Articles on digital reputation, brand protection, data and technology.
599 articles · Page 1 / 50
A per-user cost limit for an AI feature is not enforced simply by producing a usage report at month-end. Budget checks when accepting requests, limits during processing and actual consumption…
Keep the first screenshot, later observations and review decisions as separate versions under the same brand-protection incident. New information must not overwrite old records. File integrity,…
A C2PA record can provide verifiable information about an image’s origin and declared editing history. It does not, by itself, prove that the physical product is authentic or the seller is…
A QR code opening an official page does not prove product authenticity; the same code can be copied onto different packages. Stronger checks require item-level identity, verification records and…
Updating the search index alone is insufficient when document permissions change in a RAG system. Verify access against the current user identity before producing an answer; apply the same…
Ending a seller agreement does not automatically make all that seller’s listings unlawful. Authorisation, product origin, listing content and organisational rights need separate review. Record…
Do not rank lookalike domains by spelling similarity alone. Assess the displayed name, actual domain, active page content, brand claims and requested consumer action together. A…
Adding passkey sign-in does not remove the need to design account recovery. Device loss, moving to another device, an accessible fallback and support intervention must be defined separately. The…
Reviewing imitation mobile apps starts with an inventory of the organisation’s official apps, publishers and distribution channels. Similar names and icons are review signals, not decisions. Do…
When two people change the same record in an offline field app, “last writer wins” is not suitable for every task. Consider the record version, changed fields and business criticality. Show…
Order creation must not run again when the same payment webhook is redelivered. Use the provider’s event identifier together with a unique business-rule key, and store processing state…
Tenant isolation is more than filtering the screen by customer. Export queries, background tasks, file storage and download links must enforce the same customer authorisation. Tests must…
