Skill UI

Provides GDPR/DSGVO compliance tools to scan codebases for privacy risks, generate DPIAs, and track data subject rights requests against Article 12(3) deadlines, with final decisions reserved for the DPO.

A specialized advisor for drafting comprehensive legal documents, including privacy policies, terms of service, disclaimers, and data processing agreements. It ensures compliance with major global regulations such as GDPR, CCPA, LGPD, and COPPA, helping businesses mitigate legal risk and maintain industry-leading compliance standards.

This skill acts as a specialized domain intelligence strategist, capable of analyzing specific industry niches (e.g., Fintech, HealthTech). It goes beyond general functionality to inject crucial domain-specific knowledge, mandatory regulatory compliance (like HIPAA or GDPR), and industry-leading UX/UI patterns. Essential for ensuring the product is optimized for its vertical market.

Generate professional legal documents like contracts, proposals, and NDAs for US, EU, UK, and DACH jurisdictions. Outputs structured Markdown with DOCX conversion instructions. Includes jurisdiction-specific clauses and GDPR compliance notes. Not a substitute for legal counsel.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This skill performs comprehensive regulatory gap analysis across major compliance frameworks, including GDPR, CCPA, ADA, PCI-DSS, and CAN-SPAM. It analyzes live websites and codebases to produce a detailed compliance scorecard, identifies specific non-compliant gaps, and generates a prioritized remediation roadmap with effort estimates. Essential for businesses ensuring legal adherence across multiple global jurisdictions.

This skill governs the secure ingestion and indexing of enterprise documents from diverse connectors (e.g., Google Drive, Confluence, Jira). Key functions include mandatory PII filtering (stripping emails, phones, SSNs) before indexing, preserving strict permission boundaries, and enforcing data retention policies to ensure compliance with global regulations like GDPR and CCPA.

This skill scans live websites or local codebases to detect all data collection signals, including cookies, analytics, forms, and third-party processors. It then generates a comprehensive, 12-section privacy policy tailored for GDPR and CCPA compliance. The system maps detected data touchpoints to specific legal bases (Consent, Contract, etc.), ensuring the resulting policy accurately reflects the actual data practices of your application or website.

This skill analyzes a live website or application to understand its underlying business model, data collection practices, and user interactions. It then generates a comprehensive, 16-section Terms of Service document, automatically incorporating provisions for GDPR, CCPA, and other major compliance frameworks. Ideal for launching new SaaS, e-commerce, or mobile products.

Provides startup legal frameworks for contract risk review, IP strategy, term sheet analysis, and regulatory exposure across HIPAA, GDPR, FDA, and fintech.

Orchestrate multi-framework compliance programs: select applicable frameworks, map control overlap, simulate audits, and consolidate evidence checklists across ISO, GDPR, SOC 2, AI Act, and more.

This skill facilitates GDPR audit preparation, breach response, and DPA investigations. It provides six critical DPO questions covering RoPA, lawful basis, DPIA, DSAR, data transfers, and breach logging. It validates compliance posture against EU regulations and cross-framework standards like ISO 27001 and SOC 2.