Eight skills.
Open source. Run anywhere.

Assess compliance documents against HIPAA Security Rule and Privacy Rule requirements. Get structured findings with coverage status, evidence citations, confidence scores, and remediation recommendations for every control.

Clause-by-clause Business Associate Agreement analysis against 45 CFR 164.504. Evaluates all required HIPAA BAA provisions with risk scoring, contract language citations, and specific remediation recommendations.

Bidirectional mapping between document sections and compliance framework controls (NIST CSF 2.0, ISO 27001, SOC 2, HIPAA). Produces per-section mappings and per-control coverage summaries with confidence scores.

Evaluate individual framework controls against organizational documentation with evidence extraction, quality evaluation, severity classification, and actionable remediation recommendations.

Identifies threats and vulnerabilities, evaluates likelihood and impact via a 3x3 risk matrix, maps findings to any compliance framework (NIST CSF 2.0 by default, or any framework you specify), and recommends risk treatment options with prioritization guidance.

RAG-style compliance question answering with regulatory interpretation guardrails. Answers questions strictly from provided context with source attribution, confidence scoring, and escalation triggers for critical issues.

Guides a structured compliance posture assessment covering all Seven Elements of an effective compliance program. Combines self-reported answers with analysis of any compliance documents you provide. Produces a posture snapshot with maturity stage, enterprise blocker flags, gap prioritization, and a 30/60/90 day roadmap.

Scans a directory of documents, classifies each file by compliance type (BAA, security policy, risk assessment, IR plan, and more), resolves version conflicts with your input, and produces a prioritized analysis plan mapping confirmed-current documents to the right compliance skill. Routes to the analysis skills rather than performing analysis itself.

Based on the Federal Sentencing Guidelines' seven elements of an effective compliance program. 31 yes/no questions across standards, oversight, delegation, training, monitoring, enforcement, and response. Produces a readiness score and tier with specific next steps.

Identifies which stage of compliance maturity your organization occupies: Foundation, Active Management, or Proactive Defense. Helps align program investment with deal size and target market.