Talk to us!

Book a complimentary call to get an expert opinion on where you are on your compliance journey.

Book a Discovery Call

Published:

July 27, 2026

-

4

read

What a few weeks back on the frontline reminded me

Michael Bell, Co-founder, Acorn Compliance

Work in a team long enough and something sneaky happens.

Whatever role you play, the parts of the work you don't personally touch slowly turn into words you say in meetings. You see them in dashboards, hear them in standups, and you genuinely believe you still know what they feel like. You don't. Not quite. It happens to all of us; the builder loses touch with delivery, the practitioner loses touch with the product, everyone's view narrows to their own patch of the pitch.

For the past few weeks I've been playing a different position, back on the frontline of delivery, breach assessments with the clock running, data protection work for AI-enabled products, audit prep, policy reviews. And to be clear about why, nothing needed rescuing, nobody needed covering, and there was no gap to fill. Our delivery team does this every day, to a standard I had to work to keep up with. I chose to go in as extra capacity, because it had been too long since I'd felt this work in my hands, and I spent most of the time being the newest person on the rota.

Here's what it reminded me, and it runs deeper than process.

There is light in this work, and almost nobody talks about it

Compliance gets called box-ticking. The department of no. Spend one honest week actually doing it, and you won't say that again.

My seat these weeks was data protection, and I want to say what that work actually is, because "data protection" is a phrase that hides its own heart.

The people behind the records are often the most vulnerable people in the system. Patients whose conditions carry stigma, people whose safety can depend on confidentiality holding, families trusting a service with the most sensitive facts of their lives.

When you handle a breach assessment properly at nine on a difficult evening, when you design a verification process so a patient's privacy survives even a phone call to the wrong household, you are standing between vulnerable people and harm they will never see coming. Nobody thanks you, because when it works, nothing happens. That's a quiet act of kindness, done where nobody sees it, for people who deserve it most.

And from that seat I got a privileged view of something that genuinely moved me.

Part of my time went into redesigning how our clinical safety work flows, and into safety questions around AI products, which meant working closely alongside our clinical safety specialists without ever holding their pen. That's their work, and they're qualified for it in ways I'm not.

What I saw at close range were hazard logs built without flinching, every risk faced, every mitigation earning its place. A clinical safety case exists for one reason, so that a stranger the author will never meet comes to no harm.

Think about that for a moment. Somewhere in our industry, every day, someone sits down and puts their name to a document whose entire purpose is the wellbeing of a person they'll never see. Underneath all the acronyms, that's what this work is. And there's real beauty in it, the quiet kind that doesn't ask to be noticed.

I've always known this in my head. The frontline is where you feel it in your hands again.

The ripple

Here's the thing I keep coming back to. One hazard faced honestly makes one patient safer. One privacy process designed with care means a vulnerable person's trust holds. That patient is somebody's mother, somebody's son. The clinician who trusted that software goes home a little lighter. The founder who built it gets to keep building. The care reaches further, and none of these people ever meet the person who did the compliance work properly on a Tuesday afternoon.

That's how this works. You do one piece of work with genuine care, and the impact ripples out through people you'll never know. It's the same reason I write and make music: if one thing you create touches one person, the good of it travels beyond you.

Compliance, done right, is exactly that. It just wears a duller jacket.

The hours that simply didn't happen

I'll be honest, doing these weeks the old way would have flattened me.

I know what this workload costs by hand because I paid it for years, hunting through folders to work out which policy was in force, afternoons of cross-referencing before an audit, rebuilding a register because nobody trusted the last one. None of those hours happened. Current signed policies, one search away. Version history answering "what was in force" before anyone asked. Evidence already linked to the controls it supports, so audit prep meant reviewing a picture instead of painting one.

And here's why that matters beyond efficiency. Every hour the platform gives back is an hour that lands on the part of the work that carries the light, the judgement, the care, the promise.

We built Squirrel to return people to the part of compliance that's actually human. I've said that in pitches plenty of times. Living it on real deadlines is a different kind of proof.

The rough edges became gifts

Where I did hit friction, it turned into something. A document journey with a quiet dead end. A workflow that behaved differently when a real reviewer and a real author passed work between each other under pressure. Things no dashboard shows you, because analytics tells you what people did in the product, not what they did around it.

By afternoon, those were specified improvements. Within days, built, independently reviewed, queued for release, through the same review gate as everything we ship, because speed without that discipline is gambling with people's trust, and we don't gamble with that.

The standard belongs to the team

The most important thing these weeks made obvious is the standard our clients experience is set daily, quietly, by the team.

Our delivery specialists carried certifications, audits and statutory deadlines with total consistency, and welcomed me into the rota with warmth and patience.

Client success kept every engagement smooth, the kind of work that's invisible precisely when it's done well. Our clinical safety and medical device experts carried the judgements only they can carry, while I worked on making the path they walk smoother, and watching them work is an education. And everyone taught the newest member of the delivery team generously, which for a few weeks was me.

There's a particular warmth in a room where everyone quietly holds each other to something high. This is a team game, and this team plays it beautifully. The company rests on its people, and its people are exceptional.

And our clients, who carry more light than they know

Our clients are doing hard, honourable things, putting software in front of patients, carrying clinical safety responsibilities that keep serious people awake at night. Their product is care. Compliance is the promise they make so their care can reach people at all.

The client who asked the sharp question about a policy detail was being exactly as careful as their patients deserve. Working alongside people like that, you remember why this sector is worth serving. They hold us to the standard their work demands, and it's a privilege to be held to it.

Backed by a warranty, proven by the team

One more thing worth mentioning. We put a warranty behind our assured work, because talk is cheap in this industry and I wanted us to put our money where our mouth is. If work we've assured gets challenged, we fix it at our cost. That's the deal.

Here's the bit I'm quietly proud of: In all the time we've offered it, not one client has ever needed to use it. Not once.

That comes from a team doing the unglamorous things properly, week after week, the extra review before something goes out, the awkward question asked internally before a client can ask it, the document held back a day because it wasn't right yet. The warranty exists so clients don't have to take our word for it. So far, the team's made sure it's never been needed.

Audits are the other side of the same coin. Once in a while, someone walks in and asks the team to prove all of it: every signature, every decision, every quiet Tuesday, and for a team that's done the work properly, that's not a day to dread at all. It's the one day all that quiet work finally gets seen, and the standard holds the way it always held.

What I'm keeping

The team is growing, and the rota will rebalance as it does. What these weeks gave me is coming with me, straight back into the platform, where the rough edges I felt firsthand are already becoming fixes, and straight into my conversations with clients, where I can talk about their compliance from inside the work rather than above it.

Every lesson from the frontline has somewhere to go. Somewhere tonight a clinician is using software somebody assured. Somewhere a patient is safer because a hazard was faced honestly in a document they'll never read. Somewhere a vulnerable person's privacy is holding, quietly, because someone designed it to hold. The ripple is already moving, out through people none of us will meet.

That's the work. It was never boxes. It was always people, keeping their word, and passing the light along.

Sign up to our newsletter to stay updated on all things compliance and regulation!

We never send spam.
Unsubscribe at any time.

Start 14 -day free trial
Thank you for subscribing to our newsletter! We'll keep you posted on the latest compliance developments!
Oops! Something went wrong while submitting the form.
Follow Us