The language of secure AI.

Also known as AES-GCMRead definition AI governance

AES-256-GCM

AES-256-GCM is an authenticated-encryption mode that uses AES with a 256-bit key to protect data confidentiality and integrity. It produces ciphertext and an authentication tag; correct implementations must use a unique nonce for each encryption under the same key.

Agent Governance

Agent governance is the set of policies, roles, technical boundaries, and review practices used to guide autonomous software agents. It covers how agents are approved, what data and tools they may use, how their actions are observed, and how people can intervene when outcomes need review.

Also known as AI agent governanceRead definition AI governance

AI Accountability

AI accountability means assigning responsibility for decisions and impacts involving an artificial intelligence system. It identifies who owns a system, who can explain its use, who reviews harms or errors, and who has authority to change or stop the system when evidence warrants action.

Read definition Regulation & risk

AI Act High-Risk Systems

An AI Act high-risk system is an artificial intelligence system that falls within a high-risk category under the European Union Artificial Intelligence Act. The classification is based on the system’s intended purpose and the applicable legal criteria, rather than on a general label about how advanced a model is.

Also known as high-risk AI systemRead definition Regulation & risk

AI Compliance

AI compliance is the work of identifying and meeting legal, contractual, and internal requirements that apply to an artificial intelligence system. It combines scoping, evidence, controls, and review; it is not a single certification or a synonym for ethical or technically reliable model behavior.

Read definition Regulation & risk

AI Conformity Assessment

An AI conformity assessment is a structured evaluation of whether a defined artificial intelligence system meets requirements that apply to it. The process examines evidence against specified criteria; its form and outcome depend on the governing framework and the system’s classification.

Also known as conformity assessmentRead definition Privacy & data

AI DPIA

An AI DPIA is a data protection impact assessment that examines how a proposed artificial intelligence use may affect people’s privacy. It describes the personal-data processing, identifies relevant risks, and records safeguards and decisions in the format required by the organization’s applicable process.

Also known as AI data protection impact assessmentRead definition AI governance

AI Explainability

AI explainability is the ability to provide useful reasons or evidence about how an artificial intelligence system produced an output. What counts as useful depends on the audience and decision; an explanation may describe inputs, model behavior, or a local rationale without revealing the model’s complete internal computation.

Also known as explainable AIRead definition AI governance

AI Fairness

AI fairness is the evaluation of whether an artificial intelligence system treats people or groups acceptably under a chosen fairness criterion. The relevant criterion depends on the decision, data, and affected population; different metrics can conflict, so the term does not imply one universal test or outcome.

Also known as algorithmic fairnessRead definition AI governance

AI Governance

AI governance is the organizational framework for making and overseeing decisions about artificial intelligence systems. It defines ownership, approval, risk review, documentation, monitoring, and change control so that responsibilities remain clear from initial design through operation and retirement.

Also known as artificial intelligence governanceRead definition AI governance

AI Impact Assessment (AIIA)

An AI impact assessment examines the expected effects of an artificial intelligence system on people, organizations, and the surrounding environment. It records the intended use, affected stakeholders, likely benefits and harms, uncertainty, and options for reducing or monitoring identified impacts.

Also known as AIIA, AI impact assessmentRead definition AI governance

AI Lifecycle Management

AI lifecycle management is the coordinated oversight of an artificial intelligence system as it is proposed, built or selected, validated, deployed, monitored, changed, and retired. It keeps the system’s purpose, ownership, evidence, and controls connected as technical and organizational conditions evolve.

Also known as AI lifecycleRead definition AI governance

AI Model Drift

AI model drift is a change in the relationship between a model’s inputs and the outcomes it is expected to predict or classify. It can appear as changed input patterns, changed target behavior, or declining performance, and must be distinguished from random variation in observed results.

Also known as model driftRead definition AI governance

AI Model Inventory

An AI model inventory is a maintained record of artificial intelligence models an organization develops, acquires, or uses. Useful records identify a model, its owner, intended purpose, dependencies, lifecycle state, and the evidence or reviews associated with that use.

