<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Sovrata technical notes</title><description>Encrypted, governed data for AI. Bylined thesis, engineering deep-dives and dated notes from Sovrata.</description><link>https://sovrata.com/</link><language>en-au</language><item><title>The standards are pointing to the data</title><link>https://sovrata.com/notes/2026-09-09-standards-point-to-the-data/</link><guid isPermaLink="true">https://sovrata.com/notes/2026-09-09-standards-point-to-the-data/</guid><description>Encrypted, governed data for AI.</description><pubDate>Wed, 09 Sep 2026 00:00:00 GMT</pubDate><content:encoded>&lt;p&gt;&amp;lt;!--
Every line here is VERBATIM already-cleared CANON, each attributed to its own named source (no
source is made to carry another&apos;s claim): the descriptor strap as the lede (copy.ts), the
first-mention form (protected; carries the mandatory descriptor gloss at first mention, House
rule 5 / pitch ladder rule 1), the ASD and NIST lines from the pitch ladder Section 2 spine, and
the cleared synthesis line (05-Content Section 4) to close. No new prose, so no fresh veto.
--&amp;gt;&lt;/p&gt;
&lt;p&gt;Sovrata builds the data engine for AI. Built by Senetas.&lt;/p&gt;
&lt;p&gt;ASD&apos;s May 2026 guidance (co-sealed by Canada, New Zealand and the UK) tells every CISO to &quot;define and enforce policies governing what data AI tools may access&quot;.&lt;/p&gt;
&lt;p&gt;NIST IR 8611 (August 2026) argues that fine-grained access control belongs at the data, not in the application.&lt;/p&gt;
&lt;p&gt;The market and the standards bodies are converging on Sovrata&apos;s shape.&lt;/p&gt;
</content:encoded><category>ASD AI guidance</category><category>NIST IR 8611</category><category>enforce at the data</category><author>Andrea Van Unen-Smith</author></item></channel></rss>