Shift-Left Compliance

Tuesday, March 24, 2026 - 11:50 am12:35 pm

Bharath Modhipalli and Karanveer Anand, Google

The traditional "compliance tax" of reactive auditing is failing as systems scale. This talk introduces "Shift-Left Compliance," a framework that transforms compliance from an afterthought into an intrinsic system property. We will demonstrate how to implement Compliance-as-Code using tools like Open Policy Agent (OPA), and how to integrate automated checks into your CI/CD pipeline to stop violations before they deploy. Join us to learn how to design "born compliant" systems, prevent configuration drift, and significantly reduce engineering toil by treating regulatory requirements as code.

Bharath Modhipalli is a Staff Site Reliability Engineer (SRE) and Tech Lead at Google Workspace in Sunnyvale, California. He currently serves as the lead for the Apps Core Infrastructure SRE team, where he focuses on the reliability and scalability of foundational systems for Google Workspace.

Karanveer Anand is a Technical Program Manager for Google SRE, based in Sunnyvale, California. He oversees Workspace reliability, managing a portfolio of projects aimed at enhancing the reliability of infrastructure and ensuring customer compliance.

BibTeX
@conference {316316,
author = {Bharath Modhipalli and Karanveer Anand},
title = {{Shift-Left} Compliance},
year = {2026},
address = {Seattle, WA},
publisher = {USENIX Association},
month = mar
}

Presentation Video