# : Engineering

Practical guides and perspectives on compliance, security, and building
trust.

[ 
Engineering 

## How to run a user access review across 60+ tools in minutes

Access reviews stall on decisions, not data. How Probo pulls 60+ tools into one campaign, and how the access-review skill applies your rubric and writes the justifications.

Arthur Mayoux ·Sep 7, 2026 
Read article ](/blog/2026-09-07-user-access-review-60-tools) [ 
Engineering 

## Someone left your company. Who still has access?

Off-boarding is where access control quietly fails. Why leftover access matters for SOC 2 and ISO 27001, how to run an access review in Probo, and how to fire one automatically the day someone leaves.

Arthur Mayoux ·Aug 17, 2026 
Read article ](/blog/2026-08-17-offboarding-access-review-automation) [ 
Engineering 

## Probo has its Agent Plugins, what is it?

Agent Plugins bundle an MCP server with agent skills. Here's what the standard is, what it leaves out, and how to point your assistant at your Probo data.

Arthur Mayoux ·Aug 14, 2026 
Read article ](/blog/2026-08-14-agent-plugins-probo) [ 
Engineering 

## PostHog feature flags behind a cookie banner

How to evaluate PostHog feature flags only after analytics consent and identify(), and why cookieless_mode: on_reject is the Track 2 default.

Émile Ré ·Aug 5, 2026 
Read article ](/blog/2026-08-05-posthog-feature-flags-cookie-consent) [ 
Engineering 

## How to set up PostHog: GDPR, CCPA, and global privacy laws

Two clean ways to wire PostHog into a website that respects GDPR, CCPA, and the rest of the privacy-law alphabet soup, without losing your analytics.

Émile Ré ·May 27, 2026 
Read article ](/blog/2026-05-27-posthog-cookie-banner-gdpr-ccpa-compliance) [ 
Engineering 

## How We Automated Our Client Contract Process

How we handle Probo's contract workflow end-to-end, from prospect handshake to e-signature, and why we rebuilt the pipeline twice.

Arthur Mayoux ·Apr 24, 2026 
Read article ](/blog/2026-04-24-how-we-automated-our-client-contract-process) [ 
Engineering 

## Stripe Security Checklist: 2FA, SAML/SCIM & Automatic Payouts

Stripe is probably the most used payment platform in SaaS. Three settings, thirty minutes of work, and your payment platform stops being a security gap.

Bryan Frimin ·Mar 31, 2026 
Read article ](/blog/2026-03-31-stripe-security-101) [ 
Engineering 

## 5 Google Workspace Settings to Fix for SOC 2 & ISO 27001

Google Workspace ships with default settings that leave companies exposed to audit findings. Here are five settings to fix right now.

Bryan Frimin ·Mar 26, 2026 
Read article ](/blog/2026-03-26-google-workspace-default-settings-are-insecure) [ 
Engineering 

## Do you need code review reviews for compliance?

Are code reviews required for SOC 2 or ISO 27001? Learn what auditors expect and how simple processes can satisfy compliance requirements.

Antoine Bouchardy ·Nov 9, 2025 
Read article ](/blog/2025-11-09-do-you-need-code-reviews)