Tag: regulated-industries

3 articles

API Testing
API Testing Data Residency: GDPR, Schrems II, and Cross-Border Test Data (2026)
How GDPR, Schrems II, and equivalent data-residency rules apply to API testing — captured payloads, AI inference paths, and run-report storage. EU SCC, transfer impact assessments, and the patterns that survive a DPA review.
12 min readTotal Shift Left TeamApr 11, 2026
Security Testing
API Testing for SOC 2 Audits: Mapping Tests to Trust Service Criteria (2026)
Which SOC 2 Trust Service Criteria are evidenced by API testing, what the artifacts look like, and how to design a program that reduces auditor back- and-forth. Worked control mappings for CC7, CC8, and Availability.
13 min readTotal Shift Left TeamMar 26, 2026
Security Testing
API Testing for HIPAA Compliance: A Practical Guide for Healthcare Engineering Teams (2026)
How to design API testing programs that satisfy HIPAA Security Rule controls without leaking PHI to third-party AI services. PHI masking, BAA-friendly tooling, audit evidence, and a control-mapping cheat sheet.
17 min readTotal Shift Left TeamMar 17, 2026