The determination
What applies — and the citation to prove it.
The LegisGate Compass™ Report names the instruments that attach to one deployment, the provision each duty comes from, and the instruments assessed and found not to apply. Every citation resolves to the official text.
Inside the report
Written to be handed to counsel without a covering explanation.
The test we design against: a careful lawyer opens it, pastes a citation into a memo, opens the source, and finds the provision says what we said it says.
The instruments that attach
Named in full, with the pinpoint provision each duty comes from — not a nickname, not a product label, not a sibling article that happens to look statute-shaped.
The instruments that do not
With the reason. A regulator asking why you did not run a particular assessment is answered by a dated record saying it was assessed and why it did not attach — not by the absence of a document.
The duties, in the order they bind
What must happen before the activity, during it, and within a period after. Each one carries the citation it was determined from.
Timing language that matches where you actually are
The intake asks whether the tool is not yet deployed, in pilot, in production, or in production and inherited from before this process existed. Deadlines and statutory timing sentences are written to that — because assess before deploying reads differently to somebody who deployed in March. It does not soften which duties attach.
Language that matches what you told us
Because the intake asks which controls already exist, a finding can say if not already in place rather than asserting you have not done something. Where we did not ask, the report does not claim to know.
Action items with a landing role
Pre-authored against the obligation and routed to a role that exists in an organisation like yours — not a model's guess at what you should do about a law it has just read.
The evidence you will be asked for
What to retain and for how long, expressed as a number of days rather than as a phrase like a reasonable period.
A GRC export, in the same package
CSV and JSON, one row per obligation — the statutory citation, jurisdiction, severity, owner role and timing on the row, and evidence joined on the same key. It loads into Jira, ServiceNow, or whatever your programme runs on, so the duties do not have to be retyped by whoever gets handed the PDF.
What this is not. LegisGate produces regulatory intelligence and assessment-preparation materials. Nothing we produce is legal advice, a legal opinion, a certification, or a determination of compliance, and no document we deliver satisfies a legal obligation on its own. Sufficiency is determined by your counsel.
How it is made
Deterministic where the law is deterministic.
Applicability is decided by code reading a curated corpus. A language model never decides which laws apply to you, never writes a finding, and never mints a citation.
You describe the deployment
Tool, use case, jurisdictions, industry and the data it touches set the scope — then the intake asks what those turn on, and separately which controls you already have: the processing agreement, the transfer safeguard, retention rules, the named oversight owner, AI literacy training. The rest of it.
Facts, not impressions
Your answers become explicit facts with three states: true, false, and unknown. An unanswered question stays unknown. It never quietly becomes a no in order to make a determination possible.
Every instrument is tested on five gates
Territorial reach, entity, subject class, activity, and timing. An instrument is in scope only when all five are satisfied. Where a gate cannot be evaluated, the run stops rather than guessing.
Duties come from the register, not from prose
Obligations are selected from a curated register tied to pinned provisions. Where the register cannot support a duty, the report omits it and says so rather than improvising a plausible one.
The document is sealed
Every citation on the counsel path is checked against the verified corpus before the report is issued. A citation that will not resolve blocks delivery.
Start
One deployment.
About fifteen minutes.
Pick the tool that would be hardest to explain in a letter. You will know what attaches, what does not, and what evidence you are missing.
$299 each from five reports, $249 from twenty-five. The full price of your first report is credited against a Dynamic Assessment bought within sixty days.
The first one tells you the most
Run the hardest one first.
If the deployment you are least comfortable explaining comes back clean, the rest of the inventory probably will too. If it does not, you have found the work — with a citation attached to it.