108 free compliance generators — and counting
ComplyKit now has 108 free compliance generators. No account required. No paywalls. Generate a professional AI-powered compliance assessment report in minutes.
Today's additions:
EU ePrivacy Regulation Readiness Assessment (107th generator)
The ePrivacy Directive 2002/58/EC governs cookie consent, direct marketing, and the confidentiality of electronic communications for any organisation with EU users. The draft ePrivacy Regulation (COM(2017) 10) updates these rules with GDPR-standard consent requirements, extended OTT communications scope, and harmonised DPA enforcement.
The EU ePrivacy Regulation Readiness Assessment covers 42 controls across 6 domains:
- Cookie & Tracker Consent (Art. 5(3) / Reg. Art. 8): Opt-in consent before non-essential cookies, GDPR-standard consent quality, reject-as-prominent-as-accept, consent record, withdrawal mechanism, granular categories, re-prompting schedule
- Tracking Technologies & Cross-Site Tracking (Reg. Art. 8–9): Full tracker inventory (cookies, pixels, fingerprinting, local storage, CNAME cloaking), third-party blocking enforcement, cross-site tracking consent, GPC/DNT signals, cookie walls assessment, strictly necessary documentation, super-cookies prohibition
- Electronic Direct Marketing (Art. 13 / Reg. Art. 16): Consumer opt-in, soft opt-in conditions, one-click unsubscribe, suppression list, automated calling rules, B2B national rules, sender identity
- Confidentiality of Communications (Reg. Art. 5–7): Communications content protection, employee monitoring legal basis, E2E encryption assessment, metadata retention limits, breach notification, OTT scope, public terminal protections
- Machine-to-Machine & IoT (Reg. Art. 8(1)(b)): M2M scope assessment, IoT data legal basis, location/sensor data mapping, firmware notifications, smart TV tracking, vehicle telematics, API privacy impact
- Governance, DPA Enforcement & Transition (Reg. Art. 23–29): Lead DPA identification, readiness gap plan, RoPA ePrivacy update, DPO ownership, staff training, CMP audit logs, joint controllership agreements
Who it's for: Privacy / DPO teams, legal and compliance, product and engineering teams handling CMP configuration, marketing teams managing direct email programmes, and organisations preparing for ePrivacy Regulation transition.
AI Fairness & Bias Audit Checklist (108th generator)
The EU AI Act (Reg. 2024/1689), fully applicable from August 2026, imposes mandatory fairness and data governance obligations on high-risk AI systems. Article 10 requires training data to be representative and free from bias. Article 14 requires effective human oversight. Violations carry fines of up to €30M or 6% of global turnover.
The AI Fairness & Bias Audit Checklist covers 42 controls across 6 domains:
- Training Data Governance & Representation (EU AI Act Art. 10): Data documentation, demographic representativeness, historical bias identification, label quality, augmentation techniques, test set diversity, data cards
- Fairness Metrics & Bias Testing (IEEE 7003 / NIST AI RMF): Fairness metric selection and justification, disparate impact analysis, FPR/TPR comparison across groups, calibration, intersectional testing, fairness-accuracy trade-off approval, automated tooling in CI/CD
- Model Design & Algorithmic Transparency (EU AI Act Art. 13): Architecture fairness implications, proxy variable removal, explainability (SHAP/LIME), model cards per Art. 11/13, counterfactual explanations, uncertainty quantification, ensemble bias amplification
- Human Oversight & Contestability (EU AI Act Art. 14–15): Human review mechanism, adverse decision notification, appeal process, reviewer bias training, automation bias mitigation, feedback loops, GDPR Art. 22 compliance
- Ongoing Fairness Monitoring & Drift Detection (EU AI Act Art. 72): Post-deployment monitoring schedule, distribution shift detection, demographic segment performance dashboard, bias incident response, retraining triggers, adverse outcome rate tracking, third-party audit
- Governance, Accountability & Regulatory Compliance: Responsible AI policy, FRIA per Art. 27, CAIO designation, EU AI Act Art. 49 database registration, vendor AI bias obligations, staff training, incident log
Who it's for: AI/ML engineering teams, Responsible AI leads, compliance teams, product managers, CISOs and CTOs deploying AI in high-risk domains (hiring, credit, healthcare, law enforcement), and external AI auditors.
Browse all 108 generators
All 108 free compliance generators are at /generate. No account required. Covers GDPR, CCPA, SOC 2, HIPAA, ISO 27001/27701, EU AI Act, NIS2, DORA, PSD2/PSD3, FCA Consumer Duty, CSRD, CRA, NIST CSF 2.0, ePrivacy, AI fairness, and more.