Compliance bundles
Compliance bundles organize authoritative sources, applicability questions, evidence checks, and professional-review gates. They are designed to support research and readiness work, not to replace current legal, regulatory, security, or accessibility advice.
Choose deliberately
Useful starting points
Curated collection
Selected for clear visitor intent, practical coverage, and useful onward discovery. Review each bundle’s evidence, limitations, and approval boundaries before relying on it.
compliance
Source-aware compliance hub for GDPR obligation triage, official source selection, and public-safe compliance brief drafting.
Solves: triage GDPR applicability and obligation questions without inventing legal conclusions; separate official law, regulator guidance, user-provided facts, assumptions, and missing evidence
Source-aware compliance bundle for California Consumer Privacy Act / CPRA Core Compliance Framework applicability, evidence collection, source inspection, and review-ready decision support.
Solves: Route California Consumer Privacy Act / CPRA Core Compliance Framework work to the right source category and evidence set.; Separate verified source facts, user-provided facts, assumptions, and missing evidence.
compliance
Source-aware compliance hub for U.S. HIPAA privacy, security, breach notification, enforcement, and Administrative Simplification triage.
Solves: Triage HIPAA questions without inventing legal conclusions.; Separate official HIPAA sources, user-provided facts, assumptions, and missing evidence.
compliance
Source-aware compliance bundle for HIPAA Privacy Rule use, disclosure, individual-rights, notice, and minimum-necessary triage.
Solves: Route Privacy Rule questions to the correct official source category.; Separate official-source facts, user-provided evidence, assumptions, and missing verification.
compliance
Source-aware compliance bundle for HIPAA Security Rule risk-analysis, safeguard, documentation, and ePHI control triage.
Solves: Route Security Rule questions to the correct official source category.; Separate official-source facts, user-provided evidence, assumptions, and missing verification.
compliance
Source-aware compliance hub for SOC 2 readiness triage, evidence framing, and professional-review handoff.
Solves: Triage SOC 2 questions without inventing audit conclusions or AICPA criteria.; Separate official AICPA source categories, user-provided evidence, assumptions, and missing evidence.
compliance
Source-aware compliance hub for Sarbanes-Oxley Act executive certification, disclosure controls, ICFR assessment, and auditor-attestation triage.
Solves: Triage SOX certification and ICFR questions without inventing legal, accounting, audit, or filing conclusions.; Separate official statutory, SEC, PCAOB, user-provided, assumed, and missing evidence.
compliance
Source-aware compliance hub for Americans with Disabilities Act Title III public accommodation and digital accessibility questions.
Solves: Triage ADA Title III and digital accessibility questions without inventing legal conclusions.; Separate DOJ source facts, W3C/WAI technical-standard facts, user-provided accessibility evidence, assumptions, and missing verification.
compliance
Source-aware compliance hub for U.S. Occupational Safety and Health Administration workplace safety and health triage.
Solves: Triage OSHA questions without inventing legal or safety conclusions.; Separate official OSHA and eCFR sources, user-provided workplace evidence, assumptions, and missing evidence.
compliance
Source-aware compliance bundle for CAN-SPAM Act and Rule applicability, evidence collection, source inspection, and review-ready decision support.
Solves: Route CAN-SPAM Act and Rule work to the right source category and evidence set.; Separate verified source facts, user-provided facts, assumptions, and missing evidence.
compliance
Source-aware compliance hub for U.S. Telephone Consumer Protection Act calls, texts, robocalls, robotexts, do-not-call, consent, revocation, and fax advertising questions.
Solves: Triage U.S. call, text, robocall, robotext, and fax outreach questions without inventing legal conclusions.; Separate official FCC, FTC, eCFR, statutory, and user-provided evidence before compliance conclusions.
Continue exploring