Editorial standards

The Sonomos Newsroom is published by Sonomos, Inc., the company that makes Locke. It covers AI, data privacy, cybersecurity and regulation for people who handle sensitive information at work. Stories are credited to the Sonomos Newsroom, not to individual writers.

Sonomos sells software that addresses some of the risks the newsroom reports on. That interest is disclosed in a labelled note from the publisher at the end of a story, kept separate from the story itself.

Stories are produced by an automated publishing system that Sonomos operates. It uses AI models to research and draft each story from public sources, then runs the checks below before anything is published. Sonomos sets the rules the system works to; individual stories are not reviewed by a person before they go live.

The system is allowed to decline: if it cannot find enough reliable sources, or a story fails a check, nothing is published that day.

• At least two sources, from at least two different websites, preferring primary sources such as legislation, regulators' publications, court records and company disclosures.
• Sources cited inline, where the claim is made, and listed in full at the end of the story with the date each was read.
• A record of the story's main claims and the source each one was checked against, shown under "How this story was checked".
• Real publication and update times. A story's publication time never changes; edits move its update time.
• No claim that any product guarantees compliance, is certified for a regulation, or prevents every data leak, and no absolute security claims.
• No near-duplicates of an earlier story. A story that builds on an earlier one says so and links to it.

These checks are automated. The system reads each source and compares the recorded claims with it, and the site's build refuses any story that is missing a required part. That is not the same as a human fact-check, and errors are possible. If you find one, please tell us.

When we learn of an error we correct the story, add a dated note under "Corrections" saying what changed, and update its "Updated" time. A corrected story keeps its address. Published stories are not deleted to remove a mistake.

To report an error, email [email protected] with the story's address and what you believe is wrong.

Story art is original: graphics drawn for the newsroom, not stock photography or pictures of real people. When a story carries an image, its credit and licence are shown beneath it.

Every story is also published as Markdown (add index.md to its address, or request it with Accept: text/markdown) and as JSON (add index.json), each with its sources, the claims checked against them and its corrections. The newsroom has an llms.txt index, a JSON Feed and an RSS feed, and the full text of recent stories in one file. When citing a story, link its address; for a fact, the primary source it cites is the better citation.

Stories are general information. They are not legal, compliance or security advice for your situation, and the law they describe changes. Check the dates on a story and read the sources it cites before relying on it.