---
title: "Privacy"
description: "125 posts about Privacy, summarised, each linking to the original."
---

# Privacy
> 125 posts about Privacy, summarised, each linking to the original.

## Articles

### [Data Engineering for AI: A Practical Guide for Data Professionals](https://yomu.fyi/post/data-engineering-for-ai-a-practical-guide-for-data-professionals.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Databricks Staff
- Published: Jun 18, 2026
- Type: Explainer

Data engineering for AI extends traditional ETL by adding requirements for model-ready data, unstructured inputs, feature engineering, governance, and production monitoring. The guide addresses data professionals building or scaling AI infrastructure, covering ingestion, architecture, data quality, privacy compliance, generative AI, and career development. It emphasizes shared feature schemas, pipeline data contracts, lineage, statistical validation, drift detection, and PII stripping or anonymization as responsibilities shared across data engineering and data science. For generative AI systems, it describes preparing RAG pipelines by ingesting and chunking documents, creating vector embeddings, and indexing them for semantic retrieval, while evaluating vector databases for latency, scale, and integration. It concludes that reliable AI depends on fresh, accurate, compliant data and ongoing operational and architectural review.


### [Massachusetts Drivers: Proposed Regulations May Impact Your Ability to Earn](https://yomu.fyi/post/massachusetts-drivers-proposed-regulations-may-impact-your-ability-to.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: Jun 4, 2026
- Type: Explainer

Massachusetts’s Department of Public Utilities (DPU) is considering proposed changes to transportation-network-company regulations that could affect drivers’ platform access, earnings, and operating costs. The proposal would expand the existing two-part background-check process by requiring seven years of driver-license history, birthplace, full Social Security documentation, Driver Verification System enrollment, and possible consultation with other agencies. It would also give DPU broader suspension authority, restrict hearing and deactivation-appeal rights, impose annual training, block vehicles with any open recall, regulate surge, and require rental vehicles to be electric within one year. Uber Black drivers could face new insurance, registration, and inspection requirements, while TNCs could incur fees that may increase fares. The post provides June 8, 2026 public-hearing details and instructions for submitting testimony.


### [Holo3.1: Fast & Local Computer Use Agents](https://yomu.fyi/post/holo3-1-fast-local-computer-use-agents.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Maxime Langevin, Hamza Benchekroun, Axel Moyal, Emrick Sinitambirivoutin, Antonio Loison, Avshalom Manevich, Tony Wu, Pierre-Louis Cedoz, Aurélien Lac, Ronan Riochet
- Published: Jun 2, 2026
- Type: Announcement

Holo3.1 is a family of computer-use models released to improve robustness across web, desktop, and mobile environments, agent frameworks, and deployment targets. Based on Qwen, it adds native function-calling alongside structured JSON outputs, expands mobile automation, and offers 0.8B, 4B, 9B, and 35B-A3B sizes for different cost, latency, and performance needs. On AndroidWorld, the 35B-A3B model rises from 67% to 79.3%, while the 4B and 9B variants rise from 58% to 72%; function-calling and native execution achieve near-parity across the stated benchmarks, and Holo3.1 improves more than 25% over Holo3 in the Holotab harness. The release also provides 35B-A3B FP8, Q4 GGUF, and NVFP4 checkpoints for local inference: NVFP4 matches FP8 on OSWorld at about two points below BF16, reaches 1.74 times BF16 token throughput on DGX Spark, and with harness optimizations cuts average step time from 6.8 seconds to 3.3 seconds.


### [Scaling up your microservice testing with Apache Spark](https://yomu.fyi/post/scaling-up-your-microservice-testing-with-apache-spark.md)
- Company: [Stripe](https://yomu.fyi/company/stripe.md)
- Author: Vivek Yadav
- Published: Jun 1, 2026
- Type: Explainer

Microservices whose behavior depends on long-tail production inputs—such as payment cost estimation—are difficult to validate with unit and integration tests alone. The described pattern separates deterministic service logic from transport and side effects, then invokes that logic in Apache Spark across historical records enriched with the required dependency state. The resulting datasets can compare current and candidate implementations, quantify changed outputs, model future rule changes, and identify affected transaction or merchant segments. Replay inputs and artifacts are minimized and protected through tokenized identifiers, redaction, access controls, and retention policies, while smaller privacy-safe golden datasets run in pull-request CI. The approach complements, rather than replaces, unit and integration tests: golden datasets cover known service behavior, and full replays expose changes across the real production distribution before deployment.


