Regingada Compliance Suite · Your Digital Twin for DSA, AI Act & GDPR
Your Digital Twin for EU digital law.
It starts as cartography: EU digital law — the DSA, AI Act, GDPR, DMA and NIS2 — mapped into one interactive graph of 824 nodes, 1,652 edges and 92 curated cross-regulation links. That map is the foundation of your twin: you classify once, and the living model shows what applies and reports what changes. Built by a German lawyer specialised in EU digital regulation.
One graph. 824 nodes. Orientation across EU digital law.
No customer counts, no saved-hours claims — this is the corpus your twin runs on. The corpus figures here are rendered live in the suite: open the product and reconcile.
824
Source-grounded nodes
824 source-grounded nodes across five EU digital-law regimes.
Articles, recitals, obligations, case law and guidance — structured, linked and cross-referenced. Nothing rounded up for this page.
DSAAI ActGDPRDMANIS2Five regimes. One corpus. One render.
1,652mapped relationships·92curated cross-regulation links·12L9 enforcement trackers·0external loads by default
92 = the curated cross-regulation heatmap; the graph holds further cross-regime edges. Real numbers, no marketing math.
The suite KPI band — the same figures, the same render. Reconcile in the product.
The twin
What is your Digital Twin?
Not six separate tools — one model of your duties. You answer a compact five-question pre-wizard about your case; the Legal Map marks the obligation nodes that apply to you, live. That marked, living map is your twin: it shows what applies and reports what changes.
The Legal Map is the engine of your Digital Twin — a living model of EU digital law that turns your profile into individual, proactive and reactive orientation.
1
Your profile
You answer a compact five-question pre-wizard about your case — rule-based and reproducible, no account, no black box.
2
The map marks
The Legal Map marks the obligation nodes that apply to you — live, across all five regimes, each grounded to its legal source.
3
Your living twin
This marked, living map is your twin: it shows what applies and reports what changes. Change one input and the duties, deadlines and cross-regulation links move with it.
The twin mirrors and orients — it does not advise. It shows which duties your inputs point to; it does not decide them, guarantee anything or take them on. The legal judgment and the handling of duties stay with the firm, in a separate mandate.
The suite
One suite. Five regimes.
Six modules, one product — every card shows live data.
Legal Map
824 nodes of EU digital law as one interactive graph — filter by regime, concept or case law.
Cross-Reg Heatmap
Where DSA, AI Act, GDPR, DMA and NIS2 overlap — curated links, not statistical guesses.
Obligation Cockpits
VLOP, Annex IV, DPIA, gatekeeper and cyber duties as working checklists — every obligation grounded to its legal source.
Cmd-K Research
Full-text and concept search across the entire corpus — works completely offline.
AI Assistant
Optional Claude-powered explanations via a Cloudflare Worker. Strictly opt-in — the suite never requires it.
Mandate Funnel
From anonymous self-check to a mandate-ready DRAFT artifact — the handoff to the firm is a deliberate, documented act.
Coverage
Every regime, full depth.
We certify nothing and badge nothing — we map. Five regimes, each down to article level.
DSA
Your DSA twin: shows which platform duties apply — service-by-service, intermediary up to VLOP — and reports what changes.
Plus: service-by-service portfolio tiering · duty workspace with kanban and an owner per duty — who in your org handles which DSA obligation.
AI Act
Your AI Act twin: shows the classification of each AI system — prohibited, high-risk, transparency or GPAI, provider and deployer apart — and reports what changes.
Plus: auto-classification per AI system — prohibited, high-risk, transparency or GPAI — with provider and deployer duties kept strictly apart.
GDPR
Your GDPR twin: shows which duties your processing profile triggers — DPIA, transfers, DPO, employee data — and reports what changes.
DPIA, mapped.
Art. 35/36 triggers with DSK lists · EDPB WP248 risk assessment · Art. 30 records.
Plus: processing records as structured input · conditional cockpits appear only when your profile triggers them — transfers, DPO, employee data.
DMA
Your DMA twin: shows your CPS portfolio and threshold status in one run — through to the Art. 15 report — and reports what changes.
Gatekeeper duties.