Also known as model inventoryRead definition Regulation & risk

AI Risk Management

AI risk management is the repeated process of identifying, analyzing, treating, and monitoring risks associated with an artificial intelligence system. It considers the system’s intended use and context, and assigns decisions to people with authority to accept, reduce, transfer, or avoid a risk.

Also known as AI RMRead definition AI governance

AI Safety

AI safety is the technical and organizational work of reducing the likelihood and impact of harmful or unreliable behavior from artificial intelligence systems. It can include testing, access boundaries, monitoring, human review, and response planning, selected for a system’s capabilities and use context.

Also known as artificial intelligence safetyRead definition AI governance

Algorithmic Bias

Algorithmic bias is a systematic pattern in an automated system that can produce uneven or unjust outcomes. It may stem from data collection, labeling, model design, thresholds, or deployment context; identifying a disparity does not by itself explain its cause or decide whether it is legally discriminatory.

Also known as automated decision biasRead definition Credentials & security

API key

An API key is a secret or identifier used by an application to present a credential to an API. Depending on the service, it may identify a client, authorize selected operations, or both; possession can be sufficient for use, so handling and scope matter.

Also known as API credentialRead definition Privacy & data

Australian Privacy Act

The Australian Privacy Act is a federal Australian law that establishes a framework for handling personal information by covered organizations and agencies. It includes the Australian Privacy Principles and other provisions; its application depends on the facts and current law.

Also known as Privacy Act 1988Read definition Privacy & data

Australian Privacy Principles (APPs)

The Australian Privacy Principles (APPs) are the principles in the Australian Privacy Act that set out a framework for handling personal information. They address areas such as collection, use, disclosure, data quality, security, access, and transparency for entities to which they apply.

Also known as APPs, Australian Privacy PrinciplesRead definition Regulation & risk

Australian Prudential Regulation Authority (APRA)

The Australian Prudential Regulation Authority (APRA) is Australia’s independent prudential regulator for parts of the financial system, including banking, insurance, and superannuation. It supervises regulated institutions with a focus on their financial safety and stability.

Also known as APAC - APRA, APRARead definition Credentials & security

Authorization header

The HTTP Authorization header carries credentials that a client presents to the server responsible for the requested resource. The scheme determines how the value is interpreted; the header is separate from Proxy-Authorization, which is intended for a proxy hop.

Also known as HTTP Authorization headerRead definition Credentials & security

Auto-Auth mode

Auto-Auth mode is a proxy operating mode that applies configured credentials to requests for approved services. For HTTPS CONNECT requests that require request rewriting, it inspects TLS traffic and needs the client to trust the proxy certificate authority; it is not opaque TLS pass-through.

Also known as Auto-AuthRead definition

B

2 terms

Also known as bearer credentialRead definition AI governance

Bearer token

A bearer token is a credential whose holder can exercise the permissions associated with it, without proving possession of a separate private key. The resource server evaluates the token and its context; the token’s name alone does not reveal its exact scope or lifetime.

Bias Detection

Bias detection is the process of looking for systematic differences or unwanted patterns in a dataset, model, or automated decision process. It uses methods chosen for the task and available evidence, and findings require interpretation before anyone concludes that a system is fair or unfair.

Also known as bias testingRead definition

C

15 terms

Also known as capability credentialRead definition Privacy & data

Capability token

A capability token is a credential that conveys authority to perform a defined action on a resource. Systems can limit that authority by scope, audience, use count, or expiry; the token’s actual capabilities are determined by how the receiving service validates it.

CCPA (California Consumer Privacy Act)

The California Consumer Privacy Act (CCPA) is a California privacy law concerning certain businesses’ handling of personal information and consumer privacy rights. The law has been amended, and its application depends on definitions, thresholds, exceptions, and the facts of a particular activity.

Also known as CCPARead definition Credentials & security

Certificate authority (CA)

A certificate authority (CA) is an entity or key hierarchy that issues digital certificates binding public keys to identities under defined rules. Clients use configured trust anchors to decide whether a certificate chain is acceptable; trust depends on the certificate, validation, and client configuration.

