Long documents, fixed deadlines.
Hundreds of pages to read against a compliance date that doesn’t move.
What does this new rule change for us?
Know what the new rule means for you. Every clause. Every policy. Every change.
See it worked throughThe rule changed.
Which procedures did?
New regulations arrive as long documents. Working out which clauses apply, which policies and procedures they touch, and what has to change is weeks of careful reading.
Mapped by hand.
Each clause is traced to internal documents from memory, one spreadsheet at a time.
Gaps found by the regulator.
The obligation nobody mapped is the one that surfaces in an inspection.
What the AI reads.
The new rule, clause by clause, set against every policy, procedure and control you already have.
In
- New regulation
- Guidance & FAQs
- Policies
- Procedures
- Controls
- Previous version
At work
- Sense Reads the new rule, its guidance and your documents.
- Understand Splits the rule into specific, testable obligations.
- Check Maps each obligation to the policy or control that covers it.
- Anticipate Flags compliance dates and the changes they depend on.
- Operate Opens change tasks with owners and deadlines.
Out
One impact map. Every mapping cites both texts.
Every obligation.
Mapped to what you do.
Compliance teams see which duties are already covered, which documents need to change and where nothing covers the rule at all.
8 covered · 2 updates needed · 1 gap
| Article | Obligation | Status | Covered by | Owner |
|---|---|---|---|---|
| Data & records | ||||
| 5.1 | Keep operational records for 6 years | Covered | Retention policy RP-03 §2 | Compliance |
| 5.2 | Delete personal data on request | Covered | Privacy procedure PR-11 | Data protection |
| 5.4 | Log changes to critical systems | Covered | Change control CC-02 | IT |
| Incidents & suppliers | ||||
| 6.4 | Report major incidents within 24 hours | Update | Incident procedure IR-07 says 72 hours | Risk |
| 6.6 | Test incident plans every year | Covered | Continuity test schedule | Risk |
| 7.2 | Audit critical suppliers every year | Gap | No procedure or control covers this | Procurement |
| 7.3 | Keep a register of critical suppliers | Covered | Supplier register SR-01 | Procurement |
| People & access | ||||
| 8.1 | Review privileged access quarterly | Covered | Access review control AC-04 | IT |
| 8.3 | Remove leavers' access within a day | Covered | Joiners-movers-leavers JML-2 | IT |
| 9.3 | Train staff on resilience every year | Update | Training covers security, not resilience | HR |
| 9.4 | Name an accountable executive | Covered | Board minutes, March | Company secretary |
Rule
Firms must audit each critical supplier's resilience arrangements at least once a year.
New rule · Art. 7.2 · p.34Searched
Supplier onboarding, procurement policy, the supplier register and the control register.
4 documents · 212 pagesClosest match
Onboarding checks resilience once, when a contract starts. Nothing repeats it.
Supplier onboarding SO-05 · §4Deadline
Applies from 1 January. 23 critical suppliers are listed.
Rule · Art. 12 · Supplier register SR-01
1Gap
2Updates
8Covered
Changes to make
- GapNew annual supplier resilience audit (Art. 7.2) Head of procurement
- UpdateIncident reporting deadline, 72 to 24 hours (Art. 6.4) Head of risk
- UpdateAdd resilience to annual training (Art. 9.3) HR director
Sign-off
- Compliance officer Pending
- Accountable executive Pending
The AI maps and drafts. The committee decides.
Illustrative example. The rule, articles, documents and dates are fictional.
Built for the regulator’s questions.
When the regulator asks how you know, the answer is already written down.
Both texts, side by side.
Every mapping shows the rule’s words and your document’s words together.
How Understand works ↗Nothing silently assumed.
Where nothing covers an obligation, it says so rather than guessing a match.
How Check works ↗Deadlines tracked.
Compliance dates and the changes they depend on stay visible until done.
How Anticipate works ↗Same records.
Other problems.
The documents behind compliance answer other questions too.
Did they deliver what the contract says?
Contract compliance
See whether obligations were actually met.
See how →What here isn’t safe?
Safety checks
Flag what’s unsafe or incomplete.
See how →What actually happened with this complaint?
Customer complaints
Reconstruct what happened, and how it was handled.
See how →Is the supplier’s evidence complete?
Supplier quality
Find missing or inconsistent evidence.
See how →Bring us the next rule you’re facing.
Send the text and your policies. We’ll show you the impact map the AI builds.
Talk to us →LondonDiscovery AI Limited · United Kingdom
HyderabadReDscvry Technology Private Limited · India
ChennaiReDscvry Technology Private Limited · India