Flags the EN 301 549 clause each line breaks, and separates what is in force today from what arrives
41 MCP servers
Finds the 12 author-side privacy duties your plugin PHP breaks, with the article and the fix on ever
Open any config file and see every hardcoded credential — and every setting that quietly undoes your
22 rules that name the lines where a Node or TypeScript service writes personal data into logs, cras
Names every column, index, view and seed row in a .sql migration that stores card data, with its PCI
22 rules that read your checkout template the way a CCD2 supervisor will from 20 November 2026
Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-1
Finds the coverage gates in your repo that can never fail a build
Reads your SOUP register the way an auditor does: 16 rules over clauses 8.1.2, 5.3.3, 5.3.4, 4.3 and
Finds the analytics, pixels, fonts and embeds that fire before your cookie banner is answered - in t
16 rules read your privacy.md the way Articles 13 and 14 read it
Checks the accessibility statement you already published against the EU model statement and its two
Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, pla
Check your Markdown record of processing activities with 12 rules against Article 30(1) GDPR.
Reads the consent record your code stored and names every proof field GDPR Article 7(1) needs and yo
16 checks on a system-security-plan JSON, in your editor, before a validator returns the package
Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong
17 rules: 13 Pflichtpunkte aus Art. 28 Abs. 3 DSGVO + 4 veraltete Transfer-Grundlagen, mit Zeile je
17 Regeln aus den GoBD und §147 AO gegen Ihre Markdown-Verfahrensdokumentation — im Editor, ohne Upl
Line-by-line check of shipped device defaults against RED Art. 3(3)(d)(e)(f), EN 18031-1/-2/-3 and U