steps your team should take to comply.

TerraTrue understands Colorado compliance

Product Updates

Colorado compliance made simpler

How TerraTrue helps your team get ahead of Colorado's privacy requirements without adding overhead.

DPIA on document

DPIAs explained

What a data protection impact assessment is, when it's required, and how to run one without slowing product teams down.

It's time to shift left

Shift left privacy: scaling up

How to operationalize shift-left privacy across more teams without losing the early-stage rigor that made it work.

Industry Insights card

Getting started with DPIAs

Most U.S. state privacy laws now require DPIAs — here's how to build a process that meets the bar.

Connecticut's new privacy law

What CTDPA requires, who it covers, and how it compares to other state privacy laws on the books.

Why privacy needs integrations

Privacy work that lives in spreadsheets dies in spreadsheets — why integrations into your existing tools are non-negotiable.

CPRA in draft status

New CPRA draft regulations

A breakdown of what's in the latest CPRA draft regulations and what your privacy program should be preparing for.

It's time to shift left

Shift left privacy: the early steps

The first concrete moves to embed privacy upstream in product and engineering work.

Industry News card

What to expect from a fully-staffed FTC

With the FTC at full strength, what enforcement priorities should privacy teams be preparing for?

Privacy in Utah: the UCPA explained

What the Utah Consumer Privacy Act requires, who it covers, and how it differs from Virginia, Colorado, and California.