The blog

Notes on building websites, design, and the brands I love working with.

All 7 paladins ai ai development animals architecture behind the scenes build vs buy business business software conversion custom software cybersecurity data privacy data protection data residency design encryption enterprise game dev okay but actually performance process saas security small business software development solo developer supabase threat modelling vibe coding women-led

9 October 2026

Okay, But Actually… Encryption at Rest Does Not Fix a Bad Application

Someone asked whether a hypothetical business app used envelope encryption and what its blast radius was. Fair questions, once we know what the app stores. Here is what encryption at rest protects, what it cannot fix, and why a locked database can still hand information to the wrong person.

aicustom softwarecybersecurityencryptionsupabasedata privacy

Read post

4 October 2026

Okay, But Actually… Custom Does Not Mean Homemade Security

Using Supabase, Stripe or managed hosting does not make a product less custom. I am much more concerned about the person who chose the whole stack because AI sounded confident and now cannot explain what any of it is doing.

aicustom softwaresecuritysupabasesoftware developmentvibe coding

Read post