### [Amazon Research Awards recipients announced](https://yomu.fyi/post/amazon-research-awards-recipients-announced.md)
- Company: amazon.science
- Author: Amazon Research Awards team
- Published: May 27, 2026
- Type: Announcement

Amazon Research Awards has announced 70 award recipients across 49 universities in 11 countries for its fall 2025 funding cycle. The funded research spans six distinct tracks: AI for Information Security, Agentic AI, Automated Reasoning, AWS Cryptography, Cybersecurity and Anti-Abuse Technologies, and Sustainability. Each selected academic team receives unrestricted financial grants, AWS Promotional Credits to access specialized cloud AI and machine learning services, and access to more than 700 Amazon public datasets. Awardees are paired with an Amazon research contact who provides advisory support, consultation, and access to company training sessions. Furthermore, the program explicitly encourages recipients to publish their discoveries, deliver presentations at Amazon offices worldwide, and release associated software implementations under open-source licenses.


### [Reachy Mini goes fully local](https://yomu.fyi/post/reachy-mini-goes-fully-local.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Amir Mahla, Andres Marafioti
- Published: May 27, 2026
- Type: Tutorial

Reachy Mini’s conversation app can now run its speech stack locally instead of sending audio to a server, avoiding cloud, API keys, and data leaving the machine. The tutorial uses speech-to-speech as a cascaded VAD → STT → LLM → TTS pipeline exposed through a Realtime API-compatible /v1/realtime WebSocket, with Silero VAD v5, Parakeet-TDT 0.6B v3, Qwen3-TTS, and a selectable LLM backend. It shows llama.cpp serving Gemma 4 E4B with parallel slots, 64k context, flash attention, and full sliding-window attention, then covers vLLM, MLX, Transformers, hosted Responses API endpoints, and network connection to a wireless robot. Once the backend and app are connected, conversations run through the local loop, while individual stages can be exchanged to trade latency, quality, language coverage, and hardware choices.


### [How mechanism design theory helps optimize Amazon-vendor collaboration](https://yomu.fyi/post/how-mechanism-design-theory-helps-optimize-amazon-vendor-collaboration.md)
- Company: amazon.science
- Author: Dirk Bergemann
- Published: May 5, 2026
- Type: Problem & solution

Amazon and its vendors face an asymmetric information problem when coordinating purchase orders across fulfillment centers because neither party shares proprietary cost, capacity, or demand data. To solve this coordination gap without exposing sensitive information, Amazon's Supply Chain Optimization Technologies organization designed Flo Pro by integrating the Vickrey-Clarke-Groves mechanism with the Consensus Planning Protocol. The distributed optimization framework uses the alternating-direction method of multipliers to coordinate iterative agent responses, calculating cost-benefit transfers across rolling six-week planning horizons. In lower-dimensional settings, Amazon also evaluated a transparent menu-of-contracts approach where vendors select optimal plans priced at Amazon's incurred costs. A nine-week pilot with a consumer-product manufacturer confirmed that Flo Pro successfully aligns incentives and achieves measurable cost savings.


### [Ready, Set, Build with the NHS Federated Data Platform](https://yomu.fyi/post/ready-set-build-with-the-nhs-federated-data-platform.md)
- Company: [Palantir](https://yomu.fyi/company/palantir.md)
- Author: Palantir
- Published: Apr 30, 2026
- Type: Explainer

The NHS Federated Data Platform (NHS FDP), delivered by NHS England through a consortium led by Palantir, connects operational data held in separate NHS systems while keeping each organisation’s data under local control. Built on Palantir Foundry, its federated tenants use the Canonical Data Model, encryption, purpose-based access, and Privacy Enhancing Technology for national data flows. As of end December 2025, the post reports 110,078 additional theatre procedures, 797,728 patients safely removed from waiting lists, and 297,943 safely discharged patients, alongside around a 15% reduction in observed discharge delays. The inaugural Build with FDP hackathon brought together over 120 NHS developers and analysts, who built 25 working prototypes on a notional Canonical Data Model to address frontline operational challenges. Projects included early-warning, bed-demand prediction, CAMHS demand balancing, and genomic-optimised waitlist tools.


