Skill UI

A systematic playbook for negotiating B2B technology services, professional services, and commercial contracts. It provides three-position frameworks (provider, balanced, client), deal-size calibration (from small to strategic), and a five-tier objection handling process, incorporating crucial regulatory leverage like GDPR, DORA, and German contract law (BGB). Ideal for structuring complex agreements and managing high-stakes negotiations.

A comprehensive legal tech plugin designed for precise analysis of complex technology agreements (MSA, DPA, SOW, NDA, etc.). It functions like a senior transactional lawyer, providing deep red-flagging for compliance risks, IP ownership gaps, liability issues, and jurisdictional conflicts (e.g., GDPR, CCPA). Ideal for legal teams and compliance officers handling cross-border or AI-related contracts.

This skill provides a comprehensive framework for conducting GDPR Chapter V Transfer Impact Assessments (TIA). It adheres to EDPB guidelines and CNIL recommendations, guiding users through the 6-step methodology. It assesses transfer qualification, adequacy mechanisms (Art. 45), and full risk assessments (Art. 46), while generating standardized reports in Markdown, DOCX, and JSON formats. Ideal for compliance officers managing international data flows.

A comprehensive, risk-based framework for assessing third-party vendors, critical for compliance with global regulations like DORA, NIS2, and GDPR. It provides a structured, three-phase process covering financial, legal, security, and operational risks. Ideal for vendor onboarding, supply chain security audits, and ongoing vendor monitoring in regulated industries.

This tool builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising laws. It identifies applicable regulations, generates structured check items, labels risk levels, and provides actionable remediation recommendations. Users describe their business scenario to get a complete compliance review.

This guide provides practical implementation steps for ensuring GDPR compliance in data processing, consent management, and privacy controls. Use this skill when developing systems that handle EU personal data, managing Data Subject Requests (DSRs), or designing privacy-first architectures to meet strict international data regulations.

Drafts privacy policies, terms of service, cookie policies, DPAs, and disclaimers with jurisdiction-aware compliance notes for GDPR, CCPA, LGPD and other regulations, plus review checklists.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

This skill provides a comprehensive security hardening checklist for reviewing scoped architectures. It covers network security, authentication, API safety, data protection, secrets management, supply chain dependencies, and incident response protocols. It ensures compliance with standards like GDPR, PCI-DSS, and HIPAA where applicable. Use this to validate controls against evidence-based practices before production deployment.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

A skill to create a data privacy control register listing data categories, lawful basis, retention periods, access roles, encryption, and consent requirements per module. Useful for GDPR and CCPA compliance in small and medium enterprises.