Skill UI

Expert advisor on EU Cyber Resilience Act (Regulation 2024/2847) for products with digital elements. Use for gap analysis, product classification, conformity assessment route selection, CE marking, SBOM requirements, ENISA vulnerability reporting, support periods, and manufacturer/importer/distributor compliance duties.

Practitioner skill for advising on EU Regulation 2023/2854 (Data Act). Covers IoT data access, B2B data sharing, unfair contract terms, public sector exceptional need, cloud switching, and third-country governmental access, including GDPR and DMA interactions. For legal counsel, compliance officers, and product counsel.

Translate cybersecurity findings into defensible 0-100 A-F risk scores, FAIR-aligned dollar loss estimates, and board-ready summaries. Passive analysis only, with ownership-aware confidence caps and attack-path amplification. Ideal for scoring risk, quantifying exposure, estimating breach cost, or explaining risk grades.

Automates the systematic review of Data Processing Agreements (DPA) to ensure compliance with GDPR Article 28, EDPB guidelines, and the AI Act. It generates a structured, clause-by-clause report, providing compliance diagnostics (green/yellow/red), actionable remediation suggestions, and critical questions for vendors. Essential for Data Protection Officers (DPOs) and privacy practitioners managing vendor risk.

This skill acts as a virtual assistant for in-house legal teams, helping to manage, customize, and generate standardized templated responses for common legal inquiries. Use cases include Data Subject Requests (DSRs), Litigation Holds, NDA requests, and vendor compliance questions. It ensures consistency and flags when specialized, individualized legal review is mandatory, strictly adhering to legal workflow best practices.

Assesses compliance with the EU Cyber Resilience Act (CRA). It determines if a product is in scope, classifies the risk, and outlines specific duties for vulnerability handling and incident reporting. It integrates live CVE and CISA data with official legal texts to provide cited, actionable compliance advice.

Generates professional, jurisdiction-aware privacy notices compliant with GDPR and DSGVO for all EU/EEA jurisdictions. Use this when drafting policies for various scenarios, including websites, job applicants, employees, and B2B/B2C customers. The tool handles complex legal requirements, such as Article 13/14 disclosures, AI Act transparency, cookie policies, and multi-language variations across EU member states.

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

Manages the end-to-end process of reviewing outside counsel invoices for compliance. This skill performs detailed line-item checks against specific billing guidelines, flags violations (e.g., block billing, rate issues), generates formal approval reports, drafts rejection letters, and analyzes systemic billing trends across multiple invoices. It is essential for in-house legal operations teams to maintain financial governance and manage external vendor relationships.

This expert skill provides comprehensive assistance for Information Security Management System (ISMS) compliance based on ISO 27001 (2013/2022). It is ideal for security and compliance teams needing support with gap analysis, risk assessment, policy drafting, Statement of Applicability (SoA) generation, and auditing preparation. It covers all mandatory clauses and Annex A controls.

An expert advisor for privacy, legal, and compliance teams focused on ISO 27701 PIMS certification. This skill covers the full spectrum of privacy management, including gap analysis, DPIA, and SoA generation. It provides deep knowledge of both the 2019 and 2025 editions, ensuring alignment with major global regulations like GDPR, CCPA, and LGPD.

This skill acts as a legal meeting preparation assistant, synthesizing context from multiple sources (CRM, CLM, Email, Documents, Calendar). It generates structured, comprehensive briefings for various high-stakes meetings, including board reviews, contract negotiations, and compliance checks. It helps legal teams identify key issues, potential risks, and necessary follow-up actions.