Regulations

Regulations, shaped
for engineering teams.

This is the layer between a regulation as written and the systems that have to satisfy it. We use the RuleMesh graph for factual structure, then editorially shape the result into pages that tell engineers, product teams, and operators what matters first.

Reference library·Graph-backed·Editorially framed
What is live

These live slices are not law mirrors. They are engineering reference surfaces.

What is queued

The Data handoff already supports the next regulation set.

The next expansions are data-ready. Each one already has a stable CELEX identifier and a definitions surface in the graph. The missing work is still editorial: deciding which definitions to foreground, which obligations matter to engineers first, and where the page should route into RuleMesh product surfaces.

DORA
32022R2554
queued

DORA turns operational resilience, ICT risk management, incident reporting, testing, and third-party oversight into explicit duties for financial entities and critical ICT providers.

Applies from 2025-01-1765 definitions
NIS2
32022L2555
queued

NIS2 expands cybersecurity governance, incident reporting, supply-chain expectations, and management accountability across essential and important entities.

Applies from 2024-10-1841 definitions
Cybersecurity Act
32019R0881
queued

The Cybersecurity Act strengthens ENISA and the EU cybersecurity certification framework, with less immediate acquisition value than GDPR, AI Act, DORA, or NIS2 for RuleMesh’s current wedge.

22 definitions
Keep Reading

Start with the live GDPR and AI Act surfaces.

GDPR now covers applicability, role, glossary, and implementation routing. AI Act adds the second live regulation slice with a glossary and value-chain hub in the same structure.