One account for the compliance your size of business carries
Five levels, set on the European Union's own business size definitions. Each level holds the toolkits the law switches on at that size, every one built from the instrument itself. You move up when the law starts counting your staff or your turnover. Monthly.
Every toolkit runs as a guided interview: you answer questions one at a time, in plain English, and get back the documents the law names, ready for your records. See a served section before you choose a level.
Not sure which band you are in? The free assessment names the level that carries your list.
- Company law for the United Kingdom and all 27 EU countries.
- GDPR, UK GDPR and the Companies Act 2006.
- The ten minute check of which EU and UK laws apply to you.
- The one minute EU AI Act check, with a printable card of your duties.
- Every compliance date ahead, and the news.
- The app inside Stripe and the connector inside Claude.
- Everything in Start.
- Marketing and cookies: PECR and the ePrivacy Directive.
- Selling to consumers: the Consumer Rights Act, and the rules on green claims.
- Taking people on: working time, minimum wage, right to work, the Employment Rights Act 2025, the Equality Act.
- Premises: health and safety, fire safety.
- Tax records: Making Tax Digital for income tax.
- Using AI in the business: the EU AI Act duties on a deployer, the Article 4 literacy duty in force since 2 February 2025 and the Article 50 transparency duties since 2 August 2026.
- Two cross border deal checks a month, then each at £525 rather than £750.
- Both filter agents and the weekly Global Fuel Report, included.
Monthly.
- Everything in Micro.
- Products on the market: GPSR, product liability, accessibility, the Digital Services Act.
- Packaging and waste duties, including extended producer responsibility.
- Payments and money: PCI DSS, anti-money-laundering, sanctions.
- Conduct: the Bribery Act, platform workers, the DMCC consumer rules.
- The certification buyers ask for: Cyber Essentials, ISO 9001, ISO 45001.
- Three cross border deal checks a month, then each at £525 rather than £750.
- Both filter agents and the weekly Global Fuel Report, included.
Monthly.
- Everything in Small.
- At 50 workers: internal whistleblowing channels, Directive 2019/1937.
- At 150 workers: pay gap reporting, Directive 2023/970, from 2027, and at 100 workers from 2031.
- Medium sized in a listed sector: NIS2 and the UK NIS Regulations.
- Supply chain and sustainability: the Taxonomy, CBAM, deforestation, REACH, batteries, and CSRD readiness for a business in a reporting group's value chain.
- The reporting the law names by size: SECR, the Modern Slavery statement, ECCTA fraud prevention.
- Public contracts: the Procurement Act 2023.
- Management systems: ISO 27001, 27701, 14001, 42001, 37301 and 31000.
- Three cross border deal checks a month, then each at £525 rather than £750.
- Both filter agents and the weekly Global Fuel Report, included.
Monthly.
- All 116 toolkits, 3,291 agents.
- Every sector instrument, financial, cloud, manufacturing and platform, sits here, and the assessment fills your dashboard with the ones that apply to you.
- Every toolkit checked against the law behind it, and against every change to that law.
- When the law changes the update lands in your account and you get an email.
- Four cross border deal checks a month, then each at £525 rather than £750.
- A monthly letter on what is coming, before it becomes a duty.
- A dated record that your compliance was kept up, for anyone who asks.
- Both filter agents and the weekly Global Fuel Report, included.
Monthly.
