Playbooks

Playbooks for source-led compliance work.

Each playbook is a research path your assistant already knows: which passages to read, in what order, and which citations to check before anyone relies on the answer.

8 playbooksReady when you connect

Name one to your assistant, or describe the job and it picks the path. Want the whole job done? The recorded jobs chain these playbooks into a finished memo or questionnaire (4 of them, each with every call).

¶ 1 · EU AI Act · classification

Is this AI system high-risk?

Use it when
A product team describes a new AI use case and someone has to call the risk class before launch.
You get
Article 6 and the matching Annex III points, quoted with pinpoints, and the provider and deployer duties that follow.
Tool chain
list_regulations search_regulation lookup_obligations read_unit verify_citation

Ask forhigh-risk-triage

¶ 2 · EU AI Act · duties by role

What must we do as deployer or provider?

Use it when
You know your role under the Act and need its list of duties before reading the article text.
You get
The articles whose headings name your role's duties, each read in full and cited.
Tool chain
list_regulations lookup_obligations read_unit verify_citation

Ask fordeployer-obligations

¶ 3 · DORA · ICT third parties

Review an ICT provider against DORA

Use it when
A new or renewing ICT service supports a critical or important function.
You get
The DORA articles on third-party risk, contract terms and the register of information, with pinpoints.
Tool chain
list_regulations search_regulation read_unit verify_citation

Ask fordora-ict-third-party

¶ 4 · Several acts at once

Which EU acts touch this question?

Use it when
The question crosses AI rules, operational resilience, cybersecurity and personal data.
You get
The strongest passages from every loaded act in one search, then the exact paragraphs, verified.
Tool chain
search_regulations read_unit lookup_obligations verify_citation

Ask forcross-reg-compliance-scan

¶ 5 · Customer questionnaires

Answer an AI due-diligence questionnaire

Use it when
A customer or supplier asks what the regulation requires of you, question by question.
You get
Draft answers drawn from the held text, each ending in a citation you can check.
Tool chain
search_regulation read_unit verify_citation lookup_obligations

Ask forvendor-ai-questionnaire

¶ 6 · Cyber Resilience Act · roles

What does the CRA ask of us as maker, importer or distributor?

Use it when
A product with digital elements is heading to the EU market.
You get
The CRA articles for your economic-operator role, read in full and cited.
Tool chain
list_regulations lookup_obligations read_unit verify_citation

Ask forcra-economic-operator-obligations

¶ 7 · GDPR · Article 35

Do we need a DPIA, and what goes in it?

Use it when
Privacy counsel scopes new processing, including an AI deployment that points to a DPIA.
You get
Article 35 with its paragraphs verified, and the AI Act Article 26(9) link when it applies.
Tool chain
list_regulations lookup_obligations search_regulation read_unit verify_citation

Ask forgdpr-dpia-lookup

¶ 8 · NIS2 · entity duties

What does NIS2 require of an essential or important entity?

Use it when
Your organisation may fall under NIS2 and the security and reporting duties need scoping.
You get
The risk-management and incident-reporting articles from the Directive text, read and verified.
Tool chain
list_regulations lookup_obligations search_regulation read_unit verify_citation

Ask fornis2-essential-entity

Start with a free account.

One email to sign in, no API key, and free during the beta.

https://mcp.rekvira.com/mcp