Skill UI

This skill analyzes a live website or application to understand its underlying business model, data collection practices, and user interactions. It then generates a comprehensive, 16-section Terms of Service document, automatically incorporating provisions for GDPR, CCPA, and other major compliance frameworks. Ideal for launching new SaaS, e-commerce, or mobile products.

Provides comprehensive methods for handling sensitive customer data within Webflow, including detecting and redacting PII from form submissions and e-commerce orders. This guide ensures data processing adheres to global regulations like GDPR and CCPA, and establishes robust data retention policies for secure development.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

Provides startup legal frameworks for contract risk review, IP strategy, term sheet analysis, and regulatory exposure across HIPAA, GDPR, FDA, and fintech.

Orchestrate multi-framework compliance programs: select applicable frameworks, map control overlap, simulate audits, and consolidate evidence checklists across ISO, GDPR, SOC 2, AI Act, and more.

This skill facilitates GDPR audit preparation, breach response, and DPA investigations. It provides six critical DPO questions covering RoPA, lawful basis, DPIA, DSAR, data transfers, and breach logging. It validates compliance posture against EU regulations and cross-framework standards like ISO 27001 and SOC 2.

A comprehensive meta-skill for generating auditable compliance reports, suitable for frameworks like GDPR or SOC2 self-assessments. This bundle executes a multi-step process: deep research with citations, generating a signable .docx report, archiving a read-only .pdf version, and saving the evidence chain to memory for future retrieval. It ensures a complete, traceable audit trail.

A detailed, comprehensive reference guide covering best practices for securing modern applications. This checklist spans network architecture, API design, data encryption, authentication protocols, and regulatory compliance (GDPR, HIPAA, PCI-DSS), ensuring robust security across the entire technology stack.

Generates a comprehensive, prioritized compliance checklist for major frameworks like GDPR, SOC 2, ISO 27001, HIPAA, and more. This tool performs detailed gap analysis, identifies quick wins, and structures a phased implementation roadmap, making it essential for audit preparation and maintaining regulatory adherence.

This solution designs and automates the entire Identity Governance and Lifecycle Management (IGA) program. It covers the Joiner-Mover-Leaver (JML) workflow, role mining, access provisioning, and remediation of orphaned accounts. It is essential for maintaining compliance (SOX, HIPAA, GDPR) by ensuring identity access consistency across multiple enterprise systems using an authoritative HR source.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.