Also known as CA, proxy CARead definition Privacy & data

Chile's Data Protection Law

Chile's data protection law is the national legal framework that governs the processing of personal data in Chile. Its requirements, interpretation, and applicability depend on the applicable provisions and the circumstances of the organization and processing activity.

Also known as Chilean data protection lawRead definition Proxy & networking

CIDR notation

CIDR notation represents an IP network as an address followed by a prefix length, such as an address with “/24”. The prefix length indicates how many leading bits identify the network and therefore which addresses belong to that range.

Also known as Classless Inter-Domain Routing notationRead definition Privacy & data

CMP (Consent Management Platform)

A consent management platform (CMP) is software that presents choices about specified data uses and records related preference signals. Its functions can include a notice interface, preference storage, and integrations with other systems; the platform itself does not establish that a consent request is valid.

Also known as CMP, consent platformRead definition Proxy & networking

Common Expression Language (CEL)

Common Expression Language (CEL) is a non-Turing-complete expression language for evaluating predicates and values in host applications. The language defines syntax and semantics, while each application decides which variables, functions, and operations are available.

Also known as CELRead definition Proxy & networking

CONNECT tunnel

An HTTP CONNECT request asks a proxy to establish a bidirectional tunnel to a destination authority. After the proxy accepts the tunnel, it normally relays bytes rather than interpreting the application protocol carried inside it.

Also known as HTTP CONNECT tunnelRead definition Proxy & networking

Control plane

A control plane is the part of a distributed system that manages configuration, coordination, and lifecycle decisions for other components. It may provision services, distribute policy, or report status, while data-processing components handle application traffic.

Also known as management planeRead definition Privacy & data

Cookie Consent

Cookie consent is a person’s choice about the placement or use of cookies and similar technologies, where consent is the applicable basis for that activity. A consent interface communicates choices, while the actual legal and technical requirements depend on the technology, purpose, and jurisdiction.

Also known as consent for cookiesRead definition Privacy & data

CPRA (California Privacy Rights Act)

The California Privacy Rights Act (CPRA) is a California statute that amended and expanded the state’s consumer privacy framework. It is commonly discussed with the CCPA because the two are connected; the applicable requirements should be read in the current California legal context.

Also known as CPRARead definition Credentials & security

Credential injection

Credential injection is the controlled insertion of a stored credential into a request as it passes through a component that can inspect and modify that request. For HTTPS traffic, rewriting application headers requires TLS termination or inspection; an opaque CONNECT tunnel cannot be rewritten.

Also known as secret injectionRead definition Credentials & security

Credential rotation

Credential rotation is the replacement of a credential with a new value and the retirement of the previous one. It can reduce the period during which an exposed or stale credential remains usable, provided every dependent service is updated and the old value is actually revoked.

Also known as secret rotationRead definition Credentials & security

Credential vault

A credential vault is a managed store for sensitive values such as API keys, passwords, or tokens. It separates secret storage from ordinary application configuration and provides controlled operations for creating, binding, using, or retiring credentials.

Also known as secret vaultRead definition Privacy & data

Customer Data Rights

Customer data rights are the choices or legal rights people may have over information associated with them. Depending on the framework and context, these can include access, correction, deletion, portability, objection, or withdrawal of a preference.

Also known as consumer data rightsRead definition

D

20 terms

Also known as information classificationRead definition Privacy & data

Data Classification

Data classification is the practice of assigning information to categories based on properties such as sensitivity, confidentiality, or operational importance. A classification scheme gives people and systems a shared way to apply handling rules, retention choices, and access controls.

Data Discovery

Data discovery is the process of finding and describing data assets across systems, storage locations, and workflows. It can combine interviews, system inventories, scanning, and metadata review to identify what information exists and how it is used.

Also known as data inventory discoveryRead definition Privacy & data

Data Ethics

Data ethics is the consideration of values and responsibilities involved in collecting, analyzing, sharing, and using information. It asks whether practices respect people, avoid unjustified harm, and align with stated purposes, alongside any applicable legal and technical requirements.

Also known as ethical data useRead definition Privacy & data

Data Lineage

Data lineage describes where data originated, how it moved, and what transformations or uses occurred along the way. It connects sources, processing steps, and destinations so a reviewer can trace a value or dataset through a system.

