New
How are you approaching AI governance and model risk management?
Inventories, risk tiers, approval workflows, monitoring. What framework did you adopt and what does day-to-day governance look like?
Topic
Compliance and regulation
79 stories in the last 90 days · 4 community threads
In short
This topic covers the regulation, standards and audits that shape technology decisions, such as data protection law, security certifications and sector rules for finance, health and critical infrastructure. Buyers care because a supplier’s certifications, data location and evidence trail can decide whether a product is usable at all, and the rules keep changing.
Written by Techarda editors · Updated · How we work
Latest stories
The newest Compliance and regulation stories from the last 90 days. Each one opens with our summary and a link to the original source.
AI Agents & Automation
How Numan Built an Eval-First AI Health Coach with LangGraph and LangSmith
How Numan built Nu, an AI health coach, on LangGraph and LangSmith with per-category evals, simulated conversations, and safety gates on a regulatory line.
Cloud Infrastructure
Amazon Braket now in scope for FedRAMP Class C
Amazon Braket is now in scope for FedRAMP Class C in AWS US Regions where Braket is available. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that delivers a standard approach to the security assessment, authorization, and continuous monitoring of cloud products and services. With FedRAMP Class C authorization, government customers and the…
Cloud Infrastructure
AWS End User Messaging adds registration improvements for faster, higher-quality submissions
AWS End User Messaging now makes it easier to complete messaging registrations correctly the first time, with clearer guidance, explicit field requirements, and help avoiding the most common rejection reasons. Registrations ask for compliance evidence such as opt-in proof and sample messages, and submissions are often delayed or denied when that evidence is incomplete or a required field is…
Security
How Multi-Campus Universities can Build a more Connected Security Program
Parts 1 and 2 of this series looked at two pressures facing higher education security teams. First, the threat landscape : universities are dealing with more frequent attacks across complex, distributed environments, while campus-by-campus security can make it harder to share intelligence and coordinate response. Second, the compliance burden: overlapping requirements across FERPA, GLBA, HIPAA,…
Cloud Infrastructure
AWS HealthOmics now supports shared VPCs
AWS HealthOmics now supports sharing VPCs across accounts, enabling your workflows to access resources in Amazon Virtual Private Clouds (VPCs) managed by other AWS accounts with AWS Resource Access Manager (RAM). AWS HealthOmics is a HIPAA-eligible service that helps healthcare and life sciences customers accelerate scientific breakthroughs at scale with fully managed bioinformatics workflows.…
Cloud Infrastructure
Amazon Redshift long-term system table retention with Amazon S3 Tables is now available in additional AWS Regions
Amazon Redshift long-term retention for system table data through native integration with Amazon S3 Tables is now available in additional AWS Regions. With this feature, you can configure your Redshift system table data retention beyond the current 7-day limit to meet your compliance, auditing, and observability requirements. Once enabled, AWS automatically writes system table data to S3 Tables…
Enterprise Applications
10 Questions Board Members Should Be Asking About Security and Compliance
A practical framework for oversight, resilience, accountability, and trust
Cloud Infrastructure
AWS Security Hub CSPM now supports the Cyber Risk Institute profile version 2.2
AWS Security Hub CSPM now supports automated security checks that align with the Cyber Risk Institute (CRI) profile. The CRI Profile is a cybersecurity framework developed by the Cyber Risk Institute, a non-profit coalition of financial institutions and trade associations. The framework harmonizes cybersecurity and regulatory expectations that apply to the financial services sector into a common…
Earlier in the last 90 days
- AWS HealthOmics expands container registry support for private workflowsAmazon Web Services · 15 Oct 2026
- AWS License Manager now supports license type conversions for Ubuntu Pro purchased through AWS MarketplaceAmazon Web Services · 15 Oct 2026
- UK tax compliance with Zoho BooksZoho · 15 Oct 2026
- Business Observability: A strategic imperative for financial servicesDynatrace · 15 Oct 2026
- How to patch application vulnerabilities without upgradingRed Hat · 14 Oct 2026
- Port vs Warp Factories: Enterprise AI Software Factory ComparisonPort · 14 Oct 2026
- Agentic data science with the Data Agent KitGoogle Cloud · 13 Oct 2026
- Dynatrace reaches FedRAMP Class D (High) Initial Implementation statusDynatrace · 12 Oct 2026
- Best GitLab Alternatives for Enterprise Teams (2026)CloudBees · 11 Oct 2026
- AWS Security Hub now exports findings to S3 in CSV or JSON formatAmazon Web Services · 10 Oct 2026
- AWS Lambda supports OAuth authentication for self-managed Apache Kafka event sourcesAmazon Web Services · 10 Oct 2026
- The biggest IT compliance risks for 2027Flexera · 10 Oct 2026
- Banking at machine speed: Securing access across cloud, AI, and hybrid environmentsHashiCorp · 9 Oct 2026
- Why "secure by design" is the new standard for open sourceRed Hat · 9 Oct 2026
- The real risk of asking AI for financial advice isn’t ignorance. It’s compliance.TrendAI · 8 Oct 2026
- Run incident response in your FedRAMP High environmentDatadog · 8 Oct 2026