### [How to build scalable web apps with OpenAI's Privacy Filter](https://yomu.fyi/post/how-to-build-scalable-web-apps-with-openai-s-privacy-filter.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: yuvraj sharma, Freddy Boulton, Abubakar Abid
- Published: Apr 27, 2026
- Type: Tutorial

The article presents three web applications built around OpenAI’s open-source Privacy Filter, a PII detector that labels eight categories in one forward pass over a 128k-token context. Document Privacy Explorer extracts PDF or DOCX text and returns category-labeled spans, while Image Anonymizer combines Tesseract word boxes with character offsets to produce editable pixel redaction rectangles. SmartRedact Paste replaces detected spans with category placeholders, stores public and token-gated views, and evicts expired pastes in a daemon thread. Across the apps, gradio.Server’s @server.api routes model work through Gradio’s queue and gradio\_client, while plain FastAPI routes serve custom HTML, views, and lightweight lookups. The implementations keep browser-side filtering, canvas edits, and PNG export out of server round-trips, and the paste service is about 200 lines including storage.


### [How to Use Transformers.js in a Chrome Extension](https://yomu.fyi/post/how-to-use-transformers-js-in-a-chrome-extension.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Nico Martin
- Published: Apr 23, 2026
- Type: Tutorial

The guide explains how to build a Chrome extension that runs local AI with Transformers.js under Manifest V3, using a browser assistant as the reference architecture. It assigns model orchestration, lifecycle management, tool execution, and conversation state to a background service worker, while a side panel handles chat and a content script handles page extraction and highlighting. The implementation uses Gemma 4 E2B in q4f16 for text generation and all-MiniLM-L6-v2 in fp32 for embeddings, with WebGPU, DynamicCache-based KV caching, explicit download progress, and reusable pipelines. Typed message contracts, model-output parsing, and separate internal and UI transcripts support a deterministic tool loop, while chrome.storage.local, IndexedDB, and background caches place data according to lifecycle and access needs; the guide concludes that separating these runtimes keeps the UI responsive and avoids duplicate model loads.


### [Supabase is now ISO 27001 certified](https://yomu.fyi/post/supabase-is-now-iso-27001-certified.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: stephen\_morgan
- Published: Apr 22, 2026
- Type: Announcement

Supabase announces certification to ISO/IEC 27001:2022, covering its information security management system across Database, Auth, Storage, Realtime, Edge Functions, and the Data API. The post explains that ISO 27001 defines how an ISMS manages information risk through documented policies, processes, and controls, with certification awarded by an accredited third-party auditor after documentation review, interviews, evidence sampling, and control testing. Preparation included formalizing informal policies, documenting risk assessments, running internal audits, selecting an auditor, and mapping existing SOC 2 controls to ISO 27001 Annex A to avoid duplicate evidence collection. The certificate is valid for three years with annual surveillance audits, and Team or Enterprise customers can request it from their dashboard; the certification is presented alongside existing SOC 2 and HIPAA support.


### [What is Generative AI in Marketing?](https://yomu.fyi/post/what-is-generative-ai-in-marketing.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Databricks Staff
- Published: Apr 16, 2026
- Type: Explainer

Generative AI in marketing creates content, insights and recommendations that can personalize experiences, optimize campaigns and improve performance. Unlike traditional analytics, which mainly reports on past results, it produces net-new outputs such as ad copy, audience segments, product recommendations, visual assets and strategic summaries. A typical workflow prepares campaign, customer and brand data, grounds or fine-tunes models, generates outputs, applies targeting and optimization, and uses human review and refinement. It distinguishes pretrained tools such as ChatGPT, Claude and Perplexity from customized models and broader AI transformation, noting trade-offs between speed, investment, relevance and strategic alignment. Successful adoption depends on high-quality, consented data, governance, privacy controls, human oversight, monitoring and cross-functional ownership; the conclusion presents AI as a force multiplier rather than a replacement for human creativity and judgment.


