Home Product Coverage Sample brief How it works Methodology Claude MCP About Discuss coverage

Vellum Intelligence

Regulatory movement, turned into usable judgement.

For in-house counsel, policy and compliance leads, founders, consultancies, and advisory firms who need decision-grade regulatory intelligence without standing up a research team.

Subscribe to a catalogue monitor, or commission a scoped brief built to your specific framework. Either way you get structured intelligence on digital and financial regulation across 26 monitors and nine jurisdictions — faster, more consistently, and at a fraction of the cost of building equivalent internal capacity. From £2,500 per month, per monitor.

Human-ledEvery brief reviewed and signed off by a named editor before delivery.
AI-scaled26 monitors, 60+ instruments, nine jurisdictions — covered by a production workflow only AI makes possible.
Lower costA fraction of the cost of equivalent in-house research or traditional advisory capacity.
24-hour deliveryA brief on any catalogue monitor, delivered within 24 hours of commission.

Why this matters

Regulatory change isn’t the hard part to find.

The hard part is knowing what matters, what is credible, and what requires attention — faster than alerts can tell you and more consistently than internal teams can produce. Vellum is built around the gap between regulatory volume and decision-ready judgement.

Regulatory overload

Alerts and newsletters create noise. Internal teams rarely have time to triage and analyse against their specific exposure.

Cost of internal capacity

Standing up a regulatory research function — or retaining senior advisory firms — is expensive and slow to scale across jurisdictions.

Cross-jurisdictional gap

The most consequential regulatory questions sit between regimes. Most providers cover one jurisdiction; Vellum draws the connections for you.

What you receive

A structured intelligence brief.

Every Vellum brief is anchored to a defined coverage window and built around the same architecture: what changed in the period, what it means operationally, what remains uncertain, and what to watch on a 30/60/90-day horizon. Each development carries a status, a confidence rating, a date, a named actor, and an assessment of the likely landing zone.

The same standard applies whether the brief covers DSA enforcement, GCC financial regulation, or a scoped monitor we build on a framework relevant to your specific exposure. Source ratings, evidentiary treatment, and explicit treatment of uncertainty are non-negotiable.

See the full sample brief →
DSA Enforcement Monitor · Sample 15–27 March 2026

1. Commission opened formal proceedings against Snap Inc.

Formal proceedings — five-area investigation
High
26 March 2026
European Commission

The Commission opened formal proceedings against Snap Inc. under DSA Articles 34–35 (systemic risk) to investigate whether Snapchat is ensuring a high level of safety, privacy, and security for children. The investigation covers five areas including age assurance, grooming risk, and access to illegal goods.

The five-area scope and the absorption of the Dutch DSC investigation signal that the Commission assessed sufficient evidence to proceed to formal proceedings rather than issue a preliminary RFI — pointing to interim measures or preliminary findings within 6–12 months absent proactive remediation.

Excerpt · full brief is 10 pages

What clients say

From those who have used Vellum.

“Insightful, clearly structured, and demonstrated the added value that Vellum Intelligence can bring.”
European regulator
“The brief covered exactly the cross-jurisdictional issues we needed. The depth of analysis and discipline exceeded our expectations.”
UK consulting firm
“A clear, well-structured brief that helped us understand fast-moving UK regulatory developments and their practical implications. Concise, credible, and directly relevant to our policy and commercial priorities.”
UK consulting firm · policy & commercial
“The quality of the analysis, the cross-jurisdictional context, and the clarity of the conclusions made it immediately useful for senior decision-making.”
UAE-based technology company

Coverage

The regulatory environment we monitor.

Twenty-six monitors across digital and financial regulation in the jurisdictions where our clients operate. Each instrument we track — binding law, regulator guidance, implementation act, consultation, or active proposal — connects to a dedicated monitor.

Where geopolitics shapes regulation — investment screening, foreign subsidy rules, platform restrictions, cross-border data controls — we track those instruments as regulation, not as commentary.

26 monitors · 60+ instruments tracked · Explore the full map →

How we work

A more disciplined way to track change.

We scope coverage to the question, gather and structure evidence within the period, distinguish fact from inference from uncertainty, and deliver a single structured output. Recurring clients receive cumulative coverage: each brief shows what is genuinely new, what remains stable, and where attention should focus next.

See methodology in full →

Built for decisions, not for reading.

Subscribe to a catalogue monitor, or commission a scoped brief on the framework that matters to you. Same editorial standard, same delivery commitment, same human sign-off.

Product

The same editorial standard, delivered two ways.

Vellum produces one product — a structured intelligence brief, written for the specific client, delivered at agreed cadence. Subscribe to any monitor in our catalogue, or commission a scoped monitor that we build on a framework relevant to your specific exposure. Both routes share the same editorial standard. Catalogue briefs deliver within 24 hours of commission; the first brief of a scoped monitor within 48.

Two ways to buy

Catalogue monitors

Subscribe to any of the 26 monitors we already maintain — DSA, OSA, EU AI Act, KSA Financial, and twenty-two more. Cadence agreed at onboarding, and each brief delivered within 24 hours of commission.

Scoped monitors

If your exposure isn’t in the catalogue, we build a custom monitor on the framework that matters to you — same editorial standard, same cadence, with the first brief delivered within 48 hours. Few intelligence providers will build to a single client’s shape; we do.

Pricing

From £2,500/month per monitor — a fraction of the cost of building or retaining equivalent in-house or advisory capacity.

  • Bundles — multi-monitor and multi-jurisdiction bundles span catalogue and scoped monitors in a single engagement.
  • Annual commitment — 10% discount when you commit for a year.
  • Flexible monthly — one-month rolling renewal, 10% premium for the optionality.
  • All engagements — organisation-wide access, ex-VAT.
Discuss coverage and pricing →

Catalogue

What we monitor.

Twenty-six monitors across digital and financial regulation. Each tracks the binding law, regulator guidance, implementation acts, consultations, and active proposals that materially affect compliance, product, and market access.

Digital regulation

DSA Enforcement MonitorClaude MCP
EU. Commission proceedings, national DSC supervision, the full tier of intermediary and platform obligations — hosting providers, marketplaces, online platforms of all sizes, VLOPs. Election-period obligations included.
EU AI Act MonitorClaude MCP
EU. AI Act implementation and enforcement: prohibited practices, high-risk AI, GPAI rules, AI Office activity, delegated acts. Includes AI-on-elections provisions.
European Media Freedom Act Monitor
EU. Media pluralism rules, ownership transparency, editorial independence, obligations on platforms and intermediaries carrying media content, and the intersection with DSA enforcement.
Digital Markets Act Monitor
EU. DMA gatekeeper obligations, Commission enforcement, interoperability and access obligations, designated platform compliance.
EU National Overlay Monitor
EU. National-level implementation overlaying EU frameworks. Scope agreed per client. E.g. Germany (DDG/NetzDG), France (SREN/ARCOM), Ireland (Online Safety Code).
EU Legislative Pipeline Monitor
EU. Active legislative proposals and policy files at Commission, Council, and Parliament level — before they become binding obligations.
UK Online Safety Act MonitorClaude MCP
UK. Ofcom enforcement, category thresholds, safety duties, age assurance requirements, children's online safety. Election-period platform duties included.
UK Digital Regulation Monitor
UK. DMCCA / CMA digital markets regime, NSI Act, Data (Use and Access) Act, Media Act, AI and copyright policy, sector-led AI regulation.
US Digital & AI Regulation Monitor
US. State AI laws, FTC AI enforcement, NIST AI framework, federal AI policy, platform regulation activity at federal and state level.
Canada Digital & AI Regulation Monitor
Canada. AIDA developments, federal digital regulation, provincial privacy and AI frameworks, OPC guidance.
Hong Kong Digital & Tech Regulation Monitor
Hong Kong. PCPD privacy enforcement, cybersecurity legislation, platform and content regulation, AI governance activity.
Singapore Digital & Tech Regulation Monitor
Singapore. PDPC enforcement, IMDA platform rules, AI governance framework, online safety codes, cybersecurity regulation.
Turkey Digital & Tech Regulation Monitor
Turkey. KVKK enforcement, social media law, disinformation rules, BTK telecom and cybersecurity, localization requirements.
Morocco Digital & Tech Regulation Monitor
Morocco. Law 09-08, CNDP guidance, ANRT telecom rules, cybersecurity framework, emerging AI governance.

