23 Jun 2026 · data-residency Sven Civic
Region Labels Are Marketing, Not Treaties
A region name is geography theater. Sovereignty requires enforceable guarantees on jurisdiction, access, support, disclosure, and exit.
Issue #01 — Initial Commit
Field notes on data architecture, privacy, and control.
We write the hard, practical parts of data work: architectures that survive reality and trade-offs behind privacy. No hype.
Latest
View Archive → 22 Jun 2026 · configuration Sven Civic
The Night the Case Files Migrated to Virginia
Default settings are policy decisions made by foreign corporations. How a simple 'sync' feature breached our digital border.
20 Jun 2026 · api Sven Civic
“Open API” Is Not a Border Crossing: The Interoperability Myth
Vendors claim their API allows you to leave anytime. Try to move a terabyte of case history through a rate-limited REST endpoint and see what happens.
19 Jun 2026 · governance Elena Dossier
The Myth of 'We’re Too Small for Auditors': That’s When They Dig Harder
Startups believe their size is an excuse for informality. Auditors view size as a risk factor. Lack of process is not 'lean'; it is a governance vacuum.
18 Jun 2026 · ux Marie Query
The Case of the Form So Long Nobody Finished It
We add fields to look professional, but we end up looking bureaucratic. A long form is not a sign of thoroughness; it is a sign of disrespect.
17 Jun 2026 · offline-first Ingrid Pipeline
“Works Offline” Often Means “Mostly Offline”
Marketing teams love to say 'Offline Capable.' Usually, this just means the login screen loads. Real offline means full data access.
17 Jun 2026 · business continuity Klara Budget
The Bank Feed Broke on Friday: A Case Study in Single Points of Failure
When the bank feed fails, you fly blind. We map out why single-pipe setups are dangerous and how to build a resilient manual backup for cash visibility.
16 Jun 2026 · security Marta Clarity
Case: Offboarding Without a Checklist, Then Surprise Access Still Open
When an employee leaves, your data is vulnerable. We replace the frantic 'Did we get his laptop?' panic with a structured Offboarding Runbook.
15 Jun 2026 · communication Elena Dossier
Stop Calling It a 'Small Error' — That’s How Fraud Sounds
Adjectives like 'minor' or 'small' are red flags in diligence. They signal that you are trying to minimize a problem rather than solve it. State the fact, not the feeling.
13 Jun 2026 · shadow-it Hugo Ledger
The Rant: Stop Sending Client Files From Personal Phones
A personal device is a black hole for corporate data. Why allowing employees to use personal phones for client work destroys the chain of custody.
12 Jun 2026 · payments Klara Budget
I Am Not Manually Typing That IBAN: Why Payment Data Still Gets Re-Typed
Typing an IBAN by hand is not work; it is a security risk. One typo sends your cash to a stranger. Here is why we ban manual entry.
12 Jun 2026 · risk-management Paolo Pivot
The ‘Last-Minute Upload’ That Leaked the Wrong Deck
We have all been there. You drag the file. You hit send. Then you realize you uploaded the internal draft with the rude comments. Here is how to stop the panic.
11 Jun 2026 · cash-flow Ingrid Pipeline
Friday Afternoon: The Invoice Data Was Missing. Again.
The job is not done until the paperwork is done. A missing PO number means we cannot bill. Validation must happen in the field, not the finance office.
11 Jun 2026 · data retention Marie Query
A Project That Never Deleted Anything—and Then the Regulator Called
The project ended three years ago. The data? It's still on a laptop somewhere. We discuss the compounding risk of 'Zombie Data' and the art of the delete button.
10 Jun 2026 · communication Hugo Ledger
The Case: The Voice Note That Became a Contract Dispute
Voice notes are convenient for the sender and dangerous for the receiver. How a misinterpreted audio message led to a scope dispute, and how to prevent it.
10 Jun 2026 · procurement Sven Civic
The Week We Bought a PDF Prison
Why a 'Full Export' that delivers millions of PDFs is not a backup—it is a scorched earth policy designed to destroy your history.
09 Jun 2026 · ux-design Ingrid Pipeline
One Form, One Job: Cut It Down Until It Fits in Rain
The 'All-in-One' form is a disaster. Why scrolling kills data quality, and how to design interfaces for people wearing gloves.
09 Jun 2026 · branding Paolo Pivot
Branding Isn’t Vanity: It’s Trust, and Trust Is Speed
A generic portal link looks like a phishing scam. A branded portal looks like an institution. If you want the client to click, put your logo on the door.
08 Jun 2026 · google-apps-script Marta Clarity
The Fix: Google Apps Script That Turns One Email Template Into a Clean Task
Vague emails are the enemy. We replace 'free text' requests with a strict template and a script that parses them into perfect tasks.
