Policy System
A regulatory and governance knowledge graph that answers questions about a company's internal policies as they relate to external regulatory obligations.
- Status
- lab
- GitHub repositories
- Leads
- Contributors
Problem
Compliance officers and policy managers face a growing wall of EU regulations — GDPR, the Cyber Resilience Act, and more — stacked on top of a company’s own internal policies and standards. Keeping the two in step is slow, complex, and high-stakes: miss a coverage gap and your compliance posture is exposed the moment someone reviews it.
What Policy System Does
Policy System is open-source software that connects EU regulatory text to an organization’s internal policies. You ask a question in natural language — “Does our policy cover the required CRA obligations?” — and the system answers using that connected text. Every answer traces back to the actual regulation and policy text it is grounded on. Not a generated guess.
Open source is not a footnote here. As the person accountable for compliance in an organization, your regulatory data and internal policies are among the most sensitive documents you hold. Policy System is open source so you can inspect the tool, verify how it works, and run it in your own environment — no per-seat cost, no vendor lock-in, and full control of the data.
Who It’s For
Compliance officers, policy managers, risk managers, and legal counsel. You can see your organization’s compliance coverage and gaps without reconciling regulation text against policy documents by hand. The view is current, traceable, and grounded in the actual text — so your compliance posture can be defended with evidence, not with best effort.
Engineering, security, audit, and operations teams can use the same evidence base: a service that is compliant, an obligation that maps to a control, a gap that is flagged — without reconstructing provenance after the fact.
Status
Policy System is in early access. The core capabilities — ingesting EU regulatory instruments and internal business policies, natural-language queries, and change monitoring — are built. We are looking for organizations to use it in their own environment and shape it further with direct feedback.
Get Involved
Organizations: If you carry compliance accountability in your organization, we are looking for partners willing to put Policy System through their real policies and regulations — and tell us where it falls short.
Developers: We welcome contributions to extend the project.