The laws that apply
Every law that reaches this use case in the jurisdictions where it is used, cited to primary source, with the ones that were checked and do not apply.
Getting started
Six steps, starting with one AI use case.
Not a rollout plan. The shortest path from a free account to one AI use case with its laws cited, its obligations handed out, and its documents prepared — which is more than most organisations have for any of them.
Your first five AI use cases are free, with everything included: the laws, the obligations, the written assessments and monitoring. No card. More than five is a subscription.
Step 01
Create the free account
The account is the front door: everything happens in your workspace, and nothing is bought one piece at a time. Your first five AI use cases are free, with everything included. No card.
Step 02
Add your first AI use case
An AI use case is one tool doing one job: the same model used for hiring and for customer support is two. Pick the one you would least like to explain — the one where somebody would have to think before answering. It tells you the most about the rest of the inventory, and the work is the same size either way.
Step 03 · about 15 minutes
Answer the intake
You are asked what the law needs in order to decide: the tool and what it is used for, the jurisdictions where the people are, the industry, the data it touches, whether it is live yet, how a person reviews its output, and which controls you already have in place. Every question changes an outcome, or it is not asked. Everything it asks, and why.
Step 04
Read what comes back
The laws that apply, cited to primary source, with the ones that were checked and found not to apply. The obligations, sorted by department. The written assessments the law calls for, prepared with the regulatory half filled in and ready to download for your counsel's review. And monitoring, switched on. Before you circulate anything, open two citations and check them against the official text yourself.
Step 05
Hand out the obligations
Hand each department its obligations in one click, with a due date you choose. Every obligation then has an owner, a due date and a place for the proof. If an obligation has no plausible owner, that is a finding about your organisation rather than about the law.
Step 06
Invite the team
Invite people by email; each one creates a password from the invitation. Admins see everything in the workspace, and members see their own work. There is no charge for each person, so invite whoever actually has to do the work.
What you have at the end
One AI use case, on the record.
The same four things come with every AI use case you add after it.
The obligations
What each law requires you to do, sorted by department, with an owner, a due date and the proof attached.
The written assessments
The DPIA or state privacy risk assessment the law calls for, prepared with the regulatory half filled in, for your counsel's review. A FRIA is identified the same way and prepared once the official template is published.
Monitoring
When the law behind a use case or one of its documents changes, you are told which of your records it touches.
What not to do first
Three sequences that stall.
Each of these is reasonable, common, and a way to spend two quarters without producing a single defensible record.
01
Do not start with a complete inventory
A perfect list of every AI capability in the organisation is a six-month project that produces no assessments. Start with one AI use case and let the inventory grow behind it.
02
Do not start with a policy
A policy describes what you will do. A regulator asks what you did. Write the policy after you have run the process once, so it describes something real.
03
Do not start with a tool selection process
Evaluating five vendors before you have seen a single determination means choosing on feature lists rather than on whether the output survives contact with your counsel.
After the first five
More than five AI use cases is a subscription.
It is priced by the number of AI use cases you keep in the platform, and we quote it in one conversation. Five is enough to see whether the rest of the inventory is a problem.
One AI use case, this week
The first one is the hard one.
Everything after it is the same sequence with different facts. The organisations that never get started are almost always the ones that tried to start with all of it.