Skill UI

A comprehensive guide to configuring Fireflies.ai's Enterprise Role-Based Access Control (RBAC). Learn how to manage workspace roles (Admin, Member, Guest), organize transcripts into specific channels, control granular privacy levels, and manage external sharing via detailed API instructions. Essential for large organizations managing sensitive meeting data.

A specialized advisor for drafting comprehensive legal documents, including privacy policies, terms of service, disclaimers, and data processing agreements. It ensures compliance with major global regulations such as GDPR, CCPA, LGPD, and COPPA, helping businesses mitigate legal risk and maintain industry-leading compliance standards.

This skill loads and manages company context for C-suite advisors. It reads context files, detects stale data older than 90 days, enriches context during conversations, and enforces privacy rules before external API calls. Use it to start advisor sessions, refresh context, or ensure data privacy.

Guards borrower interactions by enforcing TRID, RESPA, TILA, ECOA/Fair Lending, licensing, disclosures, and privacy rules whenever rates, fees, qualifications, or data are discussed in mortgage conversations.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

This skill scans live websites or local codebases to detect all data collection signals, including cookies, analytics, forms, and third-party processors. It then generates a comprehensive, 12-section privacy policy tailored for GDPR and CCPA compliance. The system maps detected data touchpoints to specific legal bases (Consent, Contract, etc.), ensuring the resulting policy accurately reflects the actual data practices of your application or website.

Performs a systematic GDPR compliance audit of a website across 10 sections and a 22-item annex, covering legal notices, cookies, data forms, privacy policy, trackers, and data transfers. Produces a structured report with risk levels, blocking issues, and prioritized recommendations. Suitable for DPOs and compliance practitioners.

Audits a website for compliance with Azerbaijan's Law on Personal Data and, where applicable, the EU GDPR plus ePrivacy/cookie rules. It inventories privacy documents, scores each requirement, and delivers a traffic-light executive summary plus a clause-level findings table with legal citations. Use for .az domains or sites targeting Azerbaijani or EU users.

Expert guidance for CCPA and CPRA compliance: business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out, limit SPI), privacy notice drafting, vendor classification, sensitive data handling, opt-out mechanisms, CPPA enforcement, penalty exposure, and gap assessments.

Assists in-house legal teams with privacy regulation compliance. Covers GDPR, CCPA/CPRA, and other major laws; provides DPA review checklists, data subject request timelines, cross-border transfer guidance, and regulatory monitoring. Helps handle compliance tasks without giving legal advice.