Every compliance, plan by plan
- 1.GDPR
- 2.UK GDPR and DPA 2018
- 3.Companies Act 2006
- 4.Company law of Austria
- 5.Company law of Belgium
- 6.Company law of Bulgaria
- 7.Company law of Cyprus
- 8.Company law of Czechia
- 9.Company law of Germany
- 10.Company law of Denmark
- 11.Company law of Estonia
- 12.Company law of Greece
- 13.Company law of Spain
- 14.Company law of Finland
- 15.Company law of France
- 16.Company law of Croatia
- 17.Company law of Hungary
- 18.Company law of Ireland
- 19.Company law of Italy
- 20.Company law of Lithuania
- 21.Company law of Luxembourg
- 22.Company law of Latvia
- 23.Company law of Malta
- 24.Company law of Netherlands
- 25.Company law of Poland
- 26.Company law of Portugal
- 27.Company law of Romania
- 28.Company law of Slovenia
- 29.Company law of Slovakia
- 30.Company law of Sweden
- 1.GDPR
- 2.UK GDPR and DPA 2018
- 3.Companies Act 2006
- 4.Company law of Austria
- 5.Company law of Belgium
- 6.Company law of Bulgaria
- 7.Company law of Cyprus
- 8.Company law of Czechia
- 9.Company law of Germany
- 10.Company law of Denmark
- 11.Company law of Estonia
- 12.Company law of Greece
- 13.Company law of Spain
- 14.Company law of Finland
- 15.Company law of France
- 16.Company law of Croatia
- 17.Company law of Hungary
- 18.Company law of Ireland
- 19.Company law of Italy
- 20.Company law of Lithuania
- 21.Company law of Luxembourg
- 22.Company law of Latvia
- 23.Company law of Malta
- 24.Company law of Netherlands
- 25.Company law of Poland
- 26.Company law of Portugal
- 27.Company law of Romania
- 28.Company law of Slovenia
- 29.Company law of Slovakia
- 30.Company law of Sweden
- 31.ePrivacy Directive
- 32.eIDAS 2.0
- 33.PECR 2003
- 34.EU AI Act
- 35.Green Transition Directive
- 36.Consumer Rights Act 2015
- 37.Pay Transparency Directive
- 38.Working Time Directive
- 39.ECCTA 2023
- 40.Employment Rights Act 2025
- 41.Equality Act 2010
- 42.MTD ITSA
- 43.Right to Work Checks
- 44.National Minimum Wage
- 45.HSWA 1974
- 46.Fire Safety Order 2005
- 1.GDPR
- 2.UK GDPR and DPA 2018
- 3.Companies Act 2006
- 4.Company law of Austria
- 5.Company law of Belgium
- 6.Company law of Bulgaria
- 7.Company law of Cyprus
- 8.Company law of Czechia
- 9.Company law of Germany
- 10.Company law of Denmark
- 11.Company law of Estonia
- 12.Company law of Greece
- 13.Company law of Spain
- 14.Company law of Finland
- 15.Company law of France
- 16.Company law of Croatia
- 17.Company law of Hungary
- 18.Company law of Ireland
- 19.Company law of Italy
- 20.Company law of Lithuania
- 21.Company law of Luxembourg
- 22.Company law of Latvia
- 23.Company law of Malta
- 24.Company law of Netherlands
- 25.Company law of Poland
- 26.Company law of Portugal
- 27.Company law of Romania
- 28.Company law of Slovenia
- 29.Company law of Slovakia
- 30.Company law of Sweden
- 31.ePrivacy Directive
- 32.eIDAS 2.0
- 33.PECR 2003
- 34.EU AI Act
- 35.Green Transition Directive
- 36.Consumer Rights Act 2015
- 37.Pay Transparency Directive
- 38.Working Time Directive
- 39.ECCTA 2023
- 40.Employment Rights Act 2025
- 41.Equality Act 2010
- 42.MTD ITSA
- 43.Right to Work Checks
- 44.National Minimum Wage
- 45.HSWA 1974
- 46.Fire Safety Order 2005
- 47.Cyber Essentials
- 48.PCI DSS
- 49.Digital Services Act
- 50.Product Liability Directive
- 51.GPSR
- 52.European Accessibility Act
- 53.DMCC Act 2024
- 54.ISO 9001
- 55.EU AML Regulation
- 56.Platform Workers Directive
- 57.Bribery Act 2010
- 58.MLR 2017
- 59.UK Sanctions Regime
- 60.EU PPWR
- 61.Single-Use Plastics Directive
- 62.Waste Framework Directive
- 63.EPR for Packaging
- 64.ISO 45001
- 1.GDPR
- 2.UK GDPR and DPA 2018
- 3.Companies Act 2006
- 4.Company law of Austria
- 5.Company law of Belgium
- 6.Company law of Bulgaria
- 7.Company law of Cyprus
- 8.Company law of Czechia
- 9.Company law of Germany
- 10.Company law of Denmark
- 11.Company law of Estonia
- 12.Company law of Greece
- 13.Company law of Spain
- 14.Company law of Finland
- 15.Company law of France
- 16.Company law of Croatia
- 17.Company law of Hungary
- 18.Company law of Ireland
- 19.Company law of Italy
- 20.Company law of Lithuania
- 21.Company law of Luxembourg
- 22.Company law of Latvia
- 23.Company law of Malta
- 24.Company law of Netherlands