Financial regulation

EU Financial Regulation Monitor
EU. DORA, PSD2/PSD3/PSR, MiCA, AML/AMLA, FiDA, CRD/CRR digital risk rules, AI Act financial high-risk systems.
UK Financial Regulation Monitor
UK. FCA, PRA, BoE supervisory activity, Financial Services and Markets Act, Consumer Duty, Operational Resilience, cryptoasset regime, open banking.
US Financial Regulation Monitor
US. NYDFS cybersecurity, SEC cyber rules, OCC and Federal Reserve technology guidance, CFPB open banking, FinCEN AML.
KSA Financial Regulation MonitorClaude MCP
Saudi Arabia. SAMA banking prudential and conduct, CMA capital markets, Open Banking Framework, fintech licensing, AML/CFT.
UAE Financial Regulation Monitor
UAE. CBUAE, DFSA (DIFC), FSRA (ADGM), SCA, virtual assets regulation, fintech licensing, cross-jurisdictional digital finance.
Qatar Financial Regulation Monitor
Qatar. QCB supervisory activity, QFCRA, capital markets regulation, fintech and digital finance framework.
Singapore Financial Regulation Monitor
Singapore. MAS supervisory and licensing activity, digital asset regulation, payment services, AI in finance guidance.
Hong Kong Financial Regulation Monitor
Hong Kong. SFC, HKMA, virtual asset regime, stablecoin framework, cross-border finance with mainland China.
Turkey Financial Regulation Monitor
Turkey. BRSA supervision, CMB capital markets, payment and e-money regulation, crypto restrictions, fintech licensing.
Morocco Financial Regulation Monitor
Morocco. BAM banking supervision, AMMC capital markets, payment regulation, emerging open banking framework.

Cross-jurisdiction & cross-cutting

GCC Tech Policy & Regulation Monitor
All six GCC jurisdictions. Data protection, AI governance, cloud and infrastructure regulation, platform rules, cybersecurity, digital market-entry. Regulatory environment only — not political or macroeconomic risk.
EU/UK Policy Impact on Chinese Business Monitor
Cross-cutting. What EU and UK regulators, legislators, and enforcement bodies do that materially affects Chinese-owned or Chinese-operated businesses in European markets — DSA/DMA enforcement, foreign subsidies, investment screening, data transfer restrictions, platform and infrastructure targeting.

If your exposure isn't in the catalogue, we build a scoped monitor to your specific framework — same editorial standard, same delivery format, first brief within 48 hours of commission. Discuss a scoped monitor.

Delivery

How you receive it.

Cadence is agreed at onboarding — weekly, biweekly, monthly, or quarterly. Catalogue briefs are delivered within 24 hours of commission; the first brief of a scoped monitor within 48 hours. The format is consistent across both: structured executive summary, key developments with named sources and confidence ratings, decision points on a 30/60/90-day horizon, and full sourcing.

Every brief is written for the specific client. The methodology is standard; the framing — what matters for your position, your exposure, your decision horizon — is set with you. Every brief is reviewed and signed off by a named editor before it reaches you.

Coverage can begin with one monitor and expand as exposure grows. Multi-monitor clients receive coordinated coverage across the frameworks they subscribe to.

Brief us on your exposure.

We'll come back with a scoped proposal — which monitors, what cadence, what's in or out of scope.

Coverage

The regulatory environment we monitor.

Twenty-six monitors and 60+ instruments across digital and financial regulation, in the jurisdictions where our clients operate. Each instrument we track — binding law, regulator guidance, implementation act, consultation, or active proposal — connects to a dedicated monitor. Click any region on the map to see the monitors and instruments covering it.

Status
Thread
Cross-cuts
In force In flight Watch

Coverage is maintained continuously from primary regulator sources and reputable secondary reporting. Status reflects the most current available signal and is reviewed on each publication cycle.

In force
Binding law or regulation currently in effect.
In flight
Adopted or progressing — in transition, phased commencement, or active legislative passage.
Watch / pipeline
Active proposal, consultation, or policy file not yet binding.

Changes this month

What's moved.

Status transitions, new proposals, and notable enforcement actions added to the registry in the last publication cycle.

Last publish: 14 May 2026

    Behind the map

    How this map is maintained.

    The coverage map is maintained by a dedicated agent in our intelligence system. Each week it checks every instrument we track against its source feeds, flags changes, and routes them through editorial review. Approved updates publish regularly.

    No instrument moves on the map without human sign-off. No "last updated" claim is made without a corresponding entry in our changelog.

    Find your exposure on the map?

    Tell us which frameworks matter and we'll come back with a scoped proposal.

    How It Works

    A more disciplined way to track change

    Vellum combines structured intelligence methods, source discipline, and high-quality analysis to produce outputs that are clear, credible, and operationally useful.

    The process

    Step 01

    Scope the question

    We begin by defining the issue, jurisdictions, time horizon, and exposure areas that matter to the client. That may involve a standing coverage mandate, a specific commissioned question, or a narrower decision point requiring targeted analysis.

    Step 02

    Collect and structure the evidence

    Vellum gathers and organises relevant developments within a defined coverage window. This includes careful attention to:

    • Official sources
    • Named actors
    • Dates and chronology
    • Legal and policy status
    • Current law versus proposed change
    • Enforcement and implementation signals

    The aim is not to gather everything. It is to gather what matters and structure it properly.

    Step 03

    Analyse relevance and uncertainty

    We assess what the evidence shows, what can reasonably be inferred, and what remains uncertain. This stage is where Vellum's work moves beyond summary. We examine significance, direction of travel, client exposure, and decision relevance without overstating what the evidence can support.

    Step 04

    Deliver a structured output

    The final product is delivered as a clear, organised intelligence output rather than an undifferentiated update. Depending on format, that may include:

    • What changed since the last brief
    • Why it matters
    • Confidence levels
    • Implications for the client
    • Next-step considerations
    • Issues to watch over the next 30, 60, and 90 days
    Step 05

    Support recurring judgement

    For recurring clients, Vellum coverage is cumulative. Each cycle is designed to help the client understand what is genuinely new, what remains stable, what is becoming more likely, and where further action or attention may be required. This creates continuity over time rather than isolated updates.

    Principles

    The principles behind the process

    Time-bounded coverage

    Clear date windows make changes easier to track and compare.

    Source discipline

    Named sourcing, careful attribution, and evidentiary clarity remain central throughout.

    Analytical restraint

    We do not collapse fact, assessment, and uncertainty into one undifferentiated conclusion.

    Client relevance

    Analysis is framed around the client's likely exposure, operating environment, and decision horizon.

    Vellum is built to reduce noise, sharpen judgement, and support action

    About

    Intelligence for serious operators

    Vellum Intelligence serves clients navigating regulatory, policy, and compliance complexity across digital regulation, financial regulation, and cross-border environments.

    Who we are

    A human-led intelligence operation, scaled by AI.

    Vellum is a human-led AI system. Our production workflow is AI-native — which is what lets us cover 26 monitors and deliver briefs within 24 hours of commission at a fraction of the cost of equivalent internal or advisory capacity — but every brief is reviewed and signed off by a named editor before it reaches the client. The AI scales the work. The judgement is ours.

    We produce structured intelligence for decision-makers who need a clearer view of what is changing, why it matters, and what may need attention next. Our work is designed to be useful to professionals whose time is limited and whose decisions carry real legal, commercial, strategic, or reputational consequences.

    Technology regulationAI policyPlatform governanceFinancial policy and regulationCompliance

    What we believe

    Discipline matters

    In fast-moving policy and regulatory environments, the problem is rarely lack of information. It is lack of clarity.

    Vellum is built on a simple view: intelligence should be precise, transparent about uncertainty, and directly relevant to the decisions ahead.

    The aim is not to provide more information. It is to provide better judgement.

    That means:

    • No headline aggregation disguised as analysis
    • No overclaiming beyond the evidence
    • No false certainty where the picture is still forming
    • No unnecessary complexity in the writing

    Editorial standard

    Editorial independence is non-negotiable

    Commercial incentives do not determine analytical framing, topic selection, or evidentiary standards.

    We are careful about conflicts, disciplined in sourcing, and clear about the limits of what can be known at a given moment.

    Client confidentiality is treated as an absolute commitment. If a conflict of interest would affect the integrity of our analysis, we decline or scope around it.

