Playbooks
Playbooks for source-led compliance work.
Each playbook is a research path your assistant already knows: which passages to read, in what order, and which citations to check before anyone relies on the answer.
8 playbooksReady when you connect
Name one to your assistant, or describe the job and it picks the path. Want the whole job done? The recorded jobs chain these playbooks into a finished memo or questionnaire (4 of them, each with every call).
¶ 1 · EU AI Act · classification
Is this AI system high-risk?
- Use it when
- A product team describes a new AI use case and someone has to call the risk class before launch.
- You get
- Article 6 and the matching Annex III points, quoted with pinpoints, and the provider and deployer duties that follow.
- Tool chain
list_regulationssearch_regulationlookup_obligationsread_unitverify_citation
Ask forhigh-risk-triage
¶ 2 · EU AI Act · duties by role
What must we do as deployer or provider?
- Use it when
- You know your role under the Act and need its list of duties before reading the article text.
- You get
- The articles whose headings name your role's duties, each read in full and cited.
- Tool chain
list_regulationslookup_obligationsread_unitverify_citation
Ask fordeployer-obligations
¶ 3 · DORA · ICT third parties
Review an ICT provider against DORA
- Use it when
- A new or renewing ICT service supports a critical or important function.
- You get
- The DORA articles on third-party risk, contract terms and the register of information, with pinpoints.
- Tool chain
list_regulationssearch_regulationread_unitverify_citation
Ask fordora-ict-third-party
¶ 4 · Several acts at once
Which EU acts touch this question?
- Use it when
- The question crosses AI rules, operational resilience, cybersecurity and personal data.
- You get
- The strongest passages from every loaded act in one search, then the exact paragraphs, verified.
- Tool chain
search_regulationsread_unitlookup_obligationsverify_citation
Ask forcross-reg-compliance-scan
¶ 5 · Customer questionnaires
Answer an AI due-diligence questionnaire
- Use it when
- A customer or supplier asks what the regulation requires of you, question by question.
- You get
- Draft answers drawn from the held text, each ending in a citation you can check.
- Tool chain
search_regulationread_unitverify_citationlookup_obligations
Ask forvendor-ai-questionnaire
¶ 6 · Cyber Resilience Act · roles
What does the CRA ask of us as maker, importer or distributor?
- Use it when
- A product with digital elements is heading to the EU market.
- You get
- The CRA articles for your economic-operator role, read in full and cited.
- Tool chain
list_regulationslookup_obligationsread_unitverify_citation
Ask forcra-economic-operator-obligations
¶ 7 · GDPR · Article 35
Do we need a DPIA, and what goes in it?
- Use it when
- Privacy counsel scopes new processing, including an AI deployment that points to a DPIA.
- You get
- Article 35 with its paragraphs verified, and the AI Act Article 26(9) link when it applies.
- Tool chain
list_regulationslookup_obligationssearch_regulationread_unitverify_citation
Ask forgdpr-dpia-lookup
¶ 8 · NIS2 · entity duties
What does NIS2 require of an essential or important entity?
- Use it when
- Your organisation may fall under NIS2 and the security and reporting duties need scoping.
- You get
- The risk-management and incident-reporting articles from the Directive text, read and verified.
- Tool chain
list_regulationslookup_obligationssearch_regulationread_unitverify_citation
Ask fornis2-essential-entity
Start with a free account.
One email to sign in, no API key, and free during the beta.
https://mcp.rekvira.com/mcp