Regulatory Signals is an all-in-one liability detection platform for AI-era SaaS. Our 9 products cover three groups — compliance programs, artifact audits, and trust registries — across GDPR, CCPA, ePrivacy, EU AI Act, HIPAA, DORA, and OWASP LLM Top 10. Scan your website, your AI repo, your MCP server, or your browser extension and get auditor-ready evidence — not policy templates.
Scan it. Fix it.
Free scan, no credit card required.
- Products
- 9
- Regulations and standards covered
- 13
- Card needed for the first scan
- None
How it works
Scan
Website and AI repo, live evidence only
Document
Policies generated from scan findings
Classify
EU AI Act risk tier from source code
Export
Audit pack binder, regulator-ready
Every product. One platform.
Evidence from your actual site, not generic templates, across every regulatory framework.
Comply with a regulation
EU AI Act, HIPAA, DORA and website privacy: free scan through audit pack and continuous monitor.
Audit an AI artifact
Codebases, MCP servers, browser extensions and AI agents: independent security and compliance audits.
Trust registries
Searchable, publicly verifiable registries of audited MCP servers, extensions and AI agents.
Coverage where you sell
Regulations and standards our products check against today.
EU and UK
- GDPR
- ePrivacy
- EU AI Act
- DORA
- FCA
- BaFin
- AMF
United States
- CCPA
- HIPAA
- HHS OCR
Security standards
- OWASP
- OWASP LLM Top 10
- CWE
Explore all products
- EU AI Act ComplianceEU AI Act risk checks, reports, audit pack, and policies — one program.Free readiness check, plans from $39
- HIPAA ComplianceHIPAA Audit Pack and Continuous Monitor for healthtech AI vendors.$2,990 one-time, monitor from $1,990/quarter
- DORA ComplianceDORA FinTech Audit Pack and Continuous Monitor for EU/UK financial firms.€1,990 one-time, monitor from €499/month
- Website PrivacyFree website compliance scan, paid report, and daily regulatory feed.Free scan, report from $29
- AI-built Code AuditAI-generated codebase audit — Claude, Codex, Gemini, Cursor, Copilot, Lovable.Free scan, then $99 audit or $49/mo monitor
- MCP Server Audit11 MCP-specific security rules. Signed cert. Public registry listing.$249 one-time, monitor from $99/month
- Extension AuditBrowser extension security and privacy audit — permissions and data flows.$149 one-time, listing from $499/year
- Agent EvaluationIndependent eval of AI agents — behaviour, safety, and regulatory readiness.$1,990 one-time
- Trust RegistriesSearchable registry of audited MCP servers, extensions, and AI agents.Free listing
What you get, and what you don't
Regulatory Signals is a compliance evidence collection and gap analysis tool. Medium and low confidence results are always flagged for human review.
What we are
- A regulatory signal monitoring tool
- A technical evidence gathering layer
- A compliance gap identification service
- A draft documentation generator for legal review
- A continuous monitoring system for compliance drift
What we are not
- A law firm or legal advice provider
- A certification or accreditation body
- A guarantee of regulatory compliance
- A substitute for qualified legal counsel
- An official regulator or enforcement authority
GDPR fines average €1.2M per enforcement action in 2025
Compliance infrastructure
or a single fine?
A Starter plan costs less per month than one hour of external legal counsel. Start with a free scan — no card, no commitment.
Latest guides
- EU AI Act vs GDPR for SaaS: What Changes in 2026, What Overlaps, and What You Can ReuseSide-by-side breakdown of EU AI Act and GDPR obligations for SaaS teams. Three new obligations, two overlaps, and one conflict you need to know before December 2027.
- EU AI Act Compliance Checklist for SaaS: 12 Engineering Actions Before December 2027Twelve concrete engineering tasks that cover Articles 9–15 of the EU AI Act for SaaS providers and deployers. Mapped to the December 2027 enforcement deadline.
- Is My SaaS a High-Risk AI System Under the EU AI Act? A Classification Decision TreeStep through the Annex III classification decision tree for SaaS products. Includes the 4 cases most SaaS founders get wrong and what to do once classified.
Find the gaps before a regulator or buyer does.
Start with a free website scan. No credit card required.
Scan your siteOur commitment to privacy
We hold ourselves to the rules we scan for. Our own policies are public.