One assistant for the full regulatory stack
Every account starts with the supplier register and what comes with it: your suppliers' documents read and quoted, change watching, sanctions screening against the EU and UN lists — an aid a person in your organisation reviews, not a guarantee — customer questionnaires, systems with SLA and contacts, and PDF packages. Each module then covers one EU regulation end-to-end — risk assessment, compliance checklists, evidence management, and audit-ready documentation. The EU AI Act module is live today; add more as they launch.
Supplier register, questionnaires, change watching
GDPR Art. 28 and 30 · NIS2 Art. 21 · EU Data Act
Every account starts here: the suppliers you depend on and the systems that depend on them, their published documents read and quoted, watched for changes with a daily e-mail, every supplier compared with the EU and UN sanctions lists (an aid for a person in your organisation to review, not a guarantee), your customers' security questionnaires answered from your own record, SLA and contacts in one view, and PDF packages of it all.
EU Artificial Intelligence Act
Regulation (EU) 2024/1689
Risk classification, Annex III assessment, GPAI obligations, transparency requirements, prohibited practices screening, and audit-ready documentation.
General Data Protection Regulation
Regulation (EU) 2016/679
Data protection compliance for AI systems processing personal data. DPIA automation, lawful basis assessment, cross-border transfer checks, and Art. 22 obligations.
Network and Information Security Directive
Directive (EU) 2022/2555
Cybersecurity risk management and incident reporting for essential and important entities. Supply chain security, vulnerability disclosure, and governance.
Digital Operational Resilience Act
Regulation (EU) 2022/2554
ICT risk management for financial entities and their critical third-party providers. Operational resilience testing, incident reporting, and information sharing.
Cyber Resilience Act
Regulation (EU) 2024/2847
Product security requirements for digital products with network connectivity. Vulnerability handling, security updates, and conformity assessment.
Take the free CRA readiness scanEU Data Act
Regulation (EU) 2023/2854
B2B data sharing obligations, IoT data access rights, cloud switching requirements, and interoperability mandates.
Corporate Sustainability Reporting Directive
Directive (EU) 2022/2464
ESG and sustainability reporting obligations for companies meeting size thresholds. Double materiality assessment and ESRS-aligned disclosures.
All modules follow the same methodology: source-referenced assessments, compliance checklists tied to specific articles, evidence management, and PDF/A-1b dossier export.