Regulation LayerRegulation Layer
Coverage

North America and EMEA, at every level of government.

Federal and state. Federal and provincial. Supranational and member state. Free zones with their own regulators. We show exactly how deep each region goes today, so you know what a pilot can cover before it starts.

Pilot-ready
Library and change feed ready for a two-week pilot
Modelled
Authorities and laws mapped; live feed in build
On the roadmap
Planned; pilots here move it up the list

United States

Pilot-ready

Federal and state authority apply at the same time. A single product can answer to a federal regulator, a state department in every state you serve, and an SRO.

Federal · financial

  • SEC
  • CFTC
  • Federal Reserve
  • OCC
  • FDIC
  • CFPB
  • FinCEN
  • OFAC

Federal · other sectors

  • FTC
  • DOJ Antitrust
  • FDA
  • FCC
  • EPA
  • FERC
  • NRC
  • FAA
  • FMCSA

State

  • Attorneys general
  • NYDFS
  • Banking departments
  • Insurance departments
  • Securities departments
  • Privacy agencies

SROs and professional bodies

  • FINRA
  • Stock exchanges
  • State bars
  • Medical boards
  • State boards of accountancy

Laws we model here: Dodd-Frank, BSA, GENIUS Act, HIPAA, Sherman Act, Regulations B, C, E, P, V, X, Z and DD, state privacy and money transmission laws

Overlap, solved

One control. Four privacy regimes. One piece of proof.

When you operate across borders, the same activity triggers several regimes with slightly different rules. Regulation Layer maps them side by side, flags where they disagree, and lets one control satisfy them all where it can.

CONTROL · C-PRV-11

Delete customer data on verified request

Owner: Privacy Office · runs on every request · 30-day pass condition, the strictest of the four

GDPR · EU

Right to erasure, without undue delay

UK GDPR · United Kingdom

Mirrors the EU right, overseen by the ICO

PIPEDA · Canada

Retention limits and withdrawal of consent

State privacy law · US

Flagged: different exemptions for financial data

Illustrative mapping. The 30-day threshold is this synthetic control’s pass condition, not a claim that all four regimes impose an identical deadline. Your library is scoped to the exact laws that apply to you; exemptions remain visible.

Need a region we haven't reached yet?

Pilot customers decide what we build next. Tell us where you operate.

Request a region →
Request early access →