EU compliance - complisec

One skill that onboards your organisation, builds a compliance profile, and enforces EU compliance when it matters — code generation, cloud integrations, deployments, data handling, and regulatory discussions.

You don't need to know complisec exists — it activates when your prompt carries compliance risk.

Only thenis2-gap-analysissub-skill needs Python 3.10+ (for the NIS2 applicability checker). Everything else is pure markdown — no dependencies.

complisec/ ├── SKILL.md # Root skill — onboarding + enforcement ├── README.md # This file ├── .claude-plugin/ │ └── plugin.json # Claude Code plugin manifest ├── skills/ │ ├── complisec/ # Entry skill (for plugin convention) │ ├── nis2-gap-analysis/ # NIS2 gap analysis + nis2_check.py │ ├── incident-management/ # Incident lifecycle + EU reporting directory │ ├── vendor-risk/ # Supply chain risk management │ ├── change-management/ # Change records for critical assets │ ├── audit-logging/ # Audit logging + schemas │ ├── data-sensitivity/ # Classification + scanning + blocking │ ├── compliance-hub/ # Central log collection + observability │ ├── org-profile/ # Organisation profile builder │ ├── security-compliance-tools/# Critical asset methodology + compliance tools │ └── eu-compliance-directives/ # EU + national source index └── .compliance/ └── profile.example.json # Example org profile

Connect to your CISO Adapt workspace to search, analyse, export, and manage risks and policies with natural language

Cross-reference DORA and NIS2 requirements — gap analysis, mapping, and compliance overlap detection for financial services

EU AI Act Article 50 watermarking compliance — C2PA metadata, AI-generated content labeling, provenance attestation for Nov 2026 deadline

EXIF for AI. AKF embeds trust scores, source provenance, and compliance metadata into every file your AI touches — DOCX, PDF, images, code, and 20+ formats. 9 MCP tools: stamp, inspect, trust, audit, scan, embed, extract, detect. Audit against EU AI Act, SOX, HIPAA, NIST in one command.

Query 37 EU regulations (DORA, NIS2, GDPR, AI Act, CRA) with full-text search, cross-regulation comparison, and ISO 27001/NIST CSF control mappings. Auto-updates via EUR-Lex monitoring.

KHEPRA MCP Server smithery badge MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments.

Comprehensive audit logging for agent-to-agent interactions — immutable event trails, tamper-evident hashing, structured log export (SIEM-compatible), and compliance-grade retention for regulated industries.

Cryptographic runtime governance for AI agents. 20 tools. Sealed policy artifacts, continuous measurement, tamper-evident proof. Ed25519 + SHA-256.

AI Agent Supply Chain Security - Intercepts and validates every package installation, git clone, and script download triggered by AI coding agents before it executes.