### [We taught ClickStack to read your logs like a detective novel](https://yomu.fyi/post/we-taught-clickstack-to-read-your-logs-like-a-detective-novel.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Author: The ClickStack Team
- Published: Apr 1, 2026
- Type: Announcement

HyperDX introduced AI Summarize, a feature designed to translate raw logs, traces, and log patterns into narrative summaries directly within its observability interface. Instead of relying on backend large language models, the tool runs entirely client-side using OpenTelemetry-aware data extraction combined with hand-written phrase pools. The generation logic inspects Kubernetes and OpenTelemetry attributes—such as service names, endpoints, exception details, and query durations—to tailor tone across detective noir, Shakespearean drama, and nature documentary themes. Because processing occurs inside the browser tab without external API calls, the system avoids third-party latency, token expenses, model hallucinations, and data privacy risks. Users can access summaries across logs, spans, and pattern drawers or re-enable the interface toggle via URL parameter through April 2026.


### [Liberate your OpenClaw](https://yomu.fyi/post/liberate-your-openclaw.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Clem 🤗, ben burtenshaw, Pedro Cuenca, Jeff Boudier, merve, Niels Rogge, Victor Mustar, Mishig Davaadorj
- Published: Mar 27, 2026
- Type: Tutorial

Anthropic is limiting access to Claude models in open agent platforms for Pro/Max subscribers, so the post describes ways to keep OpenClaw, Pi, or Open Code agents running with open models from Hugging Face. It presents Hugging Face Inference Providers as the quickest hosted route: users create a token, run openclaw onboard --auth-choice huggingface-api-key, and select a model such as GLM-5, or set a repo\_id in OpenClaw’s config. For fully local inference, it recommends installing llama.cpp, starting a server with Qwen3.5-35B-A3B-GGUF, and connecting OpenClaw to the local OpenAI-compatible endpoint with custom configuration; the example model is described as suitable for 32GB of RAM. The hosted option prioritizes speed and model availability, while local inference offers privacy, zero API costs, full control, and no rate limits.


### [Navigating Regional Network Blocks](https://yomu.fyi/post/navigating-regional-network-blocks.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: sara\_read
- Published: Mar 26, 2026
- Type: Incident / postmortem

Supabase describes how regional network blocks disrupted access to its multi-tenant developer platform and shares three incidents from September 2025 through March 2026. It explains that DNS-level or transport-layer blocking can affect every tenant when projects share domains and IP addresses, while adding a hosting domain to the Public Suffix List provides only partial mitigation. In the UAE, a project distributing unauthorized streaming content triggered an approximately 18-day block that ended after removal and engagement with the TDRA. Yemen saw TCP connections dropped for about eight days with no official explanation, while India’s roughly eight-day restriction was rescinded after project enforcement and technical engagement with MeitY. The post says providers should build regulator contacts, strengthen abuse response pipelines, and develop alternatives such as proxy domains, custom domains, and other workarounds.


### [Edge AI Made Easy: MongoDB and ObjectBox Data Synchronization](https://yomu.fyi/post/edge-ai-made-easy-mongodb-and-objectbox-data-synchronization.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Author: Puja Roy
- Published: Feb 3, 2026
- Type: Announcement

Modern edge AI deployments require immediate real-time decision-making, local privacy, and offline operation while retaining the analytical scale of central cloud infrastructure. To address these hybrid demands, MongoDB and ObjectBox partnered to release the ObjectBox MongoDB Sync Connector as part of ObjectBox 5.0. ObjectBox operates as a lightweight on-device database with local vector search, multi-language bindings, and high-throughput I/O suited for resource-constrained hardware. In environments such as industrial factory floors and restaurant point-of-sale terminals, devices capture and evaluate operational data onsite without depending on active network connections. The native connector subsequently synchronizes critical operational datasets to MongoDB Atlas for long-term storage, fleet-wide monitoring, and machine learning model retraining.