Also known as data provenanceRead definition Privacy & data

Data Mapping

Data mapping is the documentation of information categories, sources, purposes, systems, recipients, and movement within a defined process. It can be a table or diagram that makes relationships between data and operations understandable to reviewers.

Also known as data flow mappingRead definition Privacy & data

Data Minimization

Data minimization is the practice of limiting collection, use, access, and retention to information that is justified for a defined purpose. It encourages teams to ask whether each field is needed and whether a less identifying or less detailed alternative can serve the task.

Also known as information minimizationRead definition Proxy & networking

Data plane

A data plane is the part of a system that processes application traffic or data operations according to configured behavior. In a proxy architecture, it typically handles client connections and forwards requests while the control plane manages policy and lifecycle.

Also known as traffic planeRead definition Privacy & data

Data Privacy

Data privacy concerns how information about people is collected, used, shared, stored, and governed. It includes people’s interests and choices, organizational responsibilities, and the controls that shape data processing in a specific context.

Also known as information privacyRead definition Privacy & data

Data Retention Policy

A data retention policy states how an organization decides to keep, archive, or dispose of information. It connects information types and purposes with responsible owners, retention criteria, and the process used to apply those decisions.

Also known as retention policyRead definition Proxy & networking

Dedicated proxy

A dedicated proxy is an endpoint and its supporting resources allocated for a particular customer, workload, or purpose rather than shared among a broader set of unrelated users. The isolation boundary depends on the deployment and does not by itself guarantee a static IP or a specific security property.

Also known as single-tenant proxyRead definition Privacy & data

Digital Personal Data Protection Act (DPDPA)

The Digital Personal Data Protection Act (DPDPA) is India’s national law concerning the processing of digital personal data. Its meaning and application are shaped by the statute and related legal materials, as well as the circumstances of the processing being considered.

Also known as DPDPA, India DPDP ActRead definition Proxy & networking

DNS filtering

DNS filtering applies rules to domain-name queries and can allow, block, or alter a DNS response based on configured criteria. It acts during name resolution, before an application connects to an address, and does not inspect every later packet or application request.

Also known as DNS blockingRead definition Proxy & networking

DNS over HTTPS (DoH)

DNS over HTTPS (DoH) carries DNS messages inside HTTPS requests between a client and a DoH resolver. Encryption protects that transport from passive observation on the intervening network, but the resolver still receives the DNS question and can apply its own logging or policy.

Also known as DoHRead definition Proxy & networking

DNS resolver

A DNS resolver answers queries that map domain names to DNS records. A recursive resolver obtains or retrieves an answer for a client, often using caches and queries to other DNS servers; a stub resolver usually sends requests to a recursive resolver.

Also known as recursive resolverRead definition Proxy & networking

DNS tunneling

DNS tunneling encodes non-DNS data inside DNS queries and responses to move information over a channel that appears to be DNS. It can be used for legitimate constrained communications, but attackers may also use it to evade controls or move data.

Also known as DNS tunnelRead definition Proxy & networking

Domain generation algorithm (DGA)

A domain generation algorithm (DGA) is a procedure that produces domain-name candidates from inputs such as a seed, time value, or internal state. Some malware uses DGAs to find command infrastructure, while similar generation techniques can also have benign uses.

Also known as DGA, domain generation algorithmRead definition Regulation & risk

DORA (Digital Operational Resilience Act)

The Digital Operational Resilience Act (DORA) is a European Union regulation focused on digital operational resilience in the financial sector. It addresses how covered financial entities manage information and communication technology risk and related third-party dependencies.

Also known as DORA, Digital Operational Resilience Act, DORA RegulationRead definition Regulation & risk

DORA Regulation

Another label for DORA; one canonical entry.

DORA Regulation is another label for the Digital Operational Resilience Act (DORA). This glossary treats the two labels as referring to the same European Union regulation, not as separate instruments with different meanings.

