Tag: compliance

HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.

Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js.

EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

Gathers all agreements with a vendor from your CLM, CRM, email and drive, lists signed and missing MSAs, DPAs and SOWs, and flags upcoming expirations, auto-renewal notice windows and surviving obligations. Needs those connectors. From Anthropic's legal plugin; verify against originals.

Quickly pre-screens incoming NDAs and sorts them green, yellow or red into standard approval, legal review or full review, focusing on non-competes, non-solicitation and missing carve-outs. Part of Anthropic's official legal plugin.

Methodology reference for US SOX 404 internal control audits: scoping significant accounts, sampling methods, workpaper and evidence standards, and classifying deficiencies, significant deficiencies and material weaknesses. Not audit or legal advice; needs professional review. By Anthropic.

Anthropic's official business operations plugin: vendor evaluations, process docs (flowcharts, RACI, SOPs), change requests, capacity planning, status reports and runbooks. Works without external tools and does more with ITSM and project management tools connected.

For internal auditors running SOX tests: lists key controls by area (revenue, procure-to-pay, payroll, close, ITGC) and period, sets sample sizes, samples from your population, and generates test workpaper templates and deficiency assessments. Needs professional review. Official from Anthropic.

Drafts common legal replies from templates: data subject requests, litigation hold notices, vendor legal inquiries, NDA requests and subpoenas, first checking for regulatory or litigation issues that templates should not handle. From Anthropic's legal plugin; have a lawyer review.

Reviews contracts clause by clause against your organization's negotiation playbook, flags deviations, proposes redlines and analyzes business impact. A skill from Anthropic's official legal plugin; conclusions need review by a legal professional.

Runs compliance checks on planned features, marketing campaigns or business initiatives: identifies applicable regulations such as GDPR and CCPA, required approvals and risks, and concludes go, go with conditions, or needs further review. From Anthropic's legal plugin; not legal advice.

Helps in-house legal score and rank risks in contracts, deals and disputes on a severity-by-likelihood matrix, write risk memos, and know when to escalate to senior or outside counsel. No other tools needed. From Anthropic's legal plugin; not legal advice, have a lawyer review.

Plugin for in-house legal: reviews contracts clause by clause against your negotiation playbook with suggested redlines, triages NDAs green/yellow/red, handles compliance and privacy questions, assesses legal risk and writes briefs. Official from Anthropic; default playbook assumes US law.

Three kinds of briefs for legal teams: daily briefs of to-dos and deadlines from email, calendar and contracts; topic briefs on a legal question; and incident briefs for breaches, litigation threats or regulator inquiries. Needs email and calendar tools. From Anthropic; not legal advice.

Large multi-domain plugin marketplace: 99 plugins bundle hundreds of skills, agents and slash commands covering engineering, marketing, product, project management, regulatory and quality, finance and C-level advisory. Also offers install options for Codex, Gemini CLI and others.

A collection of 380+ skills across engineering, product, marketing, compliance, finance and executive advisory roles, with many standard-library Python scripts. Claude Code can install them by domain as plugins; works with Codex, Gemini CLI and a dozen other agents.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model.

Official AWS MCP that validates CloudFormation templates for syntax and security compliance, diagnoses deployment failures, and searches CloudFormation and CDK docs, code samples and best practices. Replaces the deprecated Cloud Control API server; needs AWS credentials.

Drafts employee policies such as remote work, parental leave and PTO, generates state or country supplements where rules differ, and flags laws in flux. Mostly US states; needs web access for regulations and is best installed with the employment-legal plugin. Lawyer review required. By Anthropic.

When revising an employee handbook, compares proposed changes clause by clause with the current version, finds knock-on effects (such as PTO changes affecting final pay) and state supplement changes, and flags risks of cutting existing benefits. US-focused; needs legal review. By Anthropic.

Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review.