Learn
Learn the requirements. See how the work fits together.
Start with a foundation, follow a topic, or pick up a practical compliance habit. AuditDIFF connects requirements to the decisions, controls, evidence, and review that follow.
AI governance
Start With the Foundations
The foundations series is designed as a multi-part learning path, with each part readable on its own and clear navigation between them.
AI Governance Foundations
Accountability, risk, evidence, assurance, and how the pieces connect.
View the seriesMulti-part seriesCatastrophic AI Risk
Why severe-harm thinking matters beyond frontier labs, and how to audit the downstream risk chain.
View the seriesCalifornia privacyCCPA Risk Assessments
When Article 10 applies, what the assessment must document, and how timing, retention, and submission work.
Read the CCPA guideNew California lawAI Auditor Registration Is Becoming a Requirement in California
How AB 1405 and SB 813 change auditor registration, independence, evidence retention, and independent verification.
Read the analysisReferenceGovernance Glossary
Definitions and explanations that distinguish authority, context, and practical meaning.
Browse the glossaryCompliance tips
Build Better Compliance Habits
Short guidance for the recurring work that makes audits and compliance programs easier to operate.
5 Ways to Not Dread Your Compliance Audit
Prepare earlier, create evidence all year, collaborate, and make audit readiness part of the program.
Read the tipAudit modernization · 5 ideas5 Ways to Modernize Your Audit
Build a roadmap, identify the support you need, automate useful evidence, and use compliance tooling deliberately.
Read the tipCalifornia privacyDetermine Your CCPA Compliance Annually
Document whether the CCPA applies and create triggers for reviewing the decision when facts change.
Read the tipCalifornia privacy · ExplainerCCPA vs. CPRA: Why People Still Use Both Names
Understand the relationship between the two names and which terminology makes sense for current compliance work.
Read the explainerCalifornia privacy
From Applicability to Risk Assessment
Use the current California resources to answer a sequence of practical questions: does the law apply, what activities create additional obligations, and what should the record contain?
How to Build a CCPA-Compliant Privacy Policy
Build the foundational disclosure from verified data practices, consumer-rights operations, and current California requirements.
Build the policyRoadmap · Start hereYou're In Scope for the CCPA. Now What?
Map the foundational privacy program and the conditional paths for risk assessments, ADMT, cybersecurity audits, and data-broker duties.
Follow the roadmapFree interactive toolCCPA Applicability Assessment
Get an applicability signal and save a printable record. Assessment answers stay in your browser.
Start the assessmentGuideCCPA Risk Assessments
Learn when Article 10 applies, what the assessment must document, and how timing, retention, and submission work.
Read the guideWorked exampleGhostRecruit Sample Risk Assessment
See a fictional end-to-end example of a documented CCPA risk assessment.
View the example