    The people behind Vellum

    Founder & co-founder.

    A pairing of regulatory and platform-governance depth with the operational discipline of senior management consulting.

    Hakim Charles, founder of Vellum Intelligence

    Hakim Charles

    Founder

    Hakim built Vellum after senior public policy roles at X Corp/xAI and Meta, and other intelligence firms, where he led government and regulatory engagement across European and MENA markets. He set up Vellum to bring the same level of analytical discipline he expected internally at platforms — to the in-house counsel, policy leads, and advisory firms now navigating the same regulatory landscape from the other side.

    LinkedIn → · hakim@vellumintel.com

    Meryem Benkirane, co-founder of Vellum Intelligence

    Meryem Benkirane

    Co-Founder

    Meryem brings over a decade of management consulting and engineering experience to Vellum, having led large-scale transformation and portfolio programmes for blue-chip clients across energy, healthcare, retail, and transport at leading international consultancies. She holds an MBA from IAE Paris–Sorbonne and an engineering degree from ENSEEIHT.

    LinkedIn → · meryem@vellumintel.com

    Vellum Intelligence on LinkedIn →

    What makes Vellum distinctive

    Human-led editorial

    Every brief is reviewed and signed off by a named editor before delivery. AI does not write to the client.

    AI-scaled coverage

    An AI-native production workflow lets us cover 26 monitors and deliver briefs within 24 hours, at a fraction of the cost of building equivalent in-house or advisory capacity. The economics are AI-native; the judgement is not.

    24-hour delivery

    A brief on any catalogue monitor, delivered within 24 hours of commission. The first brief of a scoped monitor within 48 hours.

    Source discipline

    Named sourcing, exact dates, and explicit confidence ratings on every assessment. Fact, inference, and uncertainty kept distinct.

    Client-specific relevance

    Every brief is written for your position, your exposure, your decision horizon. The methodology is standard; the framing is custom every time.

    Consistent, repeatable, reliable

    Every brief has the same structure, the same evidentiary standard, the same shape on the page — whether it’s the third brief or the thirtieth. A format your team learns once and uses forever.

    The aim is not to say more. It is to say what matters, clearly.

    Methodology

    How Vellum produces intelligence clients can trust

    Vellum's methodology is designed to make analysis more useful, more transparent, and more accountable to evidence.

    Core commitments

    Every Vellum output is built around a small number of non-negotiable standards

    Exact dates

    We anchor developments in time so clients can understand what happened, when it happened, and how the picture is changing. Precision in dating is not a formality — it is how change becomes trackable.

    Named actors

    Where relevant, we identify the institutions, officials, companies, regulators, and other actors shaping the issue. Anonymous attribution is used only where sourcing genuinely requires it.

    Source discipline

    We rely on verifiable material and treat evidence carefully. Attribution matters. We do not present inference as fact or assessment as certainty.

    Current law vs proposed change

    We distinguish between enacted measures, draft proposals, political intent, enforcement signals, and implementation uncertainty. These categories carry very different operational significance.

    Fact, inference, uncertainty

    We separate what is directly supported by the evidence from what is assessed and what remains unclear. Clients should always be able to understand not just the conclusion, but the confidence behind it.

    Client-specific relevance

    We do not stop at describing developments. We explain why they matter for the client's operating environment, legal position, and decision horizon.

    In practice

    What a Vellum output may include

    • A clearly defined coverage window
    • Key developments within that period
    • What changed since the last cycle
    • Direct implications for the client
    • Confidence levels or confidence language
    • Near-term decision points
    • Issues to watch over the next 30, 60, and 90 days

    Why this matters

    This approach helps clients

    • Track change with more precision
    • Distinguish signal from noise
    • Understand the strength of an assessment
    • Make better-informed decisions in uncertain environments

    Vellum is designed to be clear about both knowledge and limits. Strong intelligence does not depend on pretending uncertainty does not exist. It depends on handling uncertainty honestly and using evidence with discipline.

    See how the method appears in the final product

    Sample Brief

    See the structure behind the analysis

    The Vellum Brief is designed to be practical, precise, and easy to use under real decision pressure.

    Sample outputs

    Sample Brief — PDF

    DSA Enforcement Brief

    A live sample of the Vellum Brief format — covering DSA enforcement developments with what changed, why it matters, and 30/60/90-day decision points.

    Open PDF →
    Sample Monitor — PDF

    EU AI Act Monitor

    A sample of the Vellum Monitor format — tracking EU AI Act implementation with structured analysis of regulatory milestones, compliance deadlines, and exposure areas.

    Open PDF →

    Want a sample tailored to your exposure? We’ll build one against your specific framework.

    Request a tailored sample →

    What a brief includes

    A typical Vellum Brief may include

    Coverage window

    A clearly defined period so the client can track developments in sequence. Every brief is time-anchored from the outset.

    Executive summary

    The most important developments, implications, and near-term watchpoints — structured for the time-constrained reader.

    What changed

    A focused account of the developments that materially changed the picture during the coverage window.

    Why it matters

    Clear explanation of relevance to the client's legal, policy, operational, or strategic position — not generic commentary.

    Confidence ratings

    Direct treatment of what is known, what is assessed, and what remains unresolved — expressed as explicit confidence ratings. Clients see the evidential basis, not just the conclusion.

    Decision points

    Issues that may require attention over the next 30, 60, and 90 days — structured for forward planning.

    What to watch next

    Signals likely to matter in the next reporting cycle. Designed to inform standing attention rather than reactive monitoring.

    A Vellum Brief is not designed to look busy. It is designed to be useful. The structure is intentionally restrained so that clients can identify the signal quickly, understand the evidentiary basis, and act with greater confidence.

    Delivery modes

    One product, two ways to receive it

    The brief format is the same whether it is delivered at a recurring cadence on a catalogue monitor, or on a scoped monitor we build on a framework relevant to your specific exposure. The editorial standard does not change.

    Either route produces the same kind of output:

    • Time-bounded coverage window
    • Structured executive summary
    • What changed, with named sources
    • Confidence ratings on each assessment
    • 30/60/90-day decision points

    Cadence is agreed at onboarding — weekly, biweekly, monthly, or quarterly. Catalogue briefs are delivered within 24 hours of commission; the first brief of a scoped monitor within 48. Every brief is reviewed and signed off by a named editor before delivery. To discuss coverage, contact us.

    Now request a brief tailored to your exposure.

    The samples above show the format. The next step is a conversation about which catalogue monitor fits your team — or what a scoped brief built around your specific framework would cover.

    Claude MCP add-on

    Vellum monitors, queryable from Claude.

    Subscribers can query their Vellum monitors directly from Claude — inside Word, Outlook, Claude Desktop, Claude Code, or any environment that supports the Model Context Protocol. The brief comes to the workflow, not the other way around.

    What changes

    The brief comes to the draft.

    A regulatory question arises in a client memo, a board paper, or an internal note. Instead of switching to a separate research portal, ask Claude. The relevant Vellum brief content surfaces in the conversation, with verification status visible — sourced claims, primary-source provenance, brief state.

    Vellum becomes ambient in the workflows where decisions are made.

    How it works

    One configuration, then ambient access.

    Vellum's MCP server exposes monitor content to your Claude environment through standardised tools. Subscribers receive an API key tied to their plan, configure the connector once, and Vellum is reachable inside Claude wherever they work.

    Every response carries Vellum's verification footer — sourced-claim count, primary-source connectors live at generation time, and whether the brief is draft, final, or corrected. Subscribers see exactly how much of any Vellum answer is primary-sourced versus editorially asserted.

    Coverage

    Available on four monitors today.

    MCP access is currently available on:

    Additional monitors are added as Vellum coverage deepens. Subscribers are notified as new monitors become available with MCP access.

    Positioning

    Curated editorial intelligence, where the workflow happens.

    Anthropic's recently released Regulatory Legal plugin helps in-house teams track regulatory change against their own playbook. Vellum sits alongside it — the curated cross-jurisdictional editorial layer above. Subscribers running both get firm-specific playbook tracking and Vellum's regulatory monitors in the same Claude thread.

    The editorial brief remains the core product. MCP is the workflow surface.

    Access

    An add-on to monitor subscriptions.

    MCP access is an add-on to any Vellum monitor subscription, not a standalone product. To add MCP to your subscription, or to discuss coverage, get in touch.

