145 frameworks. 2,368 controls. Seven markets.
The catalogue is grouped by market and, inside each market, by domain: cyber and resilience, AI, privacy, prudential, payments, AML, ESG, transport and customs, health and safety, management systems. Each regime becomes a control set you can scope to your institution type and work through.
European Union
14 frameworksUnited States
39 frameworksUnited Kingdom
20 frameworksGermany
16 frameworksItaly
14 frameworksBulgaria
19 frameworksGlobal standards
23 frameworksScoped to the institution you are, not to the whole catalogue.
An institution-profile filter scopes the list to a universal bank, a payment institution, a card processor or a leasing company, and marks each regime with the reasoning. The judgement stays with your people; the platform shows its working.
The regime binds this institution type on its own terms. Its controls are in scope by default.
In scope if a stated condition holds, such as a threshold, an activity or a group structure. The condition is shown.
Does not bind this institution type. Hidden by default, one click away if you disagree.
If the regime you answer to is not listed, say which one and why. The catalogue is data, not code, and a new control set is an editorial change rather than a release.