Art. 5/6/7 obligations · interoperability and self-preferencing rules in one cockpit.
Plus: one continuous run from CPS portfolio and threshold status to the Art. 15 report generator.
NIS2
Your NIS2 twin: shows whether your entity is essential or important — with 24 h / 72 h / 1-month reporting clocks — and reports what changes.
Cyber baseline.
Directive (EU) 2022/2555 · risk-management measures and reporting duties.
Plus: incident register with live 24 h / 72 h / 1-month reporting deadlines · supplier register with risk rating.
The whole picture
Five regimes, one suite — the graph links DSA, AI Act and GDPR down to article level; DMA and NIS2 plug in as cockpits and search.
Open the full map →go-live pending
Cross-regulation
One measure. Many duties.
92curated cross-regulation links
as rendered live in the suite — the curated heatmap selection; the graph holds further cross-regime edges
A risk assessment you run for the DSA can serve the AI Act and the GDPR too. the suite shows exactly where — the overlap a flat checklist misses.
Curated edges, lawyer-ratified — not AI guesswork at runtime.
Sources grounded down to CELEX identifiers.
Subject-matter grouping across regime borders.
Open the heatmapgo-live pending
The map
824 nodes. Zero black box.
Every node carries its legal source. Every edge says why it exists. The corpus is lawyer-curated and ratified, source-grounded down to CELEX — and the product shows its work.
Funk taxonomy — 51 legal concepts as cross-regime filters
CJEU case law with CELEX references on the node
Tri-lingual nodes — EN · DE · ZH
Runs fully offline by default — the only network paths are the opt-in AI request and your deliberate funnel submission
Live map canvas — dark theme, colored regime clusters, real corpus data
The cockpits
From article to action.
Reading the law is step one. the suite classifies your profile, triggers the duties indicated by your inputs, and puts them on a timeline — checklists, roadmaps and what-if scenarios a compliance team can actually run.
Every cockpit obligation grounded to its legal source
VLOP cockpit — DSA Art. 34/35/22/24/39
AI Act Annex IV cockpit with GPAI timeline
GDPR DPIA cockpit — Art. 35/36/30, DSK lists
DMA gatekeeper and NIS2 cyber cockpits
Applicability roadmaps with phases and dependencies — plus what-if scenarios
Duty benchmark against four model profiles — declared model-based, no market-data claims
From map to action
First the map. Then the work.
the suite doesn't stop at cartography. Five moves from first orientation to a documented handoff — four in the software, the fifth in the mandate.
1 · CLASSIFY
Quick check & classification
A five-question quick check per regime feeds a deterministic engine: DSA service tier up to VLOP, AI-Act risk class, DMA gatekeeper status, NIS2 essential or important. Rule-based and reproducible — no black box.
2 · CHECK
Obligation cockpit
Your profile triggers the duties indicated by your inputs — each with its article anchor, phase and concrete tasks. A benchmark compares your duty load against four model profiles, honestly declared as model-based.
3 · PLAN
Roadmap & what-if
Applicability timelines per regime, what-if scenarios — simulate VLOP scale or giving up the EU seat — and a horizon radar that watches beyond the five regimes.
4 · EVIDENCE
Evidence Vault & reports
Map each document to the duty it covers in the local Evidence Vault, then export cockpit reports as DOCX. Your files stay in the browser — no third-party upload.
5 · MANDATE
When it gets serious
Everything up to here is software: structured self-assessment, not legal advice. Taking on the handling of duties — EU representation, authority correspondence, legal judgment — is the firm's work, under a separate engagement.
The honest boundary is the feature: software output is a DRAFT and says so on every page. FINAL exists only after a lawyer takes the mandate — and responsibility.
No account required
Your inputs stay in the browser until you decide to send
Artifact exported as DOCX — with a visible DRAFT footer
1 · CHECK
Structured self-assessment
In the software. Anonymous, no account — decision support under GDPR and RDG discipline.
2 · DRAFT
DRAFT artifact
The software generates a DRAFT document — expressly not legal advice, and labeled as such.
3 · FINAL
Lawyer sign-off
Only Kanzlei Theo Funk turns a DRAFT into FINAL — after a separate engagement and full lawyer review.