    For details on how Vellum handles data processed through the MCP add-on — including what we log, what we don't, retention periods, and the Vellum ↔ Anthropic data flow — see Section 6 of our Privacy Policy.

    Vellum Intelligence is an independent regulatory intelligence platform. Claude and the Model Context Protocol are products of Anthropic, used here as integration targets.

    Add Claude MCP to your Vellum subscription.

    Tell us which monitors you would like MCP access on and we will walk you through setup.

    Contact

    Start the conversation

    If you would like to discuss coverage, product fit, or a specific intelligence requirement, get in touch.

    Get in touch

    Typical conversations include

    • Recurring intelligence coverage on a catalogue monitor
    • A scoped monitor built on a framework relevant to your specific exposure
    • Multi-monitor bundles across catalogue and scoped coverage
    • Whether Vellum is the right fit for a specific decision or programme

    Tell us what you are tracking, where you are exposed, or what decision is approaching. We will respond with a clear view of fit and next steps.

    Direct contact

    contact@vellumintel.com

    We respond to all enquiries directly. Your information is kept strictly confidential.

    Already a client?

    Complete your onboarding

    If you have already agreed terms with Vellum Intelligence, use our secure onboarding form to share the context we need to begin your programme.

    Start onboarding →

    Legal

    Privacy Policy

    How Vellum Intelligence collects, uses, and protects your information.

    Last updated: May 2026  ·  Vellum Intelligence Corp.

    1. Who we are

    Vellum Intelligence Corp. ("Vellum Intelligence", "we", "us", or "our") operates the website at vellumintel.com and provides AI-native intelligence services covering regulatory, policy, and compliance matters across digital and financial regulation. We are the data controller for any personal data you provide to us.

    For all data protection enquiries, contact us at: privacy@vellumintel.com

    2. What data we collect

    We collect personal data only when you voluntarily provide it to us, or when it is generated as a necessary part of delivering our services. This includes:

    • Contact form submissions — name, organisation, email address, and the content of your message when you use our "Get in touch" form.
    • Client onboarding data — information you provide through our secure onboarding form, including organisational details, strategic priorities, and contact information.
    • Communications — the contents of emails or messages you send to us directly.
    • Technical data — if you consent to analytics cookies, we may collect anonymised information about how you interact with our website (pages visited, time on site, device type). This data does not identify you personally.
    • Claude MCP add-on data — for subscribers who have activated the Claude MCP add-on on their subscription: the API key issued to the subscriber, a record of which Vellum tools were called, timestamps, and a minimal log of which monitors and briefs were queried. We do not log the content of the questions you ask Claude, nor the conversations in which Vellum tools are called. Further detail is set out in Section 6 below.

    We do not collect sensitive personal data (such as health information, political opinions, or financial data) through this website.

    3. How we use your data

    We use your personal data for the following purposes:

    • To respond to your enquiries and assess whether our services are a suitable fit for your needs.
    • To deliver intelligence services to clients who have engaged us.
    • To communicate with you about your account, our work, or relevant developments.
    • To improve our website and service offering, where you have consented to analytics.
    • To comply with applicable legal obligations.

    4. Legal basis for processing

    We rely on the following legal bases under UK GDPR and EU GDPR:

    • Legitimate interests — to respond to enquiries, deliver services to clients, and improve our operations, where these interests are not overridden by your rights.
    • Contract performance — to fulfil our obligations under any agreement with you or your organisation.
    • Consent — for optional analytics cookies, where you have given explicit consent through our cookie preference banner.
    • Legal obligation — where we are required to process your data to comply with applicable law.

    5. Third-party processors

    We use a small number of trusted third-party services to operate this website and our services. Each processes data only as necessary for the specified purpose:

    • Formspree (formspree.io) — processes contact form submissions and securely routes them to our team. Formspree is subject to its own privacy policy at formspree.io/legal/privacy-policy.
    • Cloudflare — provides security, performance, and bot-protection services for this website. Cloudflare may process limited technical data (such as IP addresses) to deliver these functions. See cloudflare.com/privacypolicy.
    • Anthropic PBC — for subscribers who have activated the Claude MCP add-on: Anthropic operates the Claude environments (Claude Desktop, Claude Code, Claude for Microsoft 365, and the Claude API) through which subscribers query Vellum monitors. When a subscriber's Claude instance calls a Vellum MCP tool, the request transits Anthropic's infrastructure. Anthropic's processing of that traffic is governed by Anthropic's own privacy policy at anthropic.com/legal/privacy, which the subscriber accepts when they configure their Claude account. Further detail on the Vellum ↔ Anthropic data flow is set out in Section 6.

    We do not sell, rent, or share your personal data with any other third parties for marketing or commercial purposes.

    6. Claude MCP add-on

    Vellum offers a Claude MCP (Model Context Protocol) add-on as part of selected monitor subscriptions. The add-on allows subscribers to query their Vellum monitor content directly from within Claude environments — including Claude Desktop, Claude Code, Claude for Microsoft 365, and other environments that support the Model Context Protocol. This section sets out the specific data-handling practices that apply when the add-on is activated.

    6.1 What is processed

    When a subscriber configures their Claude environment with the Vellum MCP connector and then queries Vellum monitors, the following data is processed:

    • Authentication credential — the API key issued to the subscriber, transmitted with each tool call to authenticate the request and verify the subscriber's entitlements (which monitors they subscribe to, whether MCP access is on their plan).
    • Tool-call metadata — the name of the Vellum tool being called (for example, vellum_search, vellum_get_brief), the parameters supplied to that tool (such as a monitor identifier or a brief ID), and a timestamp.
    • Response content — the Vellum monitor or brief content returned to the subscriber's Claude environment in response to the call, drawn from Vellum's published editorial library for that subscriber's subscribed monitors.

    We do not log, store, or have access to:

    • The content of the questions a subscriber asks Claude.
    • The conversations a subscriber has in Claude, including the broader context in which a Vellum tool is called.
    • Any other data from a subscriber's Claude environment, including documents, emails, calendar items, or files the subscriber may have connected to Claude from other sources.

    The Vellum MCP connector exposes read-only tools — it can return monitor content to a subscriber's Claude environment, but it cannot read from, write to, or otherwise act on any other data in that environment.

    6.2 The Vellum ↔ Anthropic data flow

    Tool calls from a subscriber's Claude environment transit Anthropic's infrastructure to reach Vellum's MCP server. Specifically:

    • The subscriber configures the Vellum connector in their Claude environment with the URL of the Vellum MCP server and their Vellum API key.
    • When the subscriber asks Claude a question that calls a Vellum tool, Anthropic's Claude product sends the tool-call request — including the subscriber's API key in the request header and the tool parameters in the request body — to the Vellum MCP server.
    • The Vellum MCP server verifies the API key, checks the subscriber's entitlements, retrieves the relevant content from Vellum's editorial library, and returns it to the subscriber's Claude environment.
    • Anthropic's handling of the request as it transits Anthropic's infrastructure is governed by Anthropic's privacy policy at anthropic.com/legal/privacy, including Anthropic's commitments on whether and how customer data is used to train Anthropic's models. Subscribers accept Anthropic's privacy policy when they configure their Claude account.
    • Vellum is not a controller of subscriber-side data inside Anthropic's environment (questions asked, conversation context, files connected). That relationship is between the subscriber and Anthropic.

    6.3 No use of subscriber data for AI training

    Vellum does not use any data processed through the MCP add-on — including tool calls, parameters, response content, or any inference from usage patterns — to train, fine-tune, or otherwise develop AI models, our own or anyone else's. Vellum's editorial product is human-led; we do not train models on subscriber-side usage of our content.

    Anthropic's separate commitments regarding the use of customer data to train Anthropic's models are governed by Anthropic's privacy policy and Anthropic's commercial terms. Enterprise and commercial Claude plans typically give the customer control over whether their data is used for Anthropic model training; subscribers should review Anthropic's current policies and their plan settings if this matters for their organisation.

    6.4 Retention

    Tool-call metadata logs (tool name, parameters, timestamp, subscriber identifier) are retained for up to 90 days for the purposes of operational monitoring, security incident investigation, and subscriber-specific quota and entitlement enforcement. After 90 days, individual tool-call logs are deleted; aggregated and anonymised usage metrics may be retained for longer in order to operate the service and inform product development.

