02 / Compliance AI
Run the programme.
Keep the evidence.
A privacy programme under the data protection laws you are subject to, the obligations your contracts create — tracked with evidence and reminders that fire — and SOC 2 readiness judged against your own policies.
Illustration · Privacy programme
Laws held — UK GDPR · EU GDPR — drafted, not yet counsel-reviewed
2 packs
Rights request — Access request — response period from the law that applies
Open
Incident — Breach assessment — notification clocks per law
Assess
Processor — DPA review against the law's required clauses
Review
Key facts
- ✓Fourteen privacy law packs on one engine; your organisation's country picks the default and an admin can hold several. With no country set, it asks rather than guesses.
- ✓Every law pack is drafted — not yet verified against the official text by counsel — and the product says so on screen. It is not legal advice.
- ✓A status of compliant needs linked evidence and a person's approval; it is never computed from a score alone.
- ✓The obligation register pulls obligations out of your contracts and reminds you on each one's own lead times.
- ✓Audit readiness assesses the SOC 2 control set against the policies you upload — a readiness check, not an audit.
- ✓There is no regulator feed and no statutory filing calendar on this product.
Privacy & Data Protection
One engine.
Fourteen laws.
Know what applies
Applicability wizard, obligation register, readiness calendar and gap assessment for the laws you hold.
Applicability
Know your data
System and personal-data inventory, flows and lineage, AI data discovery over files you upload, processing and purpose registers.
Inventory
Answer people
Notices with versions, consent and withdrawals, a public request portal, and each law's own response period on every request.
Rights
Respond and prove
Breach response with each law's notification clocks, retention and deletion, processor DPA review, DPIAs, transfers and audit packs.
Evidence
How it works
Decide. Record. Evidence.
01
Decide what applies
Your country picks the starting law; the applicability wizard and obligation register follow from the laws you hold.
02
Build the records
Inventory, processing activities, notices, consent, processors and transfers — each a register your organisation owns.
03
Run and evidence it
Work requests and incidents against each law's clocks, delete on schedule, and export audit packs with the evidence linked.
A programme you can
show your work on.
The privacy programme is on Pro, Business and Enterprise.
Get started →Questions
Frequently asked questions
What does Compliance AI cover on this product?
Three things: a privacy programme under the data protection laws your organisation is subject to, an obligation register for what your contracts bind you to, and a SOC 2 readiness assessment judged against your own policies. It does not monitor regulators or keep a statutory filing calendar.
Which privacy laws?
Fourteen law packs: EU GDPR, UK GDPR, the California CCPA/CPRA, New York's SHIELD Act, the Delaware Personal Data Privacy Act, Canada's PIPEDA, Australia's Privacy Act, New Zealand's Privacy Act 2020, Singapore's PDPA, Hong Kong's PDPO, South Africa's POPIA, Kenya's Data Protection Act, Nigeria's NDPA and the DIFC Data Protection Law. Your organisation's country picks the default; an admin can hold several.
Have the law packs been checked by a lawyer?
Not yet. Every pack is drafted — its content has not been verified against the official text by counsel — and the product says so on screen. Use the module to run and evidence your programme, and have counsel confirm your position. It is not legal advice.
Which plans include it?
The privacy programme is on Pro, Business and Enterprise, not Starter. The obligation register and audit readiness are on every plan.
Is my data secure?
Data is encrypted at rest with AES-256 and in transit with TLS 1.2 or later. Where it is stored, and which sub-processors receive content, is set out on the Security page and in the DPA.