Afrexai Regulatory Compliance

# Regulatory Compliance Audit

Run a full regulatory compliance audit for any business. Covers US, UK, and EU frameworks across 8 compliance domains with gap analysis, risk scoring, and remediation timelines.

## When to Use
- Annual or quarterly compliance reviews
- Pre-audit preparation (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS)
- New market entry requiring regulatory assessment
- Board or investor due diligence on compliance posture
- Post-incident compliance gap analysis

## How It Works

### Step 1: Identify Applicable Frameworks
Based on the business profile (industry, geography, data types, revenue), determine which frameworks apply:

| Framework | Triggers |
|-----------|----------|
| SOC 2 Type II | B2B SaaS, handles customer data |
| GDPR | Any EU customer data, EU employees |
| HIPAA | Any PHI (healthcare, benefits, wellness) |
| PCI DSS | Processes, stores, or transmits card data |
| ISO 27001 | Enterprise clients requesting certification |
| SOX | Public company or preparing for IPO |
| CCPA/CPRA | >$25M revenue OR >50K CA consumers |
| NIST AI RMF | Deploying AI/ML in production |
| UK DPA 2018 | UK operations or UK customer data |
| FCA/PRA | UK financial services |

### Step 2: 8-Domain Compliance Assessment

Score each domain 1-5 (1=non-existent, 5=mature):

**Domain 1: Data Governance**
- [ ] Data classification policy (public/internal/confidential/restricted)
- [ ] Data retention schedule with legal hold procedures
- [ ] Data processing agreements with all vendors
- [ ] Cross-border transfer mechanisms (SCCs, adequacy decisions)
- [ ] Data subject rights workflow (access, deletion, portability)
- [ ] Data breach notification procedure (<72hr GDPR, state-specific US)

**Domain 2: Access Control & Identity**
- [ ] Role-based access control (RBAC) implemented
- [ ] Multi-factor authentication on all critical systems
- [ ] Privileged access management (PAM) for admin accounts
- [ ] Quarterly access reviews with evidence retention
- [ ] Automated provisi...

# Regulatory Compliance Audit

Run a complete regulatory compliance audit across 8 domains. Covers SOC 2, GDPR, HIPAA, PCI DSS, ISO 27001, SOX, CCPA, NIST AI RMF, UK DPA, and FCA/PRA.

Built for founders, compliance leads, and operations teams who need audit-ready compliance without a Big 4 engagement.

## What's Inside

- **Framework applicability matrix** — automatically identifies which regulations apply based on your business profile
- **8-domain assessment** with 48 control checkpoints
- **Risk scoring matrix** — Critical/High/Medium/Low with action timelines
- **90-day remediation roadmap** — week-by-week action plan
- **2026 compliance cost benchmarks** by company size ($30K to $3M+)
- **Industry-specific requirements** for 10 verticals
- **Board-ready dashboard template**
- **7 audit mistakes that cost companies millions**

## Quick Start

Tell your agent: "Run a regulatory compliance audit for [your company description]"

The skill will identify applicable frameworks, assess all 8 domains, score gaps by risk, and generate a remediation roadmap with budget estimates.

## Who This Is For

- **Startups preparing for SOC 2** — know exactly what's needed before engaging an auditor
- **Companies expanding to EU/UK** — GDPR and DPA 2018 gap analysis
- **Healthcare orgs** — HIPAA compliance checklist with BAA tracking
- **Anyone deploying AI** — NIST AI RMF and EU AI Act readiness

## Get the Full Industry Toolkit

Each industry has unique compliance requirements. Get the deep-dive context pack for yours:

🛒 **Browse industry packs** → [afrexai-cto.github.io/context-packs](https://afrexai-cto.github.io/context-packs/)
📊 **Calculate your AI ROI** → [afrexai-cto.github.io/ai-revenue-calculator](https://afrexai-cto.github.io/ai-revenue-calculator/)
🤖 **Set up your agent stack** → [afrexai-cto.github.io/agent-setup](https://afrexai-cto.github.io/agent-setup/)

**Bundles:** Playbook $27 | Pick 3 $97 | All 10 $197 | Everything $247

---

Built by [AfrexAI](https://afr...