    Response content (the monitor and brief content Vellum's MCP server returns) is not separately stored in connection with individual tool calls — it is drawn from Vellum's existing editorial library at the time of the call and returned to the requesting Claude environment without persistent per-call duplication on the Vellum side.

    6.5 Security

    API keys are issued per subscriber and tied to the subscriber's plan entitlements. Subscribers are responsible for protecting their API keys; if a key is exposed, subscribers should contact us at privacy@vellumintel.com to have it revoked and reissued. Vellum applies industry-standard controls to the MCP server, including HTTPS in transit, authentication checks on every call, and rate-limiting to mitigate abuse.

    6.6 Subscriber controls

    Subscribers may at any time:

    • Disable the Vellum connector in their Claude environment, after which Claude can no longer call Vellum tools.
    • Request that Vellum revoke the subscriber's API key, after which any tool calls made with that key are rejected.
    • Request a copy of the tool-call metadata logs associated with their API key, or request earlier deletion of those logs, by writing to privacy@vellumintel.com, subject to the rights set out in Section 9 below.

    Removing the MCP add-on from a subscription does not affect the underlying monitor subscription, which continues to be governed by the subscriber's engagement letter and the rest of this policy.

    7. Data retention

    We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

    • Contact form enquiries that do not lead to an engagement are retained for up to 12 months.
    • Client data is retained for the duration of the engagement and for a reasonable period thereafter (typically 3 years) for record-keeping and legal compliance purposes.
    • Analytics data, where collected, is retained in anonymised or aggregated form only.
    • Claude MCP add-on tool-call metadata is retained for up to 90 days, as further set out in Section 6.4.

    8. Cookies

    This website uses cookies in two categories:

    • Essential cookies — strictly necessary for the website to function (e.g. security and session management). These cannot be disabled.
    • Analytics cookies — used to understand how visitors interact with the site in order to improve it. These are only set if you choose to "Accept" via our cookie consent banner. You may withdraw consent at any time by clearing your browser cookies.

    We do not use advertising, tracking, or social media cookies.

    9. Your rights

    Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

    • Right of access — to request a copy of the personal data we hold about you.
    • Right to rectification — to request correction of inaccurate or incomplete data.
    • Right to erasure — to request deletion of your personal data, subject to our legal obligations.
    • Right to restriction — to request that we limit how we use your data in certain circumstances.
    • Right to data portability — to receive your data in a structured, machine-readable format.
    • Right to object — to object to processing based on legitimate interests.
    • Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

    To exercise any of these rights, contact us at privacy@vellumintel.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK at ico.org.uk, or with your local supervisory authority within the EU.

    10. International transfers

    Vellum Intelligence operates primarily from the United Kingdom. If any personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including reliance on adequacy decisions or standard contractual clauses.

    For subscribers using the Claude MCP add-on: Anthropic PBC is incorporated in the United States, and tool calls between a subscriber's Claude environment and the Vellum MCP server may transit US-based infrastructure as a function of how Anthropic operates Claude. Anthropic's handling of personal data in this context is governed by Anthropic's privacy policy and the terms applicable to the subscriber's Claude account. Vellum maintains appropriate contractual safeguards with its own infrastructure providers.

    11. Changes to this policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Material changes affecting active subscribers will be communicated directly.

    12. Contact

    If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

    Vellum Intelligence Corp.
    Email: privacy@vellumintel.com

    Monitor

    DSA Enforcement Monitor

    Digital Services Act enforcement across the full tier of obligations — Commission proceedings, national DSC supervision, hosting providers, marketplaces, online platforms of all sizes, and VLOPs.

    Type
    EU Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor
    Add-on
    Claude MCP →

    What this monitor covers

    The DSA in practice, across all tiers

    The DSA Enforcement Monitor tracks how the Digital Services Act is being applied — not just what the law says, but what regulators are doing and how obligations are landing in practice for intermediaries of all sizes. Coverage spans the full tiered structure: hosting providers, online platforms below the VLOP threshold, marketplaces, search engines, and designated VLOPs / VLOSEs.

    Tracks

    • Commission formal proceedings and decisions
    • National DSC investigations and supervision
    • Tiered obligations across intermediaries
    • Transparency and reporting requirements
    • Systemic risk and audit signals

    Useful for

    • Compliance and legal teams at platforms of all sizes
    • Founders and product leads at scaling tech firms
    • Consultancies advising on EU market entry
    • Policy, public affairs, and government relations
    • Trust & safety and regulatory strategy

    Get structured DSA enforcement intelligence delivered to your team

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    EU AI Act Monitor

    Track AI Act implementation and enforcement — prohibited practices, high-risk AI obligations, GPAI rules, AI Office activity, and delegated acts.

    Type
    EU Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor
    Add-on
    Claude MCP →

    What this monitor covers

    EU AI Act compliance and enforcement tracking

    The EU AI Act Monitor follows how the AI Act moves from text to practice — tracking implementing acts, guidance documents, AI Office decisions, and the evolving compliance landscape for general-purpose and high-risk AI systems.

    Tracks

    • Prohibited AI practice definitions
    • High-risk AI compliance deadlines
    • GPAI provider obligations
    • AI Office activity and guidance
    • Delegated and implementing acts

    Useful for

    • AI product and compliance teams
    • Legal teams deploying AI in the EU
    • Policy teams at AI companies
    • Regulatory affairs in tech
    • Risk and governance functions

    Stay ahead of EU AI Act obligations as they take shape

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    European Media Freedom Act Monitor

    Media pluralism rules, ownership transparency, editorial independence, obligations on platforms and intermediaries carrying media content, and the intersection with DSA enforcement.

    Type
    EU Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Media freedom rules, platform obligations, and the DSA overlap

    The EMFA Monitor tracks how European media freedom rules are taking shape across the supply chain — affecting media organisations of all sizes, online platforms and intermediaries that carry media content, and the regulators supervising them. Coverage includes the overlap with DSA enforcement and national transposition activity.

    Tracks

    • EMFA implementation timelines
    • Obligations on platforms carrying media content (across tiers)
    • Media ownership transparency requirements
    • Editorial independence provisions
    • National transposition and regulator guidance

    Useful for

    • Media organisations large and small, including independent publishers
    • Platform policy and product teams of any size
    • Press freedom organisations and civil society
    • Consultancies advising on media and content regulation
    • Public affairs and government relations in media

    Track how EMFA reshapes media regulation across Europe

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    Digital Markets Act Monitor

    Track DMA gatekeeper obligations, Commission enforcement, interoperability and access obligations, and designated platform compliance.

    Type
    EU Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Digital Markets Act gatekeeper compliance and enforcement

    The DMA Monitor tracks how the Commission enforces gatekeeper obligations, how designated platforms are responding to compliance requirements, and where interoperability, self-preferencing, and data-access rules are generating friction or litigation.

    Tracks

    • Gatekeeper designation decisions
    • Compliance reports and reviews
    • Interoperability obligations
    • Commission enforcement actions
    • Third-party access disputes

    Useful for

    • Competition and regulatory teams
    • Designated gatekeepers and their counterparties
    • App developers, business users, and challengers
    • Antitrust counsel and consultancies
    • Founders building products in dependence on gatekeeper platforms

    Track DMA enforcement and the evolving gatekeeper landscape

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    EU National Overlay Monitor

    Track national-level implementation and enforcement overlaying EU digital regulation frameworks — scoped to your jurisdictions and issue areas.

    Type
    EU Regulatory
    Scope
    Up to 5 jurisdictions
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    National rules that sit alongside EU frameworks

    EU regulation is only part of the picture. This monitor tracks how member states implement, interpret, and enforce alongside EU instruments — covering national digital services coordinators, local enforcement postures, and jurisdiction-specific requirements that affect compliance obligations.

    Available jurisdictions

    • Germany (DDG/NetzDG)
    • France (SREN/ARCOM)
    • Ireland (Online Safety Code)
    • Others on request

    Useful for

    • Multi-jurisdiction compliance teams
    • EU regulatory affairs
    • Legal teams with pan-European scope
    • Platform operations across markets

    Track what's happening at national level across Europe

    Scope is agreed at onboarding — tell us which jurisdictions and issues matter to you.

    Monitor

    EU Legislative Pipeline Monitor

    Track active EU legislative proposals and policy files at Commission, Council, and Parliament level — before they become binding obligations.

