Where do you stand?
Four traversal directions through the same knowledge graph, at different depths. Pick the one that matches your situation — every route ends in artifacts you can take away.
Target market(s)European UnionUnited States (federal)change
Set your target market(s) once here — all four routes below derive their obligations, instruments and vendor guidance for these markets.
Currently deriving for EUUS
- Route 1
“I have an AI use case and need the full picture.”
Full analysis · ~10 minWhich regulations apply → what must I document → what does the architecture look like → what do I build or buy.
What you get: An executive brief with risk class and cited obligations, the evidence plan, the reference architecture and a build-or-buy shortlist — exportable.
Describe your use case →or pick from 45 ready profiles - Route 2
“Legal told me which regulations apply — now I need the technical translation.”
Focused · ~5 minA set of regulations → the merged obligation union → controls → components → patterns → evidence.
What you get: One merged technical translation for the whole set, showing which regulation demands each component — and what the set does not require.
Start from your regulations → - Route 3
“I know what I must build — who supplies it?”
Focused · ~3 minA set of components → market layers → scored recommendations → build-vs-buy per component.
What you get: The vendor and stack view: which market layer covers what, with alternatives, confidence and the selection metrics to compare on.
Open the stack advisor → - Route 4
“My stack is fixed — what can I safely run on it?”
Exploratory · ~3 minThe components you already run → every catalog use case, ranked by how much of its technical control set you cover.
What you get: Three bands — runnable today, within reach (with the missing pieces and what each unlocks), and further out — each with its risk class.
Match your stack →