Regulation & Compliance

Regulatory intelligence and compliance practice across AI, audits, standards, and governance obligations.

Fiduciary Liability

The Week the Deadline Stopped Being Hypothetical

Jul 26, 2026

•

4 min read

The Week the Deadline Stopped Being Hypothetical

For a UK financial services board, 2 August is not an EU compliance date. It is the day the evidence either exists or it does not.

Ivan Roche

Technology Leadership

Naming an Owner Is Not Proof One Existed

Jul 19, 2026

•

3 min read

Naming an Owner Is Not Proof One Existed

This month, three institutions told boards to assign accountability. None of them said how to prove it was there before the fact.

Ivan Roche

Digital Alibi

Jul 13, 2026

•

3 min read

The Correction the Correction Needed

Article 50 has two obligations. Last week’s edition tracked one accurately and missed the other entirely.

Ivan Roche

Digital Alibi

+10

Jun 29, 2026

•

3 min read

Uninsurable

Commercial insurers have arrived at the same question as the Article 65 investigation standard. They are asking for evidence, not documentation.

Ivan Roche

Digital Alibi

What Regulators Actually Ask When Incidents Occur

Jun 7, 2026

•

4 min read

What Regulators Actually Ask When Incidents Occur

Most boards are preparing for an audit. The EU AI Act creates something different: a forensic investigation of specific decisions. Understanding the distinction is the most important governance action available before 2 August.

Ivan Roche

Digital Alibi

+10

May 18, 2026

•

2 min read

The Board Cannot Say It Did Not Know

The difference between a governance process and a governance record, and why only one will satisfy a regulator

Ivan Roche

Fiduciary Liability

May 4, 2026

•

5 min read

The Retrievability Test

Why Boards Should Stop Asking 'Can You Explain It?' and Start Asking 'Can You Prove It?'

Ivan Roche

Regulation & Compliance

The Week the Deadline Stopped Being Hypothetical

Naming an Owner Is Not Proof One Existed

The Correction the Correction Needed

Uninsurable

What Regulators Actually Ask When Incidents Occur

The Board Cannot Say It Did Not Know

The Retrievability Test

The Roche Review

Home