32 posts
AI features cost money and touch customer data, so we keep a registry of every one. Here is how a call that is not on the list is refused before anyth...
Live video cannot be edited after the fact. Here is how we designed kill switches at the channel and platform level, who can use them and when they ac...
When something changes unexpectedly, the first question is who changed it and when. Here is how audit trails answer that question without becoming a p...
Caching makes pages fast, but a shared cache can also show one customer another customer's data. Here is how we name cache keys so that can never happ...
Two-factor authentication only protects an account if every way of signing in respects it. Here is how we closed the side doors that many apps leave o...
Sometimes the only way to understand a problem is to look at the live system. Here is how we inspect production safely, and why we never fix anything...
An uploaded file can carry more than a picture. Here is how we check types, enforce limits and clean risky formats before any upload can appear in fro...
Permissions only protect people when they are understandable. Here is how we keep roles simple, map them to real responsibilities and handle ownership...
Email that never arrives is a silent failure. Here is how we monitor sending reputation, authentication records and blocklists so messages keep reachi...
VoVo serves many organizations from one shared database. Here is how every record knows its owner, how queries stay inside the right account and where...
The safest way to protect card numbers is to never hold them. Here is how our checkout forms send card details straight to the payment processor inste...
A backup that was queued, interrupted or never checked is not protection. Here is the standard we use before we call anything a recovery point.