Governance, risk and compliance, written by practitioners
Field notes on ESG reporting, CSRD readiness, DORA, AI governance and the regulatory change that lands on your control set.
What we are writing about now
Long-form guidance from the team that builds and implements the platform.
- ESG
ESG reporting software: what good actually looks like in 2026
Sustainability data is now audited like financial data. Here is what an ESG reporting process needs before assurance season arrives.
18 August 2026 · 9 min readRead article - Regulation
CSRD readiness: a practical checklist for your first reporting year
The sequence that works: materiality first, data owners second, systems third. Plus the four places first-time reporters usually lose time.
29 July 2026 · 10 min readRead article - Regulation
What DORA expects from your third-party ICT register
The register of information, contractual clauses, exit plans and testing evidence supervisors look at first — and the fields teams usually miss.
10 July 2026 · 8 min readRead article - AI governance
ISO 42001: building an AI management system that holds up
An AI inventory, impact assessments, human oversight and monitoring — the four things customers and regulators both ask about.
24 June 2026 · 9 min readRead article - Compliance
Six compliance trends shaping GRC programmes in 2026
Consolidation, continuous evidence, personal accountability, resilience testing, audited sustainability data and governed AI.
2 June 2026 · 7 min readRead article
Regulatory updates, webinars and templates
Turn the reading into a working programme.
Book a demo and we will map your compliance, risk, policy and ESG obligations onto one control library.