<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Compliance on wid's blog</title><link>https://wid-blog.github.io/en/tags/compliance/</link><description>Recent content in Compliance on wid's blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 15 Jan 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://wid-blog.github.io/en/tags/compliance/index.xml" rel="self" type="application/rss+xml"/><item><title>Sensitive Data Encryption — Module Design and Migration Retrospective</title><link>https://wid-blog.github.io/en/posts/career/dable/sensitive-data-encryption-retrospective/</link><pubDate>Thu, 15 Jan 2026 00:00:00 +0000</pubDate><guid>https://wid-blog.github.io/en/posts/career/dable/sensitive-data-encryption-retrospective/</guid><description>A retrospective on column-level encryption of sensitive data in a running service. Envelope encryption, DEK granularity decisions, the WHERE clause constraint that led to HMAC, and the migration automation Skill that spread the work across the org.</description></item></channel></rss>