Skip to content
AI R&D for your audit work, without building a team of your own. Become a Design Partner.Become a Design Partner.Apply to joinApply
Prufy
Login

Insights

Radar.

Short notes on audit, risk and regulation, with why they may matter in this year's plan.

Two sets of credentials and 678,000 taxpayers. The breach at France's tax authority.

Using the logins of an employee and an authorised third party, someone viewed and copied tax data through June and July. It came to light on 12 August, when the database went up for sale.

1 min read

The fine that began with a 46-second recording.

Spain's data protection authority fined a solar-panel marketer over a sales call recorded by the customer himself. The company argued the database was bought and the campaign outsourced. It made no difference.

1 min read

Chatbots can no longer pass as humans.

The AI Act's transparency obligations apply from today. AI systems that talk to people must identify themselves, and generated content must be detectable.

1 min read

€680,000 after the breach. The Spanish DPA's fine on Flexicar.

The ruling does not sanction the company for suffering the cyberattack, but for lacking proportional measures beforehand and for informing those affected poorly. That distinction is what a review has to evidence.

1 min read

One forgotten credential from 2022, 200 companies exposed.

The Klue breach began with a credential created for a prototype that nobody revoked. Four years later it was used to reach its customers' Salesforce data. Your security no longer depends only on you.

1 min read

Your audit intelligence belongs to you.

Request a demo

Designed around ISO/IEC 27001, ISO/IEC 42001 and SOC 2 and ready for certification.