LegisGate Compass™ Report
The intake asks only what the law needs in order to decide. No maturity model, no self-assessment scoring, no questionnaire that exists to make a sales call easier — every question changes an outcome, or it is not asked.
What the intake asks
Each axis narrows the corpus. Together they are the difference between a list of laws that exist and the list that attaches to what you actually run.
The tool, named
What it is and what it does. The vendor and the model matter less than the function — regulatory weight follows what the system decides, not who built it.
The use case, described as a decision
Hiring, credit, clinical documentation, customer support. The same model doing two jobs is two determinations, and this is the axis people most often collapse.
The jurisdictions where the people are
Not where you are incorporated. Residency of the people the system touches, which is usually a longer list than the org chart suggests.
The industry, because sectoral law exists
Healthcare, financial services, insurance and employment carry duties that do not reach an economy-wide deployment of the same tool.
The data types it touches
Health, biometric, financial, children’s data and other sensitive categories change which instruments engage — and change them sharply.
Where the deployment already is
Not yet deployed, pilot or limited release, in production, or in production, inherited — live before the review process existed. That last one is most organisations, and it is a real option rather than something you have to fudge. It does not change which duties attach; it changes the deadline bands, the timing language, and whether the report asks what has changed since it went live.
Unanswered is a real answer. If you do not know something, say so. The intake records it as unknown and the engine stops rather than assuming the value that would let the report finish. A question you guessed at is worse than a question you skipped.
For counsel reading this
Applicability turns on details the five do not name on their own: whether a human reviews the output every time, sometimes, or never; whether the decision is on a solely automated basis; which consequential decisions are touched; whether the affected people are children, patients or employees; profiling, monitoring and scale; and the entity thresholds that decide whether a statute reaches you at all.
The intake also asks which controls already exist — the processing agreement, the transfer safeguard, the privacy notice, the retention rules, the named oversight owner, the escalation path, the AI literacy training. That is what lets the report say if not already in place rather than asserting an absence it has no basis for.
Free first
A free requirements check runs the same five axes and tells you which instrument families engage — enough to know whether you have a problem, without the pinpoint citations, the obligation set, or the sealed document.
No card, no call, no drip sequence. If the free check tells you nothing attaches, that is a complete and useful answer and you owe us nothing.
Start with the hardest one
If that one comes back clean, the rest of the inventory probably will too. If it does not, you have found the work — with a citation attached to it.