RULE REFERENCE / INDEX

Every rule the engine verifies

Hand-written authority hubs plus the complete WCAG 2.2 A/AA success-criteria catalog.

GDPR

Art. 5 — Data minimisation

Personal data must be "adequate, relevant and limited to what is necessary" for the stated purpose. Collecting…

Art. 17 — Right to erasure

On a valid request you must delete personal data "without undue delay" — every copy, in every store you contro…

Art. 32 — Security of processing

You must implement "appropriate technical and organisational measures" — encryption, integrity, resilience, an…

Art. 33 — 72-hour breach notification

A personal-data breach must be reported to the supervisory authority within 72 hours of becoming aware — "wher…

ePrivacy

ePrivacy — the cookie rule

Storing or accessing information on a user’s device requires prior consent — except what is "strictly necessar…

Security headers

Content-Security-Policy

CSP is not a regulation, but it is the header regulators and assessors look for as evidence of XSS defense-in-…

EU AI Act

AI Act — model inventory & risk tiers

Providers and deployers must know which AI systems they operate, classify them by risk tier, and maintain the …

DORA

DORA — ICT resilience

Financial entities and their ICT providers must demonstrate operational resilience: incident handling, continu…

Data residency

Sovereign partitions

GDPR lets data flow freely inside the EU; moving it elsewhere needs a Chapter V mechanism. For many buyers, "s…

WCAG 2.2 — all 55 Level A/AA criteria

Principle 1 — Perceivable

Information must reach users through senses they have — text alternatives, adaptable structure, and content that stays distinguishable.

Principle 2 — Operable

Every function must work with the inputs people actually use — keyboard, pointer, voice — with enough time and nothing that triggers seizures.

2.1.1 Keyboard

Level A · in-depth

2.1.2 No Keyboard Trap

Level A · in-depth

2.1.4 Character Key Shortcuts

Level A

2.2.1 Timing Adjustable

Level A

2.2.2 Pause, Stop, Hide

Level A

2.3.1 Three Flashes or Below Threshold

Level A

2.4.1 Bypass Blocks

Level A · in-depth

2.4.2 Page Titled

Level A · in-depth

2.4.3 Focus Order

Level A · in-depth

2.4.4 Link Purpose (In Context)

Level A · in-depth

2.4.5 Multiple Ways

Level AA

2.4.6 Headings and Labels

Level AA · in-depth

2.4.7 Focus Visible

Level AA · in-depth

2.4.11 Focus Not Obscured (Minimum)

Level AA

2.5.1 Pointer Gestures

Level A

2.5.2 Pointer Cancellation

Level A

2.5.3 Label in Name

Level A · in-depth

2.5.4 Motion Actuation

Level A

2.5.7 Dragging Movements

Level AA

2.5.8 Target Size (Minimum)

Level AA · in-depth

Principle 3 — Understandable

Content and controls must read predictably — declared language, consistent navigation, and errors that explain themselves.

3.1.1 Language of Page

Level A · in-depth

3.1.2 Language of Parts

Level AA

3.2.1 On Focus

Level A

3.2.2 On Input

Level A

3.2.3 Consistent Navigation

Level AA

3.2.4 Consistent Identification

Level AA

3.2.6 Consistent Help

Level A

3.3.1 Error Identification

Level A · in-depth

3.3.2 Labels or Instructions

Level A · in-depth

3.3.3 Error Suggestion

Level AA

3.3.4 Error Prevention (Legal, Financial, Data)

Level AA

3.3.7 Redundant Entry

Level A

3.3.8 Accessible Authentication (Minimum)

Level AA

Principle 4 — Robust

Markup must interoperate with assistive technology — valid names, roles, states, and status messages that actually announce.

4.1.2 Name, Role, Value

Level A · in-depth

4.1.3 Status Messages

Level AA · in-depth

Every rule the engine verifies

GDPR

Art. 5 — Data minimisation

Art. 17 — Right to erasure

Art. 32 — Security of processing

Art. 33 — 72-hour breach notification

ePrivacy

ePrivacy — the cookie rule

Security headers

Content-Security-Policy

EU AI Act

AI Act — model inventory & risk tiers

DORA

DORA — ICT resilience

Data residency

Sovereign partitions

WCAG 2.2 — all 55 Level A/AA criteria

Principle 1 — Perceivable

1.1.1 Non-text Content

1.2.1 Audio-only and Video-only (Prerecorded)

1.2.2 Captions (Prerecorded)

1.2.3 Audio Description or Media Alternative (Prerecorded)

1.2.4 Captions (Live)

1.2.5 Audio Description (Prerecorded)

1.3.1 Info and Relationships

1.3.2 Meaningful Sequence

1.3.3 Sensory Characteristics

1.3.4 Orientation

1.3.5 Identify Input Purpose

1.4.1 Use of Color

1.4.2 Audio Control

1.4.3 Contrast (Minimum)

1.4.4 Resize Text

1.4.5 Images of Text

1.4.10 Reflow

1.4.11 Non-text Contrast

1.4.12 Text Spacing

1.4.13 Content on Hover or Focus

Principle 2 — Operable

2.1.1 Keyboard

2.1.2 No Keyboard Trap

2.1.4 Character Key Shortcuts

2.2.1 Timing Adjustable

2.2.2 Pause, Stop, Hide

2.3.1 Three Flashes or Below Threshold

2.4.1 Bypass Blocks

2.4.2 Page Titled

2.4.3 Focus Order

2.4.4 Link Purpose (In Context)

2.4.5 Multiple Ways

2.4.6 Headings and Labels

2.4.7 Focus Visible

2.4.11 Focus Not Obscured (Minimum)

2.5.1 Pointer Gestures

2.5.2 Pointer Cancellation

2.5.3 Label in Name

2.5.4 Motion Actuation

2.5.7 Dragging Movements

2.5.8 Target Size (Minimum)

Principle 3 — Understandable

3.1.1 Language of Page

3.1.2 Language of Parts

3.2.1 On Focus

3.2.2 On Input

3.2.3 Consistent Navigation

3.2.4 Consistent Identification

3.2.6 Consistent Help

3.3.1 Error Identification

3.3.2 Labels or Instructions

3.3.3 Error Suggestion

3.3.4 Error Prevention (Legal, Financial, Data)

3.3.7 Redundant Entry

3.3.8 Accessible Authentication (Minimum)

Principle 4 — Robust

4.1.2 Name, Role, Value

4.1.3 Status Messages