    Type
    EU Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Forward-looking EU regulatory risk — before it becomes law

    This monitor covers proposals under active negotiation or consultation that carry forward-looking regulatory risk. It is structured to show where each file sits in the legislative process, what is likely to change, what remains contested, and what the near-term decision points are.

    Tracks

    • AVMSD review
    • Digital Fairness Act
    • Cybersecurity simplification package
    • Digital Omnibus
    • CSAM proposal
    • GDPR procedural regulation
    • Other active legislative files

    Useful for

    • Forward-looking policy teams
    • Regulatory strategy functions
    • Government affairs
    • Legal teams tracking upcoming obligations
    • Trade associations

    See what's coming before it arrives

    Track the EU legislative pipeline so you can plan ahead, not react.

    Monitor

    UK Online Safety Act Monitor

    Track Ofcom enforcement, category thresholds, safety duties, age assurance requirements, children's online safety, and platform compliance activity.

    Type
    UK Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor
    Add-on
    Claude MCP →

    What this monitor covers

    UK online safety regulation and Ofcom enforcement

    The UK Online Safety Act Monitor tracks how Ofcom is implementing and enforcing the Online Safety Act across the full range of regulated services — user-to-user services, search services, and providers of pornographic content, of every size and category. Coverage includes codes of practice, category determinations, age assurance standards, and enforcement signals.

    Tracks

    • Ofcom codes and guidance
    • Category 1/2A/2B determinations
    • Safety duty enforcement across tiers
    • Age assurance requirements
    • Children's safety provisions

    Useful for

    • UK-regulated services of any size, including small platforms and startups
    • Trust & safety leadership and individual moderators
    • Compliance and legal counsel, in-house or external
    • Product teams building for the UK market
    • Consultancies and children's safety specialists

    Stay ahead of UK online safety obligations as Ofcom enforces

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    UK Digital Regulation Monitor

    Track UK-specific regulatory activity beyond the Online Safety Act — scoped to your issue areas across the CMA digital markets regime, investment screening, data law, AI policy, and more.

    Type
    UK Regulatory
    Scope
    Up to 5 issue areas
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    UK digital regulation beyond online safety

    This is the UK equivalent of the EU National Overlay Monitor. Scope is defined at onboarding and capped at five issue areas — covering the CMA digital markets regime, UK investment screening, data law reform, AI policy, media regulation, and cybersecurity frameworks.

    Available issue areas

    • DMCCA / CMA digital markets
    • National Security and Investment Act
    • Data (Use and Access) Act 2025
    • Media Act 2024
    • Cyber Security and Resilience Bill
    • AI and copyright policy (DSIT/IPO)
    • ICO automated decision-making

    Useful for

    • UK regulatory affairs teams
    • Competition and digital markets counsel
    • Data protection officers
    • AI governance teams in the UK
    • Government relations

    Configure UK regulatory coverage to match your exposure

    Choose up to five issue areas — tell us what matters to your position.

    Monitor

    EU/UK Policy Impact on Chinese Business Monitor

    Track what EU and UK regulators, legislators, and enforcement bodies do or say that could affect Chinese-owned or Chinese-operated businesses in European markets.

    Type
    Cross-cutting
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    European regulatory risk for Chinese-connected businesses

    This monitor focuses exclusively on the European regulatory and enforcement environment as it affects Chinese-owned or Chinese-operated businesses. It does not cover Chinese domestic policy — only what European regulators are doing that creates exposure for Chinese businesses operating in EU and UK markets.

    Tracks

    • DMA/DSA enforcement signals
    • Foreign subsidy scrutiny
    • Investment screening actions
    • Data transfer restrictions
    • Platform-specific enforcement

    Useful for

    • Chinese tech companies in Europe
    • Advisory firms serving Chinese clients
    • Investment screening counsel
    • Trade and market-access teams
    • Government relations (EU/UK)

    Understand European regulatory risk for Chinese business operations

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    GCC Tech Policy & Regulation Monitor

    Track technology, digital policy, and data regulation across all six GCC jurisdictions — Saudi Arabia, UAE, Qatar, Bahrain, Kuwait, and Oman.

    Type
    Regional Regulatory
    Coverage
    All 6 GCC jurisdictions
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    GCC technology regulation and digital policy

    The GCC Monitor covers the regulatory and compliance environment for technology businesses across the Gulf — not political or macroeconomic risk, but the practical regulatory landscape that affects operations, market entry, and data handling.

    Tracks

    • Data protection and privacy law
    • AI governance frameworks
    • Cloud and infrastructure regulation
    • Platform and content rules
    • Cybersecurity requirements
    • Digital market-entry rules

    Useful for

    • Tech companies entering GCC markets
    • Data and privacy counsel
    • Cloud infrastructure operators
    • Regional compliance teams
    • Market-entry strategists

    Navigate GCC technology regulation with structured intelligence

    Tell us what you are tracking and we will respond with the most relevant coverage options.

    Monitor

    US Digital & AI Regulation Monitor

    Federal and state activity shaping AI, platforms, and data — White House and Congressional action, FTC and SEC enforcement, sectoral agency guidance, and the fast-moving patchwork of state-level laws.

    Type
    US Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    The US regulatory picture, federal and state

    The US Digital & AI Regulation Monitor tracks the practical landscape in the absence of comprehensive federal legislation — executive action, agency rulemaking, enforcement signals, and the rapidly growing volume of state-level AI, privacy, and platform laws. Coverage spans the institutions that actually shape obligations today.

    Tracks

    • White House executive actions on AI and tech
    • FTC enforcement on AI, dark patterns, and data practices
    • State AI laws (Colorado AI Act, California regimes, NY, others)
    • NIST AI Risk Management Framework activity
    • Section 230, Kids Online Safety, and platform-liability files

    Useful for

    • US regulatory affairs and government relations
    • Compliance and legal teams at platforms and AI companies
    • Founders building US-facing products at any stage
    • Consultancies and trade associations
    • State-by-state compliance and product counsel

    Track US digital and AI regulation as it actually moves

    Federal action, state laws, and enforcement signals — structured for the decisions you're making.

    Monitor

    Canada Digital & AI Regulation Monitor

    Federal direction after AIDA's lapse — provincial AI activity, Treasury Board instruments, CAISI, OSFI Guideline E-23, and the evolving privacy and platform-liability files.

    Type
    Canada Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Canada's AI and digital landscape, post-AIDA

    Bill C-27 — and with it AIDA — died on the order paper in January 2025. This monitor tracks what fills the gap: provincial efforts such as Ontario's Bill 194, Treasury Board directives, the Canadian AI Safety Institute, sectoral instruments like OSFI's Guideline E-23 on model risk, and the eventual federal successor legislation.

    Tracks

    • Federal AI legislation reintroduction signals
    • Provincial AI activity (Ontario, Québec, BC)
    • Treasury Board AI directives and the Voluntary Code
    • OSFI Guideline E-23 and sectoral AI rules
    • Privacy reform and PIPEDA successor activity

    Useful for

    • Canadian regulatory affairs and policy teams
    • Compliance and legal counsel, in-house or external
    • AI companies operating in or entering the Canadian market
    • Financial institutions under OSFI supervision
    • Consultancies and trade associations

    Track Canadian digital and AI regulation as it takes shape

    Federal direction, provincial action, and sectoral guidance — structured for your position.

    Monitor

    Hong Kong Digital & Tech Regulation Monitor

    PCPD privacy enforcement, the evolving cybersecurity and critical infrastructure regime, AI policy direction, and the operational implications of Hong Kong's regulatory positioning between Mainland frameworks and international norms.

    Type
    HK Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Hong Kong technology regulation in practice

    The Hong Kong Digital & Tech Regulation Monitor covers the practical regulatory environment for technology businesses — PCPD enforcement and PDPO reform, the new critical infrastructure cybersecurity framework, AI policy signals from the Office of the Government Chief Information Officer, and the operational consequences of Hong Kong's distinct positioning.

    Tracks

    • PCPD privacy enforcement and PDPO reform
    • Protection of Critical Infrastructure (Computer Systems) Bill
    • AI policy signals and government guidance
    • Online intermediary and content regulation
    • Cross-border data, national security implications for tech

    Useful for

    • Tech operations and compliance teams in Hong Kong
    • Regional headquarters with Hong Kong presence
    • Privacy and data protection counsel
    • Cybersecurity and critical infrastructure operators
    • Investment and market-entry advisors

    Hong Kong's regulatory environment, structured for operators

    Privacy enforcement, cybersecurity, AI policy — the practical landscape, not commentary.