Read definition Privacy & data

DPIA (Data Protection Impact Assessment)

A data protection impact assessment (DPIA) is a structured review of how a defined personal-data processing activity may affect people’s privacy. It records the processing, relevant risks, planned safeguards, and decisions under the process applicable to the organization.

Also known as DPIA, data protection impact assessmentRead definition Privacy & data

DSAR (Data Subject Access Request)

A data subject access request (DSAR) is a request by a person to exercise a data-related right, commonly to obtain access to personal information. The available right, response process, and terminology depend on the privacy framework and the facts of the request.

Also known as DSAR, data access requestRead definition

E

4 terms

Proxy & networking

Egress filtering

Egress filtering applies policy to traffic leaving a network or workload, such as limiting destination addresses, ports, protocols, or request attributes. It can be enforced at different layers, and the available signals depend on where the control is placed.

Also known as outbound traffic filteringRead definition Regulation & risk

Enterprise Risk Management (ERM)

Enterprise risk management (ERM) is an organization-wide approach to identifying, evaluating, responding to, and monitoring risks that may affect objectives. It gives leadership and operational teams a shared structure for discussing risk across functions rather than treating each concern in isolation.

Also known as ERMRead definition Credentials & security

Envelope encryption

Envelope encryption protects data with a data-encryption key and then protects that key with another key, often managed by a key-management system. The encrypted data and wrapped key can be stored together, while the higher-level key controls access to decryption.

Also known as key-wrapping encryptionRead definition Regulation & risk

EU AI Act

The EU AI Act is a European Union regulation establishing a legal framework for artificial intelligence systems. It uses a risk-based structure and addresses topics such as system categories, responsibilities, and governance; its application depends on the relevant legal provisions and facts.

Also known as European Union Artificial Intelligence Act, AI ActRead definition

F

4 terms

Proxy & networking

Firewall mode

Firewall mode is a proxy operating mode that evaluates configured request rules to determine whether traffic should be allowed, denied, or handled for review. Rules expressed in Common Expression Language can inspect attributes available to the proxy; the mode is not a claim of complete default-deny or SSRF protection.

Also known as proxy firewall modeRead definition Proxy & networking

Firewall rule

A firewall rule is a condition and action used to control whether traffic is allowed, denied, or routed for another decision. In an application proxy, the rule can evaluate only the request attributes and connection details that the proxy can observe.

Also known as proxy ruleRead definition Proxy & networking

Forward proxy

A forward proxy sits between a client and destinations the client wants to reach. The client sends requests to the proxy, which applies its configured routing or policy and makes the upstream connection; the destination generally sees the proxy’s outbound connection rather than a direct client connection.

Also known as outbound proxyRead definition AI governance

Foundation Models

A foundation model is a machine-learning model trained on broad data that can be adapted or used for multiple downstream tasks. The term describes a model’s general-purpose role in a technical workflow, not a specific architecture, capability level, or quality guarantee.

Also known as foundation modelRead definition

G

3 terms

Also known as GDPRRead definition Regulation & risk

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a European Union regulation governing the processing of personal data. It establishes a rights and obligations framework for activities within its scope; whether a specific organization or processing operation is covered requires legal analysis.

GRC

Governance, risk, and compliance (GRC) is an umbrella approach for coordinating decision-making, risk oversight, and adherence to requirements across an organization. The acronym can refer to a program, operating model, or supporting tools rather than to one universal standard.

Also known as governance, risk, and complianceRead definition AI governance

Guardian Agents

Guardian agents are software agents or agent-like controls intended to observe or constrain the actions of another agent. The label is used for a design pattern, not a standardized technical category; implementations vary in authority, visibility, and ability to intervene.

Also known as agent guardrailsRead definition

H

5 terms

Also known as host-bound credentialsRead definition Proxy & networking

Host-scoped credentials

Host-scoped credentials are credentials configured for use only with a named destination host or host pattern. Scoping helps prevent a secret intended for one service from being attached to requests for an unrelated destination, subject to the matching rules of the implementation.

HTTP proxy

An HTTP proxy is a proxy that uses HTTP protocol conventions to receive and forward client requests. It can send ordinary HTTP requests onward or use CONNECT to establish a tunnel for another protocol, commonly TLS, depending on its implementation and configuration.

