Four compliance filings from Compound Labs

#javascript #career #software #privacy

Four compliance filings from Compound Labs, each leaving behind a concrete document, report, workpaper, or log. The pages show what each product checks, who uses it, and what the result contains.

This issue

These products turn source material into compliance records that people can inspect and use.

PolicyDrift


	PolicyDrift checks what a site actually loads against what its privacy policy claims. It is for people responsible for understanding third-party contacts on a website. Each report lists the observed contacts, the policy statements, and the findings that connect them.

TrustDesk


	TrustDesk gives small platforms a report form, a 48-hour clock, and an append-only log for removal requests under the TAKE IT DOWN Act. Platform operators receive a tracking code, status record, and evidence export. The desk also generates an NCII notice from the platform name, site URL, and monitored removal address.

Truing


	Truing reconstructs 2026 W-2 box 12 codes TT and TP from a payroll register export. It is for payroll teams checking whether overtime records contain the split needed for year-end reporting. The result is a workpaper with hours, overtime, rates, service charges, required premiums, shortfalls, statuses, and import lines.

PartsProof


	PartsProof prepares Cyber Resilience Act reporting materials for small hardware and software makers. The pack includes a vulnerability disclosure policy, an SBOM, and a 24-hour reporting runbook. The expanded pack adds product-specific reporting templates and a dependency review against the SBOM.

One issue a week, and one shipped product taken apart every month. What each product does, what it cost to build, what the pipeline behind it looks like, and what the numbers did, read off the repository and the live site, not written from memory. Join the list.

DEV Community