The blog

Notes on building websites, design, and the brands I love working with.

All 7 paladins ai ai development animals architecture behind the scenes build vs buy business business software conversion custom software cybersecurity data privacy data protection data residency design encryption enterprise game dev okay but actually performance process saas security small business software development solo developer supabase threat modelling vibe coding women-led

9 October 2026

Okay, But Actually… Encryption at Rest Does Not Fix a Bad Application

Someone asked whether a hypothetical business app used envelope encryption and what its blast radius was. Fair questions, once we know what the app stores. Here is what encryption at rest protects, what it cannot fix, and why a locked database can still hand information to the wrong person.

aicustom softwarecybersecurityencryptionsupabasedata privacy

Read post

7 October 2026

Okay, But Actually… Data Residency Is Not the Same as Data Protection

People love throwing California, Europe and Brazil into conversations about custom software before asking what the application actually does. Here is what data residency tells you, what it does not, and why buying SaaS does not make the legal questions disappear.

aicustom softwaredata privacydata residencysecuritysaas

Read post