Also known as HTTP forward proxyRead definition Proxy & networking

HTTPS proxy

An HTTPS proxy uses TLS for the client-to-proxy connection. That transport protects the connection to the proxy; it is distinct from sending a request to an HTTPS destination through an HTTP proxy using CONNECT, where the destination TLS session runs inside the tunnel.

Also known as TLS-to-proxyRead definition AI governance

Human-in-the-loop approval (HITL)

Human-in-the-loop approval (HITL) is a workflow in which a person reviews or authorizes a system action before it proceeds. The person’s role, information, authority, and ability to reject or change the action determine whether the review is meaningful.

Also known as HITL, human approvalRead definition Proxy & networking

Hyperproxy

A Hyperproxy receives a client’s outbound request and can add a configured upstream credential before forwarding it. The client authenticates to the proxy separately from the API credential sent to the destination; HTTPS injection requires the proxy to inspect the request rather than pass through opaque TLS.

Also known as credential-injecting forward proxy, credential injecting proxy, credential-injecting proxyRead definition

I

4 terms

Also known as incident response procedureRead definition Privacy & data

Incident Response Plan

An incident response plan documents how an organization prepares for, detects, assesses, contains, and recovers from security or operational incidents. It identifies roles, decision paths, communications, and practical steps that responders can follow under pressure.

Indonesia Personal Data Protection Law

Indonesia’s Personal Data Protection Law is the country’s national legal framework for personal-data processing. Its interpretation and application are shaped by the law and related legal materials, together with the organization, people, and processing activity being assessed.

Also known as Indonesia PDP Law, PDP LawRead definition Proxy & networking

Internet Content Adaptation Protocol (ICAP)

Internet Content Adaptation Protocol (ICAP) is a protocol for an HTTP proxy to delegate content adaptation or related processing to an external service. The proxy sends a request or response context to an ICAP server, which returns a result according to the configured service.

Also known as ICAPRead definition Proxy & networking

IP allowlist

An IP allowlist is a rule set that permits connections from specified IP addresses or ranges and rejects other sources at the enforcing boundary. It is a network access control, not user authentication, and the observed source may be a NAT gateway or intermediary rather than an individual device.

Also known as IP whitelist, source IP allowlistRead definition

K

1 term

Also known as KMSRead definition

Key management service (KMS)

A key-management service (KMS) provides controlled operations for creating, storing, using, and managing cryptographic keys. Applications may request operations such as encrypting data or wrapping a data key without directly handling the long-term key material.

L

1 term

Also known as principle of least privilegeRead definition

Least privilege

Least privilege is the practice of granting an identity or component only the permissions needed for its defined task. Permissions should be scoped by action, resource, and context where possible, then reviewed as responsibilities change.

M

4 terms

Also known as Malaysia PDPARead definition Credentials & security

Malaysia Personal Data Protection Act (PDPA)

Malaysia’s Personal Data Protection Act (PDPA) is a national law concerning personal-data processing in the context defined by the statute. Its scope and obligations depend on the current legal text, related requirements, and the facts of the processing activity.

ML-DSA

ML-DSA is a post-quantum digital-signature algorithm standardized by NIST. It enables a verifier to check that a signed message was authorized by the holder of a signing key and has not changed; it does not encrypt the message or establish a shared secret.

Also known as Module-Lattice-Based Digital Signature AlgorithmRead definition Credentials & security

ML-KEM

ML-KEM is a post-quantum key-encapsulation mechanism standardized by NIST for establishing a shared secret between parties. It is a key-establishment algorithm, not an encryption mode for application data; a protocol uses the resulting secret with an appropriate symmetric cipher.

Also known as Module-Lattice-Based Key-Encapsulation MechanismRead definition Regulation & risk

Model Risk Management (MRM)

Model risk management (MRM) is the process of identifying and controlling risks that arise when a model is developed, implemented, or used to inform decisions. It can include independent review, testing, documentation, monitoring, and governance appropriate to the model’s role.

