Insight

Insight from the people who wrote the policy.

Commentary from our cryptographic and AI governance practitioners on the regulatory, sovereignty, and supply chain conditions shaping critical industries. Organised by theme, not by date.

Themes

Five areas we write in.

01

Supply chain integrity

Multi-supplier code environments, bespoke signing architecture, the economics of trust at scale.

→
02

Cryptographic sovereignty

Key custody, jurisdiction, hyperscaler risk. Why the sovereignty conversation is no longer optional.

→
03

AI governance

ISO/IEC 42001, the EU AI Act, board-level AI risk posture, agent identity frameworks.

→
04

Post-quantum readiness

Hybrid cryptographic migration, NIST and ETSI guidance, board-defensible timelines.

→
05

Regulatory landscape

NIS2, Cyber Resilience Act, UNECE WP.29, ISO/SAE 21434. What auditors are actually looking for.

→

Featured

Current position piece.

Supply chain integrity

From vehicle to enterprise. One signing architecture.

Inside the model: how one bespoke signing service absorbed the enterprise cryptographic domain under the same governance framework built for the vehicle side. One team. One policy. One sovereign estate. The pattern we now bring to every new engagement.

Case study 01 · Principal, Cryptography · April 2026

Read the piece →
Editorial illustration

Let's talk

Have a specific question?

Brief our team →