Topic
Security & sovereignty
Sovereignty, privacy and access control for AI agents, written for Australian operators.
All security & sovereignty articles

20 questions to ask before connecting an AI assistant to your business
An AI security checklist for small business: 20 questions on access, storage, training, logs, approvals and offboarding to ask before connecting AI.

Least privilege for AI agents: give each one only the access its job needs
How to set AI agent permissions: read before write, scoped accounts, no shared passwords, secrets out of prompts and a register of every integration.

Prompt injection by email: how strangers can steer your AI agent
Email prompt injection lets anyone who can email you try to steer your AI agent. How the attack works, what it looks like and layered defences that work.

The Privacy Act and AI tools: what Australian businesses need to know in 2026
How the Privacy Act and AI tools fit together in 2026: who is covered, the key APPs, OAIC AI guidance and the December 2026 automated-decision rules.

Audit trails for AI agents: what to record for every action
What an AI agent audit trail should capture: who asked, what was read, what changed and who approved. Field list, retention tips and an incident playbook.
Related product: The Cortex platform · Privacy