Skill UI

This router bundles 15 specialized compliance skills crucial for HealthTech and MedTech organizations. It provides structured guidance across major global regulations, including ISO 13485 QMS, EU MDR, FDA submissions, GDPR, and the EU AI Act. Use this when a compliance request is complex and needs to be accurately directed to a specific technical skill area (e.g., risk management, CAPA, data security).

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

This comprehensive guide details the implementation of Cloud Data Loss Prevention (DLP) using industry-leading tools such as Amazon Macie, Google Cloud DLP, and Azure Information Protection. It provides structured workflows for discovering, classifying, de-identifying, and protecting sensitive data (PII, PHI, financial data) across cloud storage, databases, and data pipelines. Essential for achieving compliance with global regulations (GDPR, HIPAA, PCI DSS) and integrating robust data governance into CI/CD processes.

This skill guides the systematic process of conducting access reviews and certifications. It covers designing review campaigns, risk-based prioritization (e.g., privileged access), reviewer assignment, and remediation tracking. Essential for maintaining compliance with major regulations like SOX, HIPAA, and PCI DSS, ensuring user access strictly matches their job roles.

AKF is the native metadata format specifically designed for tracking AI-generated or AI-modified content. It allows users to stamp files (including DOCX, PDF, images, and code) with detailed trust scores, source provenance, and compliance metadata. This tool is essential for professional workflows requiring strict auditing, compliance assurance, and verifiable data lineage, especially concerning regulations like the EU AI Act, HIPAA, and SOX.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

A comprehensive toolkit for medical device manufacturers seeking ISO 13485 certification. This skill guides users through gap analysis, creating mandatory Quality Management System (QMS) documentation, and ensuring compliance with global medical device regulations (e.g., EU MDR, FDA QMSR). It provides templates, guidance, and structured processes for foundational QMS documents like Quality Manuals and CAPA procedures.

This skill provides comprehensive methods for interacting with the Figma API. It covers retrieving and managing comments, accessing version history, and handling sensitive user data. Emphasis is placed on implementing robust privacy controls, PII redaction, data classification, and ensuring compliance with regulations like GDPR/CCPA.

This skill provides comprehensive guidance on implementing HIPAA-compliant security measures for Abridge clinical AI integrations. It covers critical areas such as enforcing TLS 1.3 encryption in transit, AES-256 encryption at rest, implementing role-based access controls (RBAC), detailed PHI-safe audit logging, and best practices for secrets management, ensuring full compliance with HIPAA regulations.

A comprehensive skill providing patterns for implementing data privacy, PII redaction, and robust audit logging when interacting with large language models like Claude. Use this when your application handles sensitive user data, requiring compliance with regulations such as GDPR or CCPA, ensuring all API calls are secure and auditable.

This skill governs the secure ingestion and indexing of enterprise documents from diverse connectors (e.g., Google Drive, Confluence, Jira). Key functions include mandatory PII filtering (stripping emails, phones, SSNs) before indexing, preserving strict permission boundaries, and enforcing data retention policies to ensure compliance with global regulations like GDPR and CCPA.