Also known as MRMRead definition

N

3 terms

Also known as NIS2Read definition AI governance

NIS2 Directive

The NIS2 Directive is a European Union directive concerning cybersecurity and resilience for covered entities in specified sectors. It establishes a framework that member states implement through national law, so the detailed rules relevant to an organization may depend on local implementation.

NIST AI Risk Management Framework (AI RMF)

The NIST AI Risk Management Framework (AI RMF) is a voluntary resource from the U.S. National Institute of Standards and Technology for organizing AI risk management. It provides functions and guidance that organizations can adapt to their context rather than a certification or legal determination.

Also known as NIST AI RMF, AI RMFRead definition Proxy & networking

NXDOMAIN

NXDOMAIN is a DNS response code indicating that the queried domain name does not exist in the relevant DNS namespace. It is different from an existing name that lacks a requested record type, and it describes a lookup result rather than an application-level HTTP error.

Also known as DNS name errorRead definition

P

8 terms

Also known as Philippines DPA, Republic Act No. 10173Read definition Credentials & security

Philippines Data Privacy Act (DPA)

The Philippines Data Privacy Act is a national law concerning the protection and processing of personal information in the Philippines. The statute is commonly identified as Republic Act No. 10173; applicable interpretation depends on the legal text and circumstances.

Post-quantum cryptography

Post-quantum cryptography (PQC) refers to cryptographic algorithms designed to resist attacks from both conventional and sufficiently capable quantum computers. It includes different purposes, such as key establishment and digital signatures; the term does not mean every algorithm or system is invulnerable.

Also known as PQCRead definition Privacy & data

Privacy-Enhancing Technologies (PETs)

Privacy-enhancing technologies (PETs) are technical methods designed to reduce exposure of personal or sensitive information while enabling a defined computation or use. Examples vary widely, from data separation to cryptographic techniques; no single tool removes every privacy risk.

Also known as PETs, privacy-enhancing technologyRead definition Proxy & networking

Private DNS server

A private DNS server resolves names for a private network or a defined set of clients. It can answer from internal zones, forward queries to another resolver, or apply organization-specific policy, but its privacy and security depend on the network and configuration around it.

Also known as private resolverRead definition Credentials & security

Proxy authentication

Proxy authentication is the process by which a client proves its identity or presents an access credential to a proxy. It governs access to the proxy itself and is distinct from the upstream credential that the proxy may send to a destination API.

Also known as proxy authRead definition Proxy & networking

Proxy IP

A proxy IP is an IP address assigned to or used to reach a proxy listener. It is distinct from the client’s source IP and may also differ from the egress IP that a destination sees when the proxy makes an upstream connection.

Also known as proxy addressRead definition Proxy & networking

Proxy port

A proxy port is a numbered transport endpoint on which a proxy process accepts connections. A client combines the proxy’s address and port to reach that listener; the port identifies a service endpoint, not a separate machine or public IP address.

Also known as proxy listener portRead definition Credentials & security

Proxy-Authorization header

Proxy-Authorization is an HTTP request header used to present credentials to a proxy that has challenged the client. It is intended for the next proxy hop, not as the origin server’s Authorization header, and its confidentiality depends on the client-to-proxy connection.

Also known as Proxy-AuthorizationRead definition

R

3 terms

AI governance

Responsible AI

Responsible AI is an approach to designing, developing, and using artificial intelligence with attention to people, risks, accountability, and the intended purpose. It is a broad organizational concept rather than one technical standard or a guarantee about system outcomes.

Also known as RAIRead definition Proxy & networking

Reverse proxy

A reverse proxy accepts requests on behalf of one or more backend services and forwards them to an appropriate origin. It commonly provides a stable front door for routing, TLS termination, or load distribution, while clients address the proxy rather than selecting a backend directly.

Also known as inbound proxyRead definition Regulation & risk

Risk Register

A risk register is a structured record of identified risks, their context, owners, assessment, and planned responses. Teams use it to track decisions over time; the fields and scoring method vary according to the organization and the risks being managed.

Also known as risk logRead definition

S

9 terms

Also known as credential expirationRead definition Credentials & security

Secret expiry

Secret expiry is a configured point after which a secret should no longer be accepted or used. The effect depends on the system enforcing the expiry; a date stored as metadata does not revoke the credential at an upstream service unless that service or workflow acts on it.

