Tell us what you do. ComplyIQ maps which laws may follow.
You never pick regulations. Answer plainly about your organization, your systems, and your data — the classification engine matches those facts against its regulatory catalog and shows you the candidate set as you go — always for you to confirm with counsel.
This intake scopes a Cadence program — quarterly review of the scope you agree here, with change detection against prior snapshots and gap tracking from open to closed. The first pass establishes the record; each quarter after that maintains it. If you completed a Baseline within the last 90 days, that credit applies.
Organization profile
Establishes who the obligated entity is and which sector rules are in play.
Geographic footprint
The single biggest applicability driver. Where your customers are usually matters more than where you are.
AI systems in use
Answer once per system. Findings, evidence, and remediation are all keyed to the system name you give here.
Data processed
Indicates which privacy regimes may sit on top of the AI-specific rules.
Existing governance
Sets your baseline. Gaps here become the 90-day remediation roadmap; strengths become your defensibility record.
Scope, evidence & consent
Two evidence lanes: Declared (what you upload) and Auto (public URLs you authorize us to scan). This section also records what was deliberately out of scope.
The engine will not run until this is recorded against a named person. It is the protection gate for both sides.