From emerging regulation to deal mechanics, we write about the questions founders and investors actually ask — practical analysis you can put to work.
A Service Level Agreement (SLA) is a contractual commitment between a service provider and customer that defines measurable performance standards — uptime, response time, throughput, accuracy, support response — and the remedies (service credits, termination rights, refunds) available when standa…
Cyber Liability Insurance covers financial losses arising from cyber incidents: data breaches, ransomware attacks, system disruptions, regulatory fines, business interruption, and reputation damage.
Errors and Omissions (E&O) Insurance, also known as Professional Liability Insurance, protects companies and professionals against claims arising from inadequate work, professional mistakes, missed deadlines, or failure to deliver promised services.
Directors and Officers Liability Insurance (D&O) is liability insurance that protects company directors and officers (and the company itself in certain structures) against personal financial losses arising from claims that they breached their fiduciary duties, made wrongful acts in their corporat…
Embargo screening (also known as sanctions screening or denied-party screening) is the systematic process of checking customers, counterparties, beneficial owners, intermediaries, and transactions against published sanctions lists and embargo regimes.
The US operates two parallel export control regimes administered by different agencies: EAR (Export Administration Regulations, 15 CFR 730-774) administered by the Bureau of Industry and Security (BIS) at the Commerce Department, and ITAR (International Traffic in Arms Regulations, 22 CFR 120-130…
Dual-use export control under EU Regulation 2021/821: Annex I licensing for goods, software and technology with civilian and military uses — encryption, cyber-surveillance catch-alls, intangible transfers, and the Türkiye angle.
The Specially Designated Nationals and Blocked Persons (SDN) List is the consolidated list of individuals, entities, and vessels with whom US persons (and many non-US persons in transactions touching the US) are prohibited from dealing.
The ePrivacy Directive (Directive 2002/58/EC), also known as the “cookie law” after its 2009 amendment, is the EU’s sectoral privacy law for electronic communications — covering confidentiality of communications, traffic and location data, cookies/tracking, and unsolicited commercial communicatio…
The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa’s comprehensive data protection statute. Full operational effect commenced 1 July 2020 with a 1-year compliance grace period; full enforcement began 1 July 2021.
