Signal Check

Alan Wright

31 Mar 2026 — 1 min read

"An introduction to the receipts."

This is The Sovereign Auditor. A newsletter from the Isle of Man, published by someone who runs their own infrastructure because the alternative is trusting corporations whose business model is you.

I’m Alan Wright. Director of The Haunted Lighthouse Limited. Cyber Essentials certified. ICO registered. I’ve spent years building sovereign infrastructure for clients who’ve worked out that “the cloud” is just someone else’s computer with a better marketing budget.

This newsletter is about the gap between what Big Tech promises and what it actually does. Data minimisation failures. AI governance theatre. The technical reality behind the privacy marketing. The age verification “solutions” that are really identity harvesting operations in a compliance costume.

I’m not here to predict the future of AI or tell you which framework to adopt. I’m here to check the receipts.

If you work in professional services, law, or regulated industries and you’ve started to suspect that the tools you’ve been sold don’t hold up to scrutiny; you’re in the right place.

No affiliate links. No sponsored content. No AI slop.

The receipts are the point.

Alan

The ID Shakedown

Apple's age verification isn't a safety feature. I asked them to prove it. When iOS 26.4 landed, it brought something new to UK users: mandatory age verification. Hand over a government ID scan to update your phone. The stated reason is child safety. The unstated

The Tender Trap

How HMRC spent £473 million with no competition and called it procurement. On 23 March 2026, HMRC published a contract award notice. It makes uncomfortable reading. The UK’s tax collection agency has handed Amazon Web Services a £472.8 million contract to migrate services from three Fujitsu-run datacenters and

The FBI Director's Email and Why Your Password Hasn't Changed Since 2019

Or: How a Gmail account compromised in 2019 became a national security liability in 2026. The Setup In late 2024, Kash Patel, just weeks away from being appointed FBI Director,was warned by officials that his communications were being targeted by Iranian actors. Thanks for reading The Sovereign Auditor! Subscribe

House Rules. The European Commission writes the data protection rulebook. Three days ago, someone walked out with 350GB of its data.

On 24 March 2026, the European Commission detected a cyberattack against its cloud infrastructure. Three days passed before it told anyone. The Commission confirmed the breach publicly on 27 March. The attacker had accessed at least one Amazon Web Services account used to host Europa.eu -- the platform serving

Read more

The ID Shakedown

The Tender Trap

The FBI Director's Email and Why Your Password Hasn't Changed Since 2019

House Rules. The European Commission writes the data protection rulebook. Three days ago, someone walked out with 350GB of its data.