Legal & Compliance

Purpose

Provide compliance guidance and regulatory Q&A to CISOs, compliance officers, and security professionals. RAG-enhanced chat with regulatory knowledge base (NIS2, DORA, GDPR, ISO 27001, EU AI Act).

Input Data

• —User queries
• —Regulatory framework knowledge base
• —Product documentation

Output Data

• —Chat responses with source citations
• —Policy generation drafts

Model & Processing

Known Limitations

• !Responses are advisory; not legal advice
• !Knowledge base may not reflect latest regulatory updates
• !Cannot access external systems or real-time data

Fairness Measures

• +Monthly accuracy evaluation (hallucination and citation correctness)
• +User feedback collection on every response

Human Oversight

User initiates all interactions and evaluates responses independently. Source citations included for verification.

Appeal Process

Users can report incorrect responses via thumbs-down feedback with detailed reason.

Data Governance

Conversations stored per tenant retention policy. No data used for model training. EU-sovereign processing.