Privacy and computation have always had an uneasy relationship: traditional encryption locks data away safely, but the moment a system needs to actually use that data, the lock has to come off. Homomorphic encryption upends that assumption entirely. This episode of Automatic explores the technology that makes encrypted computation possible — and what it means for any organization that processes sensitive information across systems it doesn't fully control.

The episode covers the core mechanics of homomorphic encryption, how it differs from conventional approaches, and what's holding back broader deployment. Key points include:

• Where traditional encryption falls short: Standard encryption protects data at rest and in transit, but requires data to be decrypted before any computation can run — and that brief window of exposure is where many security failures originate.
• How homomorphic encryption works: Encrypted data retains enough mathematical structure for approved operations to be performed on it directly, so an external processor can return a correct, meaningful result without ever accessing the underlying plaintext.
• Three tiers of the technology: Partially homomorphic schemes support a single operation type; somewhat or leveled homomorphic schemes handle both addition and multiplication up to a defined complexity ceiling; fully homomorphic encryption (FHE) supports arbitrary computation with no ceiling — at a steep performance cost.
• The noise problem: Each encrypted operation accumulates internal mathematical distortion. Left unmanaged, this "noise" can make a ciphertext impossible to decrypt correctly, and handling it carefully is a core engineering challenge in the field.
• The case for outsourced computation: Homomorphic encryption allows one party to delegate processing to a third party without revealing readable data — a meaningful shift for organizations that rely on distributed infrastructure or cross-boundary data collaboration.
• Performance as the honest obstacle: Encrypted operations can be dramatically slower and more memory-intensive than their plaintext equivalents. The technology isn't suitable for every workload, but hardware acceleration and more efficient schemes have been steadily narrowing the gap.

The broader argument the episode makes is philosophical as much as technical: privacy shouldn't have to step aside the moment useful work begins. As the engineering matures, the range of workloads where homomorphic encryption makes practical sense will continue to expand. For more on this topic, explore the source article this episode is based on. If the intersection of privacy and AI is on your radar, the episode Private LLMs and the End of Audit Season Dread is a natural companion listen.

Automatic

Compliance reviews have long been defined by last-minute data hunts, fragmented systems, and the kind of late nights that no amount of emergency snacks can fix. This episode of Automatic examines why that pain is largely a structural problem — and how private large language models are offering a credible alternative. Drawing on this in-depth look at private LLMs and audit readiness, the episode unpacks the architecture, the practical workflow changes, and the strategic shift from reactive firefighting to proactive governance.

Here's what the episode covers:

• The root causes of audit chaos — fragmented data silos, statistical sampling blind spots, and the persistent loss of why decisions were made, not just who made them and when.
• How private LLMs work as compliance infrastructure — deployed entirely on company servers behind the firewall, these models stitch policies, approvals, tickets, and transactional records into a single, queryable semantic layer.
• Immutable interaction ledgers — every query and system response is hashed and time-stamped to an append-only log, making gaps as visible and auditable as the records themselves.
• Role-based access and auto-generated evidence packs — fine-grained permissions ensure each team sees only what they should, while the model automatically assembles the documents and cross-references needed to satisfy specific control objectives.
• Continuous control testing — rather than a once-a-year point-in-time review, the model compares daily activity against frameworks like SOC 2 or ISO 27001 in real time, flagging deviations the moment they appear and logging remediation steps with full context.
• Explainability as a compliance asset — outputs cite specific policy clauses and source data in plain language, giving auditors and legal teams the transparent reasoning chain that turns AI-assisted work into a governance strength rather than a liability.

The episode also touches on the human dimension: teams freed from weeks of frantic documentation prep are less error-prone and easier to work with — a practical operational benefit that compounds over time. The broader argument is that the organisations investing now in private AI infrastructure aren't just smoothing out audit season; they're building durable operational trust that extends well beyond any single review cycle.

More from the show: if you enjoyed this episode, check out Agentic AI Is Reshaping the Energy Grid — Here's How for another look at how AI is transforming high-stakes, regulated industries.

LLM

The energy and utilities industry runs on relentless, high-stakes decision-making — and most of it happens across systems that were never built to work together. This episode of Automatic examines why agentic AI is gaining traction in this sector faster than almost any other, drawing on the full research report on agentic AI for energy and utilities to map the market, the operational pressures, and the real-world use cases driving adoption.

The episode covers the full arc — from the market numbers to the on-the-ground reality of where agents are already showing up in utility operations:

• A market being built in real time: Global AI spend in energy and utilities is projected to grow from roughly $13–15 billion in 2023 to $80–100 billion by 2030, with agentic AI specifically growing at 35–45% annually.
• Three converging pressures: A quarter of the U.S. utility workforce is approaching retirement, renewable energy is increasing grid volatility, and aging infrastructure is being replaced too slowly — creating an industry that doesn't just want automation, it needs it.
• The three-stage shift: The industry is moving from SaaS systems of record, through AI-assisted workflows, and into the third stage — agentic systems that can plan, execute, and adapt across entire workflows with minimal hand-holding.
• Where agents land first: The practical first wave isn't "AI runs the grid" — it's agents handling outage triage, predictive maintenance workflows, regulatory filings, crew dispatch recommendations, and demand response coordination, with humans retaining accountability.
• Multi-agent systems as the real unlock: In complex environments like distributed energy and grid operations, layered agent architectures — where separate agents handle forecasting, monitoring, market participation, and compliance in parallel — consistently outperform single-model deployments.
• The actual bottleneck: Data integration, not model performance or compute, is what determines success or failure. Unifying SCADA, IoT, and enterprise data is the strategic foundation everything else depends on.

The episode closes with a practical framework for organizations ready to move beyond pilots: start with high-frequency, repetitive decisions; invest in orchestration over models; build internal capability to supervise and refine agent behavior; and design for gradual autonomy rather than attempting full automation on day one. More from the show: listen to The Enterprise Knowledge Loop: Capture, Train, Automate for a deeper look at how organizations build the internal knowledge infrastructure that makes agentic systems work.

Automatic