- 25.Company law of Poland
- 26.Company law of Portugal
- 27.Company law of Romania
- 28.Company law of Slovenia
- 29.Company law of Slovakia
- 30.Company law of Sweden
- 31.ePrivacy Directive
- 32.eIDAS 2.0
- 33.PECR 2003
- 34.EU AI Act
- 35.Green Transition Directive
- 36.Consumer Rights Act 2015
- 37.Pay Transparency Directive
- 38.Working Time Directive
- 39.ECCTA 2023
- 40.Employment Rights Act 2025
- 41.Equality Act 2010
- 42.MTD ITSA
- 43.Right to Work Checks
- 44.National Minimum Wage
- 45.HSWA 1974
- 46.Fire Safety Order 2005
- 47.Cyber Essentials
- 48.PCI DSS
- 49.Digital Services Act
- 50.Product Liability Directive
- 51.GPSR
- 52.European Accessibility Act
- 53.DMCC Act 2024
- 54.ISO 9001
- 55.EU AML Regulation
- 56.Platform Workers Directive
- 57.Bribery Act 2010
- 58.MLR 2017
- 59.UK Sanctions Regime
- 60.EU PPWR
- 61.Single-Use Plastics Directive
- 62.Waste Framework Directive
- 63.EPR for Packaging
- 64.ISO 45001
- 65.NIS2 Directive
- 66.Cyber Resilience Act
- 67.Data Act
- 68.UK NIS Regulations 2018
- 69.ISO 27001
- 70.ISO 27701
- 71.ISO 42001
- 72.CSRD
- 73.EU Taxonomy Regulation
- 74.Whistleblower Directive
- 75.Modern Slavery Act 2015
- 76.Procurement Act 2023
- 77.ISO 31000
- 78.ISO 37301
- 79.EU REACH
- 80.EU Deforestation Regulation
- 81.EU Battery Regulation
- 82.CBAM
- 83.RoHS Directive
- 84.WEEE Directive
- 85.CLP Regulation
- 86.CDM Regulations 2015
- 87.Building Safety Act 2022
- 88.SECR
- 89.UK REACH
- 90.Environment Act 2021
- 91.ISO 14001
- 1.GDPR
- 2.UK GDPR and DPA 2018
- 3.Companies Act 2006
- 4.Company law of Austria
- 5.Company law of Belgium
- 6.Company law of Bulgaria
- 7.Company law of Cyprus
- 8.Company law of Czechia
- 9.Company law of Germany
- 10.Company law of Denmark
- 11.Company law of Estonia
- 12.Company law of Greece
- 13.Company law of Spain
- 14.Company law of Finland
- 15.Company law of France
- 16.Company law of Croatia
- 17.Company law of Hungary
- 18.Company law of Ireland
- 19.Company law of Italy
- 20.Company law of Lithuania
- 21.Company law of Luxembourg
- 22.Company law of Latvia
- 23.Company law of Malta
- 24.Company law of Netherlands
- 25.Company law of Poland
- 26.Company law of Portugal
- 27.Company law of Romania
- 28.Company law of Slovenia
- 29.Company law of Slovakia
- 30.Company law of Sweden
- 31.ePrivacy Directive
- 32.eIDAS 2.0
- 33.PECR 2003
- 34.EU AI Act
- 35.Green Transition Directive
- 36.Consumer Rights Act 2015
- 37.Pay Transparency Directive
- 38.Working Time Directive
- 39.ECCTA 2023
- 40.Employment Rights Act 2025
- 41.Equality Act 2010
- 42.MTD ITSA
- 43.Right to Work Checks
- 44.National Minimum Wage
- 45.HSWA 1974
- 46.Fire Safety Order 2005
- 47.Cyber Essentials
- 48.PCI DSS
- 49.Digital Services Act
- 50.Product Liability Directive
- 51.GPSR
- 52.European Accessibility Act
- 53.DMCC Act 2024
- 54.ISO 9001
- 55.EU AML Regulation
- 56.Platform Workers Directive
- 57.Bribery Act 2010
- 58.MLR 2017
- 59.UK Sanctions Regime
- 60.EU PPWR
- 61.Single-Use Plastics Directive
- 62.Waste Framework Directive
- 63.EPR for Packaging
- 64.ISO 45001
- 65.NIS2 Directive
- 66.Cyber Resilience Act
- 67.Data Act
- 68.UK NIS Regulations 2018
- 69.ISO 27001
- 70.ISO 27701
- 71.ISO 42001
- 72.CSRD
- 73.EU Taxonomy Regulation
- 74.Whistleblower Directive
- 75.Modern Slavery Act 2015
- 76.Procurement Act 2023
- 77.ISO 31000
- 78.ISO 37301
- 79.EU REACH
- 80.EU Deforestation Regulation
- 81.EU Battery Regulation
- 82.CBAM
- 83.RoHS Directive
- 84.WEEE Directive
- 85.CLP Regulation
- 86.CDM Regulations 2015
- 87.Building Safety Act 2022
- 88.SECR
- 89.UK REACH
- 90.Environment Act 2021
- 91.ISO 14001
- 92.CER Directive
- 93.DORA
- 94.Cyber Solidarity Act
- 95.DUAA 2025
- 96.PSTI Act 2022
- 97.ISO 27002
- 98.ISO 27017
- 99.ISO 27018
- 100.ISO 22301
- 101.SOC 2
- 102.Digital Markets Act
- 103.ESPR (Ecodesign)
- 104.Machinery Regulation
- 105.Right to Repair Directive
- 106.Online Safety Act 2023
- 107.CS3D / CSDDD
- 108.SFDR
- 109.Foreign Subsidies Regulation
- 110.FSMA 2023
- 111.ISO 37001
- 112.MiFID II Compliance Agent
- 113.EU Climate Law
- 114.ISO 14064
- 115.ISO 50001
- 116.Cross Border B2B Compliance Agent
Sold on their own, and included in every paid level
- Where the writing reads as if a machine wrote it, line by line.