- Four compliance frameworks, one security team: Why fragmented university security raises regulatory riskRapid7 · 8 Oct 2026
- GLM 5.3 by Z.ai is now generally available on Amazon BedrockAmazon Web Services · 6 Oct 2026
- AWS Client VPN now supports device posture assessmentAmazon Web Services · 6 Oct 2026
- Secure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D)Qualys · 6 Oct 2026
- AWS Private CA now provides detailed certificate issuance logsAmazon Web Services · 5 Oct 2026
- Two front doors: Module-level access in a Django GRC appGitLab · 5 Oct 2026
- HIPAA Wasn’t Written for AI Agents. It Applies to Them AnywayTigera · 3 Oct 2026
- SASE in the AI Era: Why Secure Global Connectivity Matters More Than EverCheck Point Software · 1 Oct 2026
- Spanner Omni, now GA: A distributed, multi-model database that you can deploy anywhereGoogle Cloud · 1 Oct 2026
- The knowledge layer for enterprise: ProcessesNeo4j · 30 Sept 2026
- Building an AI-powered multimodal compliance monitor: From training to tracking to chatRed Hat · 30 Sept 2026
- Trust Center is now in the Netlify DashboardNetlify · 30 Sept 2026
- Cut Carbon, Cut Costs: Achieve ESG Compliance with New Relic Cloud Cost Intelligence.New Relic · 29 Sept 2026
- How a missing kernel flag broke FIPS-certified containers in managed KubernetesCanonical · 28 Sept 2026
- Scaling Beyond Borders: The 2026 Communication Blueprint for Chinese BrandsTwilio · 28 Sept 2026
- Lambda to build new data center in Mayes County, Oklahoma, generating half a billion dollars in tax revenue over next decadeLambda · 28 Sept 2026
- The path to a sovereign autonomous enterprise: Why open source is your clean core advantageSUSE · 25 Sept 2026
- {unscripted} Chicago and Columbus recapHarness · 25 Sept 2026
- Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2Red Hat · 25 Sept 2026
- Fire safety: from a compliance obligation to a strategic enabler of autonomous buildingsSiemens · 24 Sept 2026
- What the EU AI Act means for AI governanceLaunchDarkly · 24 Sept 2026
- Plugins Library: Ready-Made Plugins for Platform TeamsPort · 23 Sept 2026
- The CMMC Phase II Suspension: What It Means for Your Compliance and Zero Trust StrategyAkamai · 23 Sept 2026
- How Ariel Chen built trust before she built automationZapier · 23 Sept 2026
- Kong API Gateway 3.16: From Debugging to Billing to ComplianceKong · 23 Sept 2026
- Why Digital Sovereignty Comes Down to One Metric: Exit VelocitySUSE · 19 Sept 2026
- Inside a YugabyteDB InternshipYugabyte · 18 Sept 2026
- Every regulatory disclosure rule asks the same question. Each calls it something elseSysdig · 18 Sept 2026
- The End of Point-in-Time Compliance: Why Continuous Audit Readiness Matters to You in the AI EraQualys · 18 Sept 2026
- Simplify compliance with the native pre-written policy experience in HCP TerraformHashiCorp · 18 Sept 2026
- The personalization paradox in private markets distributionWriter · 18 Sept 2026
- How to Evaluate Neocloud Risks for Enterprise AI | NutanixNutanix · 17 Sept 2026
- Stop Token-Incinerating Your Risk EngineNeo4j · 16 Sept 2026
- Australia is replacing the Essential Eight with a new cyber framework. Here’s how exposure management can help you get ahead of it.Tenable · 15 Sept 2026
- The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.Sophos · 15 Sept 2026
- FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe SecurityPalo Alto Networks · 15 Sept 2026
Showing the newest 60 of 79. The feed archive lists every story by month.
What practitioners are discussing
Stories say what companies announced. These threads are where people who work with Compliance and regulation compare notes.
New
Operational resilience rules: what changed in your architecture?
For regulated teams (CPS 230, DORA and similar), which technical changes did compliance actually require?
New
OpenShift vs managed Kubernetes (EKS/AKS/GKE) for regulated workloads
For teams in financial services, government or healthcare: which did you choose and what tipped it: compliance evidence, support, cost or skills?
New
How are you measuring platform engineering success?
DORA metrics, developer surveys, time-to-first-deploy, cost per service? What convinced leadership the platform team is worth it?
Companies in these stories
The active companies with the most Compliance and regulation stories in the last 90 days. It counts news coverage, not quality, market share or fit for your needs.
Related categories
Where Compliance and regulation sits among the categories Techarda covers. Each hub shows who is active, and each guide sets out how to evaluate vendors.
Frequently asked questions
Is a vendor’s certification enough to show we are compliant?
No. A certification shows the vendor runs certain controls, but you stay responsible for how you configure and use the product. Read the audit report’s scope and exceptions, not just the certificate.
What is the difference between SOC 2 and ISO 27001?
ISO 27001 is an international standard for an information security management system, certified by an accredited body. SOC 2 is an independent auditor’s report against criteria set by the American Institute of CPAs, common among US suppliers. Both are useful and neither covers everything.
What should we ask vendors about regulation?
Where data is stored and processed, which sub-processors they use, how they handle breach notification, which certifications cover the exact service you are buying, and how they support your own audit and reporting duties.
Stories are filed under topics automatically from their headline and summary, so the odd one may sit in the wrong place. Spotted one, or a topic we should add? Email engage@techarda.com. All topics.