    Monitor

    Singapore Digital & Tech Regulation Monitor

    IMDA and PDPC activity, the Online Safety regime, AI governance frameworks, cybersecurity obligations, and Singapore's expanding role as a regulatory standard-setter for the region.

    Type
    Singapore Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Singapore's digital and AI regulatory architecture

    Singapore continues to set regional standards for AI governance, online safety, and data protection. This monitor tracks IMDA's online safety codes, PDPC enforcement, the Model AI Governance Framework and successor activity, cybersecurity rules for CII operators, and the country's regulatory positioning across ASEAN.

    Tracks

    • IMDA online safety codes and directions
    • PDPC enforcement and PDPA amendments
    • Model AI Governance Framework activity
    • CSA / CII cybersecurity obligations
    • Digital services tax and platform-economy regulation

    Useful for

    • Singapore-based operations and compliance teams
    • Regional HQs running ASEAN strategy
    • AI governance and product compliance functions
    • Privacy and data protection counsel
    • Tech consultancies and policy researchers

    Singapore's regulatory direction, with regional implications

    What Singapore does, the region watches — structured intelligence for operators and regional teams.

    Monitor

    Turkey Digital & Tech Regulation Monitor

    BTK telecoms and online intermediary regulation, KVKK data protection enforcement, Law No. 7545 cybersecurity, content and social media rules, and the practical regulatory environment for tech businesses in Turkey.

    Type
    Turkey Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Turkey's digital regulatory landscape

    The Turkey Digital & Tech Regulation Monitor covers the practical landscape for technology businesses — BTK's role as the lead telecoms and intermediary regulator, KVKK privacy enforcement, the expanded cybersecurity framework under Law No. 7545 (March 2025), and content regulation including the social-media representative regime.

    Tracks

    • BTK regulation of telecoms and online intermediaries
    • KVKK data protection enforcement and GDPR alignment
    • Law No. 7545 cybersecurity framework
    • Social-media representative obligations and content rules
    • Cybersecurity Directorate priorities

    Useful for

    • Tech operations and compliance teams in Turkey
    • Regional HQs covering Turkey from London, Dubai, or elsewhere
    • Privacy and cybersecurity counsel
    • Platforms with Turkish-language user bases
    • Market-entry and regulatory affairs functions

    Track Turkish digital regulation as it actually applies to your business

    BTK, KVKK, cybersecurity, content rules — structured for operators and regional teams.

    Monitor

    Morocco Digital & Tech Regulation Monitor

    CNDP data protection, ANRT telecoms and digital regulation, the cybersecurity law framework, and the emerging policy direction on AI and platform regulation across Morocco's digital economy.

    Type
    Morocco Regulatory
    Cadence
    Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Morocco's emerging digital regulatory framework

    Morocco is a growing regional tech and outsourcing hub with a regulatory framework that's still taking shape. This monitor tracks CNDP data protection activity under Law 09-08, ANRT regulation of telecoms and digital services, the cybersecurity law and DGSSI activity, and the policy direction on AI and platform regulation as the country develops its digital strategy.

    Tracks

    • CNDP data protection enforcement (Law 09-08)
    • ANRT regulation of digital services and platforms
    • Cybersecurity law and DGSSI activity
    • Digital transformation strategy and AI policy direction
    • Cross-border data and cloud-services regulation

    Useful for

    • Tech businesses operating in or entering Morocco
    • Outsourcing and BPO operators with Moroccan presence
    • Cloud and infrastructure providers
    • Privacy and regulatory counsel
    • Investment and market-entry advisors

    Track Morocco's digital regulatory direction

    Practical intelligence for operators in a market still defining its regulatory framework.

    Monitor

    EU Financial Regulation Monitor

    ECB Banking Supervision, EBA and ESMA activity, the MiCA crypto-asset framework, DORA operational resilience, AMLR and the AMLA roll-out, and the practical implications of the EU's evolving financial-services rulebook.

    Type
    EU Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    EU financial regulation in practice

    The EU Financial Regulation Monitor tracks the practical application of the EU's financial rulebook — ECB Banking Supervision and SSM activity, EBA and ESMA guidance and enforcement, MiCA implementation, DORA operational resilience, the AML/CFT package and the AMLA's establishment, and the sustainable-finance regulatory pipeline.

    Tracks

    • ECB Banking Supervision and SSM activity
    • EBA and ESMA guidance, Q&As, enforcement
    • MiCA crypto-asset service provider supervision
    • DORA operational resilience and ICT third-party rules
    • AMLR, AMLA, and the AML/CFT reform package

    Useful for

    • Banking and investment-firm compliance and legal teams
    • Crypto-asset service providers and fintech operators
    • Operational resilience and ICT risk functions
    • Financial crime and AML/CFT teams
    • Regulatory affairs and government relations in finance

    Track EU financial regulation as it lands in supervisory practice

    The rulebook, the supervisory signals, and the operational consequences — structured for decision-makers.

    Monitor

    UK Financial Regulation Monitor

    FCA, PRA, and Bank of England activity — supervisory priorities, enforcement, the post-Brexit rulebook, the stablecoin and crypto regime, consumer duty, and the operational resilience and AI agendas.

    Type
    UK Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    UK financial regulation in practice

    The UK Financial Regulation Monitor tracks how the FCA, PRA, and Bank of England exercise their post-Brexit rule-making and supervisory authority. Coverage spans annual business plans, enforcement activity, the developing stablecoin and crypto regime, Consumer Duty supervision, operational resilience expectations, and AI-related supervisory work.

    Tracks

    • FCA business plan priorities and enforcement
    • PRA supervisory expectations and rule changes
    • Bank of England stablecoin and systemic-payments work
    • Consumer Duty supervision and outcomes
    • Operational resilience and AI supervisory direction

    Useful for

    • UK banking, insurance, and investment-firm compliance teams
    • Fintech founders and crypto-asset operators
    • Operational resilience and ICT risk functions
    • Consumer protection and conduct teams
    • Regulatory affairs and counsel, in-house or external

    Track UK financial regulation as it shapes supervisory expectations

    The FCA, PRA, and Bank of England — structured intelligence on how the rulebook lands in practice.

    Monitor

    US Financial Regulation Monitor

    Federal Reserve, OCC, FDIC, SEC, and CFTC activity — supervisory priorities, enforcement, the digital-assets framework, FinCEN AML rulemaking, and the practical regulatory landscape facing financial services and fintech.

    Type
    US Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    US financial regulation in practice

    The US Financial Regulation Monitor tracks the federal regulators that shape practical obligations — Federal Reserve, OCC, FDIC for banking supervision; SEC and CFTC for capital markets and derivatives; FinCEN for AML; the CFPB for consumer finance; and state regulators for licensing-driven activity. Coverage includes the digital-assets framework and the ongoing rulemaking, enforcement, and Congressional pipelines.

    Tracks

    • Federal Reserve, OCC, FDIC supervisory priorities
    • SEC enforcement, rulemaking, and crypto-asset positions
    • CFTC derivatives and commodity oversight
    • FinCEN AML/CFT rulemaking and enforcement
    • CFPB activity and state licensing developments

    Useful for

    • US banking, broker-dealer, and asset-manager compliance teams
    • Fintech and digital-asset operators
    • AML and financial-crime teams
    • Capital markets counsel and consultancies
    • Government relations and trade associations

    Track US financial regulation across the federal agencies that actually move it

    Practical intelligence on what the Fed, SEC, CFTC, FinCEN, OCC, and FDIC are doing — and why it matters.

    Monitor

    KSA Financial Regulation Monitor

    SAMA supervision of banks, insurers, and payment institutions, the CMA's capital markets framework, and the practical regulatory landscape for financial services and fintech in Saudi Arabia under the Vision 2030 financial-sector development agenda.

    Type
    KSA Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor
    Add-on
    Claude MCP →

    What this monitor covers

    Saudi Arabia's financial regulatory architecture

    The KSA Financial Regulation Monitor covers the two principal regulators — the Saudi Central Bank (SAMA) for banks, insurers, finance companies, and payment service providers; and the Capital Market Authority (CMA) for capital markets. Coverage spans SAMA's prudential and conduct framework, the open banking programme, fintech licensing, the developing AML/CFT regime, and the practical regulatory landscape as the Financial Sector Development Programme advances under Vision 2030.