- Which claims you cannot legally make.
- Which consumer laws your words touch, with the law quoted.
Monthly.
- Which laws the work has to meet, each one quoted.
- What is met, what is missing, and what the agent still needs from you.
- The content filter agent comes with it.
Monthly.
- The status boards for 52 refineries and 32 pipelines.
- 15 road and sea corridors, and the country page.
- The fuel page is free to read. The full issue, the weekly summary, the news desk and the dashboard come with the subscription.
Monthly.
The law switches on by size, and the levels follow it
How to read it: a full dot is the level where the duty enters your account, a lighter dot is a duty you keep at every level above it, and an empty cell means the level does not carry it.
| Obligation | What triggers it | Start | Micro | Small | Medium | Complete |
|---|---|---|---|---|---|---|
| Company law, GDPR, UK GDPR, Companies Act | Every business, from the day it starts trading | |||||
| PECR and ePrivacy, for marketing and cookies | Any electronic marketing or website cookies | |||||
| Consumer Rights Act, green claims | Any sale to a consumer | |||||
| Working time, minimum wage, right to work, ERA 2025 | The first employee | |||||
| Health and safety, fire safety | Any premises or staff | |||||
| EU AI Act deployer duties | Any use of an AI system in the business, from 2 February 2025 | |||||
| GPSR, product liability, accessibility | Any product placed on the market | |||||
| Packaging EPR, PPWR, waste | Packaging placed on the market above the national threshold | |||||
| PCI DSS, anti-money-laundering, sanctions | Card payments; regulated activity; any cross border trade | |||||
| Bribery Act, DMCC, platform workers | Any commercial dealing; consumer sales; platform work | |||||
| Whistleblower Directive | 50 or more workers | |||||
| Pay Transparency Directive | 150 or more workers, reporting from 2027; 100 to 149 workers from 2031 | |||||
| NIS2 and UK NIS | Medium sized entity in a listed sector | |||||
| SECR, Modern Slavery statement, ECCTA fraud offence | Size tests: two of three for SECR, turnover above £36 million, balance sheet above £18 million, more than 250 employees, and every quoted company; total turnover of £36 million or more; the large organisation tests | |||||
| CSRD, Taxonomy, CBAM, deforestation, REACH | Listed SMEs; importers of covered goods; chemicals on the market | |||||
| Every toolkit, every change, the dated record | The compliance function itself |
A full dot marks the level where the duty enters the account. A lighter dot marks that it is carried at every level above. The size bands are the European Commission's SME definition, Recommendation 2003/361/EC: micro is under 10 staff and up to EUR 2 million, small is under 50 staff and up to EUR 10 million, medium is under 250 staff and up to EUR 50 million. The thresholds named in the table are each instrument's own: whistleblowing channels at 50 workers, Directive 2019/1937 Article 8; pay gap reporting at 150 workers from 2027 and at 100 workers from 2031, Directive 2023/970 Article 9; NIS2 for medium sized entities in the listed sectors, Directive 2022/2555 Article 2; SECR for a company exceeding two of three, turnover above £36 million, balance sheet above £18 million and more than 250 employees, and for every quoted company; Modern Slavery statements at total turnover of £36 million or more. The toolkit counts are 30 at Start, 46 at Micro, 64 at Small, 91 at Medium and 116 at Compliance Complete.
Every level runs inside a dedicated Claude account. Anyone can try a toolkit in their own Claude account. Compliance work runs in a dedicated one.
The Claude Max plan is £90 a month, paid to Anthropic. It is not included in any level, and ComplianceSME receives no part of it.
ComplianceSME is available inside Stripe and as a connector for Claude. See where it runs. Prices are in pounds sterling and stated exclusive of VAT.