What this is
Most small firms will never hire a compliance officer.
So the work either doesn’t happen or it lands on the founder at eleven at night. Kritia does the part a person would do on a laptop: works out which duties reach a company your size in the country you trade from, checks what your own website is already showing the world, and keeps the dated, fingerprinted file that proves what you did and when.
Use the AI tools confidently. This is the paperwork behind them — the thing a serious business simply has, like a spam filter or a certificate.
01
Exact, not approximate
Article numbers, dates and citations, produced by fixed rules. No language model writes an obligation or a policy clause here — a fresh paraphrase every run is not something a solicitor can sign off once and stand behind.
02
Records, not reassurance
Every document Kritia issues carries a SHA-256 fingerprint and a timestamp in an append-only log. When a customer asks what you assessed and when, that is the answer — not a memory of a good intention.
03
No fear marketing
Fine figures are shown at the SME cap Article 99(6) actually sets, never the €15M headline. Where a rule is mapped from primary sources but not yet human-verified, the page says so and quotes no figure at all.
What is encoded today: the EU AI Act, to the article, as amended by the July 2026 Digital Omnibus — and the GDPR duties an SME’s AI use triggers: lawful basis, notices, processor contracts, transfers, records, security, impact assessments. One set of answers, both regimes, one evidence file. Around them the website scan reads a wider set — ePrivacy and the Accessibility Act in the EU, UK GDPR and PECR in Britain, CalOPPA, the FTC Act and state opt-out duties in the United States — and reports them as signals to act on, never as a verdict. Start with the EU AI Act checklist for small businesses.
The briefing
Read the development. See the source. Know what comes next.
A short daily note on EU AI and data rules that separates decisions and enacted text from commentary and proposals, written for people using AI in ordinary business rather than building models. Free, no account.
Latest issue · AI-generated
EU copyright consultation and cyber-threat findings; NIST AI-agent demonstrator
The European Commission reports a copyright consultation open until 3 November and workplace cyber-threat survey findings. NIST describes a planned first implementation use case for identifying, authenticating and authorizing AI agents in software development; New York’s Attorney General reports a coalition letter urging Congress to regulate AI.
- Commission seeks feedback on challenges and way forward in the area of effect of technology on copyright
- Attorney General James Calls on Congress to Protect Americans from Unchecked AI Development
- Comments on Software and Agentic AI Identity Concept Paper
What is this built on?
What the engine tracks, who the law reaches, and what the alternatives charge — every figure read from the shipped code or carrying its source.
See the numbersWhat does it cost?
Two plans, from €20 a month, and a seven-day free trial: a card goes on file at the door, nothing is charged until day seven, and cancelling before then costs nothing.
See pricingWhich duties reach me?
Answer a short set of questions about your business, your market and how you use AI. Get the duties that apply now, free and without creating an account.
Check your scope