I · Three questions a working legal team asks
From regulation lookup to contract drift to privacy mapping.
Demo 1 · Regulation lookup · the actually-filed clause1.6 ms · local
EU AI Act · high-risk obligation · post-market monitoring · article reference
01Regulation 2024/1689 · Art. 72 — post-market monitoring system obligations for high-risk providers. EUR-Lex · 32024R1689 · 2024 · Art. 72(1)–(4)
0.97
02EDPB · Joint Opinion 28/2024 referencing the same article; clarifies controller scope. EDPB · 2024-11 · §§ 41–48
0.91
03Internal · matter note from regulatory team, mapped Art. 72 onto our intake. file://matters/AIA-2025/intake.md · local
0.83
Demo 2 · Auto-renewal & license-incompatibility auditscan · weekly
scan · contract portfolio · auto-renewal < 120 days · license terms downstream-incompatible
01Master license · vendor X, auto-renewal 2026-08-12; 105 days out, no exit notice on file. scan · legal.auto-renewal-trap · file://contracts/X-MSA.pdf
0.95
02Downstream open-source · AGPL conflict with our redistribution clause. scan · legal.license-incompatibility · pkg: foo@2.1
0.92
03Conflicting clauses in two settlement drafts — exclusivity scope differs by jurisdiction. scan · legal.conflicting-clauses · matter Z-1142
0.84
No matter file ever leaves the firm. Privileged folders excluded by policy.
II · What's included
EUR-Lex, CourtListener — plus your matter files.
Bundle composable: GDPR · NIS2 · privacy sub-bundles for regulation-specific scan packs.
- EUR-Lex · Gesetze im InternetEU + DE primary law · Gesetze im Internet is HTML-scrape, opt-in
- Bundesgesetzblatt via URL ingestno bulk feed; ingest individual issues on demand via
indago_learn
- CourtListener · SEC EDGARUS case law (PACER feed) · supervisory filings
- Native renderers
decision-memo with typed memo payload · validation-binder — accepts GDPR / NIS2 / AI Act / 21 CFR as renderer framework labels.29-template surface · framework labels
- Anti-fabrication rail
indago_finding_emit rejects unresolvable chunk-ids — no fabricated case citations.guard at emit
- Auto-renewal trap · license-incompatibility · clause-conflictscan · anomaly.contract.auto-renewal · anomaly.contract.license-incompatibility · anomaly.contract.clause-conflict
- Compliance scans (registered)compliance.law.missing-clause-gdpr · compliance.law.missing-clause-hipaa · compliance.law.missing-clause-sox · compliance.law.outdated-reference.eu.law — NIS2 / AI Act are validation-binder labels, not separate scans
- Chain-of-custody
Decision memo renders journaled. See audit chain.opinion-ready
Sources of recordEUR-LexCourtListenerSEC EDGARGesetze im Internet (opt-in)
Need BaFin, FCA, EDPB, CNIL or BfDI guidance? Ingest individual publications via indago_learn; those bodies do not have standalone bulk-source plugins today.
II.5 · Sample workflows
Real workflows. Real numbers.
Three workflows shaped for this bundle. Where the box reads Verified, the numbers come from a real run logged in this codebase. Where it reads Pending validation, the workflow shape is implemented and we are still gathering the headline numbers before we publish them.
Workflow 01
Pending validation
Regulation lookup · AI Act Art. 72
Regulatory counsel
- InputPlain-language question: post-market monitoring obligations for a high-risk AI provider.
- MethodCross-source rank: EUR-Lex 32024R1689 + EDPB joint opinions + your matter folder.
- OutputCited DOCX/PDF passage with Art./§ exact references.
Article-level cite
Engine pulls the correct citations on EUR-Lex today; pending a counsel-team end-to-end check.
Workflow 02
Pending validation
Auto-renewal trap audit
In-house counsel
- InputContract portfolio directory (PDF/DOCX).
- Method
legal.auto-renewal-trap + window-of-notice extraction + same-vendor licence-incompatibility scan.
- OutputWeekly digest grouped by exit-window urgency.
Six-figure save shape
Scan family is shipped; pending a verified case study from a real firm portfolio.
Workflow 03
Pending validation
GDPR / NIS2 / AI Act rule-change audit
Privacy & compliance
- InputYour DPIA + processing register.
- MethodEDPB guidance + CNIL/BfDI guidance + new-regulation diff against your last-version DPIA.
- OutputObligation-drift report keyed to the directive article, with the action-item per processing activity.
Drift-aware
Pending privacy-team validation on a real DPIA before numbers go on the page.
Verified workflows are reproducible against the index hash listed in each run. Pending workflows are a written commitment, not a customer quote — we publish numbers only when we have measured them.
Legal bundle · from€499/ seat / month· firm rollouts · GDPR clause-scan + binder labels for NIS2 / AI Act / 21 CFR
III · Also useful for legal work