No logos, no testimonials — instead, five synthetic demo personas built into the product. Each one is a complete walkthrough from classification to mandate handoff.
HR-AI provider
High-risk under Annex III no. 4 — the full provider duty stack, cleanly separated from deployer duties.
Marketplace at VLOP scale
Above 45 million users — once designated by the Commission — the DSA changes character: Art. 34/35 systemic-risk work in a dedicated cockpit.
Credit-scoring fintech
Art. 22 GDPR and Art. 22 AI Act are false friends — the suite keeps them apart, SCHUFA case law included.
SME deploying bought-in AI
Deployer duties under Art. 26 — and the honest line: the Annex IV documentation sits with your vendor, not with you.
Non-EU GPAI provider
Art. 53/55 model tiers plus the triple representation bundle — Art. 54 AI Act, Art. 13 DSA, Art. 27 GDPR — treated as one issue.
All five are demo scenarios with synthetic data — clearly labeled in the product. No real client data, ever.
Representation
EU representation, as a service.
Established outside the EU? Several EU digital laws require you to appoint a representative inside the Union. Regingada scopes which one you need in a few questions — the representation itself is a legal service, provided by Kanzlei Theo Funk in cooperation.
Art. 13 DSA
DSA Representative
The statutory addressee in the EU for non-EU intermediary services — for the Digital Services Coordinator, the Commission and the EBDS.
Art. 22 / 54 AI Act
AI Act Representative
The authorised representative for non-EU providers of high-risk AI systems (Art. 22) and GPAI models (Art. 54).
Art. 26(3) NIS2
NIS2 Representative
The EU representative for non-EU DNS, cloud, data-centre, CDN and other in-scope digital service providers.
Software & scoping: Regingada UG (haftungsbeschränkt) · Representation, a legal service: Kanzlei Theo Funk · RAK Bamberg — under a separate engagement.
Lawyer-built
Software from a lawyer. Advice from his firm.
No customer logos, no invented testimonials. What we have instead: a founder who practices the law his software maps — and a boundary that protects you.
Regingada UG (haftungsbeschränkt)
Builds and operates the Regingada Compliance Suite
GDPR + RDG discipline: structured self-assessment and decision support
Software by Regingada UG (haftungsbeschränkt) · Legal advice exclusively by Kanzlei Theo Funk under separate engagement
When it gets serious, the work changes sides: the firm acts as legal representative under Art. 13 DSA and authorised representative under Art. 22 / Art. 54 AI Act, coordinates authority correspondence and incident notifications, accompanies audits — and, where needed, proceedings. The software shows the duty; the firm takes on its handling. That is the work on the 'right to operate' — done in the mandate.
“Every mandate began the same way — re-tracing how five EU regimes interlock for that one client. So I built the software that does the mapping: it classifies, checks and plans. It surfaces the duties your inputs point to; it does not take on their handling. That remains my firm’s work in the mandate, together with the legal judgment.”
Theo Funk · Rechtsanwalt · Rechtsanwaltskammer Bamberg
Developers
The EU digital-law corpus, as an API.
Grounded, not generated: a curated, CELEX/ELI-citable, versioned corpus your app and your AI can call. A free key to start; Pro and Enterprise scale the limits. All three surfaces are built and verified — hosting and keys follow at launch.
Embed widget
A 43 KB widget. The Regingada quick check on your own site — one sandboxed iframe, no tracker scripts.
The Digital Twin is free — the full tool, every regime, offline, no account. Paid plans add tool and data depth: persistence, teams, monitoring, the Corpus API, white-label. They never add legal assessment — that stays with Kanzlei Theo Funk, in a mandate.
Every plan is software. The other way to work with Regingada is the firm — mandate & EU representation by Kanzlei Theo Funk. Two paths, one honest boundary.
Indicative launch pricing · net of VAT · public launch in preparation.
Five regimes, one map, an honest boundary. Public launch in preparation — the firm is reachable today.
And when it gets serious: EU representation under Art. 13 DSA and Art. 22 / 54 AI Act, authority correspondence, support through audits and proceedings — handled by the firm, in the mandate.
