@davewt

GDPR-Compliant APIs at Scale: Building a PII Detection Layer in Python

Apr 23 · 7 min read · Privacy compliance is no longer a checkbox exercise. With GDPR fines escalating and the EU AI Act enforcement deadlines now in effect, engineering teams are being asked to demonstrate systematic controls rather than point-in-time audits. The weak lin...

Building a PII Detection Pipeline in Python: Architecture, Trade-offs, and Production Considerations

Apr 16 · 6 min read · Building a PII Detection Pipeline in Python: Architecture, Trade-offs, and Production Considerations Most data breaches that make the news are not the result of zero-day exploits or nation-state actors. They result from plaintext PII stored when it s...

Defensive API Architecture: Multi-Layer Input Validation Patterns in Python

Apr 9 · 5 min read · Defensive API Architecture: Multi-Layer Input Validation Patterns in Python Every production system that has handled real traffic has a story about bad data. Not theoretical bad data — actual corrupted records, failed downstream jobs, or a compliance...

Why 90% of Sanctions Screening Alerts Are False Positives — And How to Engineer Your Way Out

Apr 2 · 6 min read · Why 90% of Sanctions Screening Alerts Are False Positives â€” And How to Engineer Your Way Out Compliance engineers face a structural problem that rarely gets discussed honestly: the sanctions screening systems most fintechs run today are fundamental...