06 Jun 2026 · accountability Marta Clarity
Rant: 'Just Email It to Everyone' Is How Nothing Gets Owned
Cc is not accountability; it is fog. Stop broadcasting requests to the whole team. Here is how we intercept group emails and force ownership.
23 Jun 2026 · data-residency Sven Civic
Region Labels Are Marketing, Not Treaties
A region name is geography theater. Sovereignty requires enforceable guarantees on jurisdiction, access, support, disclosure, and exit.
22 Jun 2026 · configuration
The Night the Case Files Migrated to Virginia
Default settings are policy decisions made by foreign corporations. How a simple 'sync' feature breached our digital border.
20 Jun 2026 · api
“Open API” Is Not a Border Crossing: The Interoperability Myth
Vendors claim their API allows you to leave anytime. Try to move a terabyte of case history through a rate-limited REST endpoint and see what happens.
19 Jun 2026 · governance
The Myth of 'We’re Too Small for Auditors': That’s When They Dig Harder
Startups believe their size is an excuse for informality. Auditors view size as a risk factor. Lack of process is not 'lean'; it is a governance vacuum.
18 Jun 2026 · ux
The Case of the Form So Long Nobody Finished It
We add fields to look professional, but we end up looking bureaucratic. A long form is not a sign of thoroughness; it is a sign of disrespect.
offline-first · Ingrid Pipeline
“Works Offline” Often Means “Mostly Offline”
Marketing teams love to say 'Offline Capable.' Usually, this just means the login screen loads. Real offline means full data access.
business continuity · Klara Budget
The Bank Feed Broke on Friday: A Case Study in Single Points of Failure
When the bank feed fails, you fly blind. We map out why single-pipe setups are dangerous and how to build a resilient manual backup for cash visibility.
security · Marta Clarity
Case: Offboarding Without a Checklist, Then Surprise Access Still Open
When an employee leaves, your data is vulnerable. We replace the frantic 'Did we get his laptop?' panic with a structured Offboarding Runbook.
communication · Elena Dossier
Stop Calling It a 'Small Error' — That’s How Fraud Sounds
Adjectives like 'minor' or 'small' are red flags in diligence. They signal that you are trying to minimize a problem rather than solve it. State the fact, not the feeling.
shadow-it · Hugo Ledger
The Rant: Stop Sending Client Files From Personal Phones
A personal device is a black hole for corporate data. Why allowing employees to use personal phones for client work destroys the chain of custody.
payments · Klara Budget
I Am Not Manually Typing That IBAN: Why Payment Data Still Gets Re-Typed
Typing an IBAN by hand is not work; it is a security risk. One typo sends your cash to a stranger. Here is why we ban manual entry.
risk-management · Paolo Pivot
The ‘Last-Minute Upload’ That Leaked the Wrong Deck
We have all been there. You drag the file. You hit send. Then you realize you uploaded the internal draft with the rude comments. Here is how to stop the panic.
cash-flow · Ingrid Pipeline
Friday Afternoon: The Invoice Data Was Missing. Again.
The job is not done until the paperwork is done. A missing PO number means we cannot bill. Validation must happen in the field, not the finance office.
data retention · Marie Query
A Project That Never Deleted Anything—and Then the Regulator Called
The project ended three years ago. The data? It's still on a laptop somewhere. We discuss the compounding risk of 'Zombie Data' and the art of the delete button.
communication · Hugo Ledger
The Case: The Voice Note That Became a Contract Dispute
Voice notes are convenient for the sender and dangerous for the receiver. How a misinterpreted audio message led to a scope dispute, and how to prevent it.
procurement · Sven Civic
The Week We Bought a PDF Prison
Why a 'Full Export' that delivers millions of PDFs is not a backup—it is a scorched earth policy designed to destroy your history.
ux-design · Ingrid Pipeline
One Form, One Job: Cut It Down Until It Fits in Rain
The 'All-in-One' form is a disaster. Why scrolling kills data quality, and how to design interfaces for people wearing gloves.
branding · Paolo Pivot
Branding Isn’t Vanity: It’s Trust, and Trust Is Speed
A generic portal link looks like a phishing scam. A branded portal looks like an institution. If you want the client to click, put your logo on the door.
google-apps-script · Marta Clarity
The Fix: Google Apps Script That Turns One Email Template Into a Clean Task
Vague emails are the enemy. We replace 'free text' requests with a strict template and a script that parses them into perfect tasks.
accountability · Marta Clarity
Rant: 'Just Email It to Everyone' Is How Nothing Gets Owned
Cc is not accountability; it is fog. Stop broadcasting requests to the whole team. Here is how we intercept group emails and force ownership.
Don't trust the hype.
Trust the method.
Get our bi-weekly dispatch on data engineering and privacy patterns. No marketing fluff, just architecture.
Status OPEN