Latest insights and guides from ZebraByte
Latest article
How to evaluate PostHog feature flags only after analytics consent and identify() — and why cookieless_mode: on_reject is the right Track 2 default when you need flags.
· Émile Ré
Read articleÉmile Ré
Two clean ways to wire PostHog into a website that respects GDPR, CCPA, and the rest of the privacy-law alphabet soup, without losing your analytics.
Arthur Mayoux
NIS2 came into force in October 2024. Thousands of europeans companies are now under new cybersecurity obligations, and most of them don't know it yet.
Arthur Mayoux
Risk management is central to ISO 27001, SOC 2, and GDPR. Most teams treat it like a checkbox. Here's what it actually means and how to think about it properly.
Arthur Mayoux
Most companies using the AICPA SOC logo never registered for it. Here's what the rules actually say and what changed recently.
Arthur Mayoux
How we handle ZebraByte's contract workflow end-to-end, from prospect handshake to e-signature, and why we rebuilt the pipeline twice.
Antoine Bouchardy
SOC 2 is not an industry default. Here is how to decide if you should start now, protect your investment, and pick the right standard for your buyers.
Bryan Frimin
Stripe is probably the most used payment platform in SaaS. Three settings, thirty minutes of work, and your payment platform stops being a security gap.
Bryan Frimin
Google Workspace ships with default settings that leave companies exposed to audit findings. Here are five settings to fix right now.
Bryan Frimin
A compliance platform caught producing near-identical SOC 2 reports with controls never verified — an open letter to the bodies enforcing audit quality.