Probo guide
How to invite visitors and post updates on your Probo compliance portal
Give prospects access to your SOC 2 report before they ask, under NDA, and keep customers posted when your compliance changes with portal updates and email.
Practical guides and perspectives on compliance, security, and building trust.
Probo guide
How to set up your compliance portal (trust center) on Probo
A step-by-step guide to setting up your Probo compliance portal: branding, security commitments, which documents to share, NDA, Slack access requests and a custom domain.
Newsletter
What's new: October at Probo
Four new teammates, a cookie banner that adapts to every privacy law, internal audits for platform customers, and everything else we shipped in September.
Compliance
How to announce SOC 2 in progress to customers
Prospects are asking about SOC 2 and you don't have a report yet. Here's what you can say, what you can't, plus email and security-page templates.
Engineering
How to run a user access review across 60+ tools in minutes
Access reviews stall on decisions, not data. How Probo pulls 60+ tools into one campaign, and how the access-review skill applies your rubric and writes the justifications.
Engineering
Someone left your company. Who still has access?
Off-boarding is where access control quietly fails. Why leftover access matters for SOC 2 and ISO 27001, how to run an access review in Probo, and how to fire one automatically the day someone leaves.
Engineering
Probo has its Agent Plugins, what is it?
Agent Plugins bundle an MCP server with agent skills. Here's what the standard is, what it leaves out, and how to point your assistant at your Probo data.
Compliance
What is a compliance portal / trust center?
Every SaaS company is building one. Most publish too much. Here's what belongs on the page, what belongs behind an NDA, and what we call it at Probo.
Engineering
PostHog feature flags behind a cookie banner
How to evaluate PostHog feature flags only after analytics consent and identify(), and why cookieless_mode: on_reject is the Track 2 default.
Engineering
How to set up PostHog: GDPR, CCPA, and global privacy laws
Two clean ways to wire PostHog into a website that respects GDPR, CCPA, and the rest of the privacy-law alphabet soup, without losing your analytics.
Compliance
Is your company concerned by NIS2?
NIS2 came into force in October 2024. Thousands of europeans companies are now under new cybersecurity obligations, and most of them don't know it yet.