Secret placeholder

A secret placeholder is a marker in a request or configuration that a trusted component recognizes and replaces with a stored credential. It allows a client to refer to a secret without containing its plaintext value, but only works when the request reaches a component configured to perform that substitution.

Also known as credential placeholderRead definition Credentials & security

Secure share

A secure share is Hyperproxy’s expiring, use-limited proxy capability: it lets a recipient use an approved proxy path without receiving the stored upstream key. The share token itself is a sensitive bearer credential.

Also known as secure sharingRead definition Credentials & security

Server-side request forgery (SSRF)

Server-side request forgery (SSRF) is a vulnerability in which an application can be induced to make a network request chosen or influenced by an attacker. The risk depends on what destinations the server can reach, what response data is exposed, and what authority the application carries.

Also known as SSRFRead definition Credentials & security

Service binding

A service binding associates a stored credential or policy with a named service context, such as an approved upstream host or application. The binding defines where a secret may be used; its exact matching and enforcement behavior depend on the system implementing it.

Also known as credential bindingRead definition Proxy & networking

Sidecar

A sidecar is a helper process or container deployed alongside an application to provide a supporting capability. A sidecar proxy can handle network traffic for the application, allowing some routing or policy behavior to be managed outside the application’s own code.

Also known as sidecar proxyRead definition Privacy & data

Singapore Personal Data Protection Act (PDPA)

Singapore’s Personal Data Protection Act (PDPA) is a national law that governs aspects of private organizations’ handling of personal data. Its requirements and application depend on the current legal framework, organizational role, and processing activity.

Also known as Singapore PDPARead definition Regulation & risk

South Korea AI Basic Act

South Korea’s AI Basic Act is a national framework for developing and using artificial intelligence. It combines support for AI adoption with governance requirements for areas such as transparency, safety, high-impact AI, and generative AI; the applicable duties depend on the system and legal framework.

Also known as AI Basic Act of South KoreaRead definition Proxy & networking

Static IP address

A static IP address is an address intended to remain assigned to a network interface or service over time rather than changing with each connection or lease. The assignment and continuity depend on the provider and network configuration.

Also known as fixed IP addressRead definition

T

5 terms

Also known as technology risk managementRead definition Privacy & data

Tech Risk Management

Technology risk management is the process of identifying, assessing, treating, and monitoring risks related to technology systems and their use. It can cover availability, security, change, data, suppliers, and operational dependencies according to an organization’s needs.

Thailand Personal Data Protection Act

Thailand’s Personal Data Protection Act (PDPA) is a national law concerning personal-data processing in Thailand. Its application and interpretation depend on the current legal framework and the circumstances of the organization and activity being assessed.

Also known as Thailand PDPARead definition Regulation & risk

Third-Party Risk Management (TPRM)

Third-party risk management (TPRM) is the process of understanding and addressing risks introduced by suppliers, service providers, and other external parties. It can include due diligence, contract review, access decisions, monitoring, and plans for changing or ending a relationship.

Also known as TPRM, vendor risk managementRead definition Credentials & security

TLS inspection

TLS inspection is the termination of an encrypted TLS connection by an intermediary so it can inspect or modify the protected application traffic. A client must trust the intermediary’s certificate authority for the inspected connection; inspection changes the end-to-end trust boundary and should be explicit.

Also known as TLS interception, SSL inspectionRead definition AI governance

Trustworthy AI

Trustworthy AI describes artificial intelligence designed and operated in ways that people can reasonably rely on for a stated purpose. The term commonly brings together reliability, accountability, transparency, and attention to affected people, but it is not one measurable property shared by every system.

Also known as trustworthy artificial intelligenceRead definition

V

1 term

Also known as supplier risk assessmentRead definition

Vendor Risk Assessment

A vendor risk assessment is a review of risks associated with a particular supplier and the services it provides. It considers relevant factors such as data access, security practices, operational dependency, and the organization’s ability to respond to a disruption.

W

1 term