Help us keep every country's obligations current.

NIS2's 27 national transpositions, and the broader framework library this platform maintains, need ongoing regional legal and regulatory expertise to stay accurate — not a one-time build.

The maintenance problem

A directive becomes twenty-seven national laws on twenty-seven national clocks, and then keeps moving — implementing decrees, supervisory-authority guidance, deadline shifts, court decisions. The same is true in slower motion for ISO revisions, NIST updates, and the expanding AI Act rulebook. Any platform that maps obligations to controls is only as good as the day its content was checked.

What content partners do

Regional specialists verify what changed in their jurisdiction, review the affected country and framework pages, and flag where an obligation's wording, deadline, or scope has moved. Changes do not silently rewrite client control models — they land as reviewable proposals against the controls they cite, so the platform's users see what moved and approve what changes.

This is how the country pages on this site stay honest: someone with standing in the jurisdiction reads them against the actual transposition, on a schedule, not once at launch.

Who fits

Practices and specialists with regulatory expertise in a specific member state, the UK, or a framework domain — supervisory-authority watchers, national-security-law practitioners, standards-committee members. Terms are discussed directly; the work is scoped per jurisdiction.

If you publish or follow a jurisdiction's cyber-governance developments and can put your name behind a review, there is a lane for you. What there is not, deliberately, is a way to buy placement in the library — content authority is earned by verification, not by fee.