### [NVIDIA brings agents to life with DGX Spark and Reachy Mini](https://yomu.fyi/post/nvidia-brings-agents-to-life-with-dgx-spark-and-reachy-mini.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Jeff Boudier, Nader Khalil, Alec Fong
- Published: Jan 5, 2026
- Type: Tutorial

At CES 2026, NVIDIA presents a desk-based personal assistant that combines DGX Spark processing with a Reachy Mini robot, allowing an agent to converse, perceive camera input, speak, and perform actions. The tutorial assembles NVIDIA Nemotron 3 Nano for reasoning, NVIDIA Nemotron Nano 2 VL for vision, ElevenLabs for text-to-speech, and Reachy Mini hardware or simulation through the NeMo Agent Toolkit and Pipecat. Its configuration routes text, visual, and action requests to different models or a ReAct tool-calling agent, while the robot daemon exposes movement and state capabilities. The guide covers local, cloud, and serverless deployment, then starts the services needed for voice and vision interaction; the completed setup greets users and supports example text and camera prompts.


### [Voice Cloning with Consent](https://yomu.fyi/post/voice-cloning-with-consent.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Margaret Mitchell, Lucie-Aimée Kaffee
- Published: Oct 28, 2025
- Type: Problem & solution

Realistic voice generation presents significant deepfake risks alongside legitimate communication benefits. To prevent unauthorized voice duplication, a voice consent gate integrates verification directly into the voice cloning workflow. The system relies on a language model to generate novel sentence pairs containing explicit consent and phonetically diverse phrases on random everyday topics. Users must read these generated lines aloud through a direct microphone stream rather than uploading pre-recorded files, and an automatic speech recognition system verifies the utterance against the generated text. Once confirmed, the consenting audio snippet is passed directly to the voice-cloning text-to-speech model as the reference sample for synthesis.


### [Hugging Face and VirusTotal collaborate to strengthen AI security](https://yomu.fyi/post/hugging-face-and-virustotal-collaborate-to-strengthen-ai-security.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Adrien Carreira, Bernardo Quintero
- Published: Oct 22, 2025
- Type: Announcement

Hugging Face announced a collaboration with VirusTotal to enhance the security of files shared across the Hugging Face Hub. Hosting more than 2.2 million public model and dataset repositories, the platform faces potential threats from malicious payloads, compromised files, and dependencies that execute unsafe code. Starting immediately, public repositories on the Hub undergo continuous scanning powered by VirusTotal threat intelligence. When users view repository or file pages, the Hub checks file hashes against VirusTotal without transferring raw file contents, preserving user privacy. Retrieved metadata displays detection counts, clean or malicious status, and known-bad relationships, enabling organizations to evaluate risks prior to downloading assets or integrating them into deployment pipelines.


### [Supercharge your OCR Pipelines with Open Models](https://yomu.fyi/post/supercharge-your-ocr-pipelines-with-open-models.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: merve, Aritra Roy Gosthipaty, Daniel van Strien, Hynek Kydlicek, Andres Marafioti, Vaibhav Srivastav, Pedro Cuenca
- Published: Oct 21, 2025
- Type: Explainer

Modern vision-language OCR models can transcribe handwritten text, multiple scripts, mathematical expressions, and chemical formulas while also interpreting tables, charts, and images. The guide compares open OCR models and explains how output choices—including DocTags, HTML, Markdown, and structured JSON—affect digital reconstruction, LLM input, and programmatic processing. It also covers locality awareness through anchors or bounding boxes, prompt-based task switching, fine-tuning versus out-of-the-box use, and factors for selecting a model. Practical deployment options include local or managed inference, vLLM, Hugging Face Endpoints, and batch scripts that add OCR results to datasets. The discussion extends document AI beyond transcription to visual retrieval and direct document question answering with vision-language models, especially where converted text can lose layout or visual context.


[Newer posts](https://yomu.fyi/topic/privacy/page/3.md) · [Older posts](https://yomu.fyi/topic/privacy/page/5.md)