Every regulation your digital product triggers, in one place.

The world's first binding AI regulation. Grecta maps every EU AI Act obligation your system carries — from risk management under Article 9 to transparency under Article 50 — at article level, not control level.

The baseline for any AI system processing personal data in Europe. Grecta identifies whether your system triggers a mandatory DPIA, automated decision-making obligations, or special category data requirements.

Applies to any AI product with digital elements placed on the EU market. Grecta determines whether your product falls under default, Important Class I, or Critical Class II requirements.

Digital operational resilience for financial entities and the ICT providers that serve them. Grecta flags whether your AI system triggers DORA directly or through your customer base.

Network and information security obligations for essential and important sector entities. Grecta evaluates your organisation's sector and size to determine whether NIS2 applies and at which tier.

AI software intended to support clinical decisions is a medical device under EU law. Grecta identifies MDR scope and maps the technical documentation overlap with the EU AI Act.

In-vitro diagnostic regulation for AI used in specimen analysis and diagnostic processes. Grecta determines IVDR scope and risk classification from your system's intended purpose.

Applies to connected products and related services generating usage data. Grecta identifies whether your AI system triggers data access and portability obligations under the Data Act.

The international standard for AI management systems — voluntary but increasingly required by enterprise procurement. Grecta maps ISO 42001 clauses against your EU AI Act obligations to close both with the same documentation.

The US voluntary framework for AI risk management. Grecta shows where your EU AI Act compliance work already satisfies NIST functions — useful for US market access and procurement requirements.

Applies to intermediary services, platforms, and search engines with EU users. Grecta determines whether your AI system triggers DSA transparency and recommender system obligations.

Applies to data intermediaries and data altruism organisations. Grecta identifies whether your AI system's data-sharing role triggers DGA obligations alongside GDPR.

Applies in civil liability proceedings involving high-risk AI systems. Grecta shows how your EU AI Act compliance documentation functions as your primary liability defence.

The EU AI Act's implementing instrument for general-purpose AI model providers. Grecta distinguishes between providers of GPAI models and deployers who use them — obligations differ fundamentally.

Software is now a product under EU law. Grecta maps the evidence overlap between PLD disclosure obligations and your EU AI Act technical documentation.

Applies where your AI system uses cookies, tracking technologies, or provides electronic communications services. Grecta identifies ePrivacy obligations alongside GDPR for the same system.

US state-level AI regulation for high-risk systems serving Colorado consumers. Grecta evaluates US AI applicability for European companies with US market exposure.

The Human, Ethical, Accountable and Transparent AI framework developed by the University of Cambridge AI Lab. Grecta maps HEAT principles against your EU AI Act obligations — particularly risk management, human oversight, and transparency — closing both with the same evidence set.

Applies to any product placed on the EU market that consumers can use, including AI-enabled hardware and consumer-facing software. Grecta identifies GPSR scope and maps its safety obligations against MDR, CRA, and the EU AI Act where they apply to the same product.

Applies to any hardware product that emits or receives radio waves — including AI-enabled IoT devices, wearables, and connected hardware with WiFi or Bluetooth. Grecta identifies RED scope and the cybersecurity requirements that apply to internet-connected radio equipment from August 2025.

Applies where your AI system provides investment advice, portfolio management, or automated trading functionality. Grecta identifies MiFID II obligations for fintech AI alongside DORA and the EU AI Act.

Payment services regulation for AI systems in the payments and open banking space. Grecta maps PSD3 applicability for payment AI alongside DORA and GDPR.

Anti-money laundering obligations for AI systems supporting KYC, transaction monitoring, or suspicious activity reporting at obliged entities. Grecta identifies AML scope from your system's function and customer base.

Applies to insurance and reinsurance undertakings using AI in underwriting, pricing, claims assessment, or solvency calculations. Grecta identifies Solvency II obligations alongside DORA and the EU AI Act for insurance AI systems.