    Tracks

    • SAMA prudential and conduct supervision
    • SAMA Open Banking Framework and fintech licensing
    • CMA capital markets activity and rulemaking
    • Insurance and payments regulation
    • AML/CFT framework and supervisory expectations

    Useful for

    • Banks, insurers, and payment institutions in KSA
    • Fintech operators under SAMA supervision
    • Capital markets and asset-management teams
    • Compliance, AML, and conduct functions
    • Regional financial-services HQs covering KSA from Dubai or elsewhere

    Track Saudi Arabia's financial regulatory direction across SAMA and the CMA

    The two principal regulators, the open banking programme, the developing fintech and AML regimes — structured for decision-makers.

    Monitor

    UAE Financial Regulation Monitor

    CBUAE and the new Capital Market Authority on the federal side, DFSA in DIFC, FSRA in ADGM, and VARA for Dubai virtual assets — the full multi-jurisdiction picture under the 2025 unified financial-sector reforms.

    Type
    UAE Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    UAE financial regulation across federal and free-zone regimes

    The UAE Financial Regulation Monitor covers the country's distinctive multi-regulator structure — the Central Bank (CBUAE) for federally licensed banks, insurers, and payment institutions; the newly reconstituted Capital Market Authority under Federal Decree-Laws 32 and 33 of 2025 for onshore capital markets; the DFSA in DIFC and FSRA in ADGM for common-law free-zone regimes; and VARA for Dubai mainland virtual assets. Coverage includes the 2025 Unified Financial Sector Law and the September 2026 regularisation deadline.

    Tracks

    • CBUAE supervision under the 2025 Unified Financial Sector Law
    • CMA (former SCA) capital markets activity
    • DFSA and FSRA rulebook updates and enforcement
    • VARA virtual-asset rules and Dubai mainland licensing
    • Federal AML/CFT/CPF framework (Decree-Law 10 of 2025)

    Useful for

    • Banks, insurers, and payment institutions under CBUAE
    • DIFC and ADGM-licensed financial firms
    • Virtual-asset service providers across UAE jurisdictions
    • Compliance teams running multi-jurisdiction UAE operations
    • Investment, family office, and fund-management functions

    Navigate the UAE's multi-regulator financial landscape with structured intelligence

    Federal, DIFC, ADGM, and VARA — coverage that respects the actual regulatory geography.

    Monitor

    Qatar Financial Regulation Monitor

    QCB supervision of banks and insurers, QFMA capital markets activity, QFCRA regulation of the Qatar Financial Centre, and the practical regulatory environment for financial services and fintech operating in Qatar.

    Type
    Qatar Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Qatar's financial regulatory architecture

    The Qatar Financial Regulation Monitor covers the three principal regulators — Qatar Central Bank for banking, insurance, and payments; the Qatar Financial Markets Authority for capital markets; and the Qatar Financial Centre Regulatory Authority for QFC-licensed firms operating under a separate common-law framework. Coverage includes the QFCRA's GENE sustainability reporting rules and the broader regional convergence toward mandatory ESG disclosure.

    Tracks

    • QCB supervision of banks, insurers, and payment institutions
    • QFMA capital markets activity and enforcement
    • QFCRA rulebook updates and supervisory work
    • GENE Corporate Sustainability Reporting Rules
    • AML/CFT framework and Qatar Financial Information Unit activity

    Useful for

    • Banks, insurers, and payment institutions under QCB
    • QFC-licensed financial firms and advisers
    • Capital markets and asset-management teams
    • Compliance and AML functions
    • Regional HQs running Qatar operations from elsewhere in the Gulf

    Track Qatar's financial regulatory direction across all three regimes

    QCB, QFMA, QFCRA — structured coverage of the regulators that actually matter to your operations.

    Monitor

    Singapore Financial Regulation Monitor

    MAS enforcement and supervisory priorities — AML/CFT, digital-asset oversight, AI risk management for FIs, the digital advertising guidelines effective March 2026, and the practical regulatory landscape for banks, asset managers, fintechs, and crypto-asset service providers.

    Type
    Singapore Regulatory
    Cadence
    Weekly / Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    MAS supervisory and enforcement priorities for 2025–26

    The Singapore Financial Regulation Monitor covers MAS as the integrated regulator across banking, insurance, payments, capital markets, and digital assets. Coverage tracks the published 2025–26 enforcement priorities (AML/CFT, digital-asset enforcement, market misconduct), the Guidelines on AI Risk Management for FIs (November 2025), the Guidelines on Digital Advertising effective 25 March 2026, the revised AML/CFT notices, and the new Regulation 11C adverse-development notification rules for LFMCs.

    Tracks

    • MAS enforcement priorities (AML/CFT, digital assets, market misconduct)
    • Guidelines on AI Risk Management for Financial Institutions
    • Guidelines on Digital Advertising (effective 25 March 2026)
    • PSA, SFA, FAA, and FSMA rulemaking and licensing
    • LFMC Regulation 11C and adverse-development reporting

    Useful for

    • Banks, asset managers, and insurers in Singapore
    • Licensed fund management companies (LFMCs) and VCCs
    • Digital payment token service providers
    • Compliance, AML, and conduct teams
    • Regional financial-services HQs with Singapore exposure

    Track MAS supervisory direction and enforcement signals in practice

    The published priorities, the new guidelines, and the operational consequences — structured for decision-makers.

    Monitor

    Hong Kong Financial Regulation Monitor

    HKMA and SFC supervisory and enforcement activity, the Virtual Asset Service Provider regime, stablecoin licensing, AML reform, and the operational implications of Hong Kong's positioning as an international financial centre.

    Type
    HK Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Hong Kong financial regulation in practice

    The Hong Kong Financial Regulation Monitor covers the HKMA's supervision of banks and stored-value facilities, the SFC's oversight of intermediaries and the VASP regime, the Insurance Authority, and the Mandatory Provident Fund Schemes Authority. Coverage includes the stablecoin licensing regime, AML and FATF compliance work, and Hong Kong's strategic positioning between Mainland frameworks and international financial markets.

    Tracks

    • HKMA banking supervision and policy work
    • SFC intermediary supervision and enforcement
    • Virtual Asset Service Provider licensing under the SFC regime
    • Stablecoin licensing regime under the HKMA
    • AML/CFT reforms and FATF mutual evaluation work

    Useful for

    • Banks, intermediaries, and asset managers in Hong Kong
    • VASPs and stablecoin issuers under the new regimes
    • AML and financial-crime teams
    • Compliance teams running regional Asia-Pacific coverage
    • Family offices and private wealth functions

    Hong Kong financial supervision, structured for operators

    HKMA, SFC, VASP regime, stablecoins — the practical landscape, not commentary.

    Monitor

    Turkey Financial Regulation Monitor

    A multi-agency regulatory picture — BDDK for banking, SPK / CMB for capital markets and crypto-asset service providers under Law 7518, TCMB for payments, MASAK for financial crime — and the practical implications of recent reforms including Communiqués III-35/B.1 and III-35/B.2.

    Type
    Turkey Regulatory
    Cadence
    Biweekly / Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Turkey's multi-agency financial regulatory framework

    The Turkey Financial Regulation Monitor covers the country's multi-agency structure — BDDK for banking, SPK (Capital Markets Board, also referred to as CMB) for securities and crypto-asset service providers, TCMB for payments and electronic money, and MASAK as the financial intelligence unit and AML supervisor. Coverage includes the crypto-asset framework under Law 7518 and Communiqués III-35/B.1 and III-35/B.2, the 2025 AML/CFT amendments responding to FATF mutual evaluation, the cybersecurity framework under Law No. 7545, and the inflation-accounting suspension for 2025–2027.

    Tracks

    • BDDK banking supervision and IT/cybersecurity regulation
    • SPK / CMB capital markets and crypto-asset service provider licensing
    • TCMB payments and electronic money oversight
    • MASAK AML/CFT supervision and FATF compliance
    • Cross-cutting reforms (Law 7518, Law 7545, inflation accounting)

    Useful for

    • Banks, payment institutions, and electronic money firms in Turkey
    • Crypto-asset service providers under SPK supervision
    • AML and financial-crime teams
    • Regional financial-services HQs covering Turkey from London or Dubai
    • Compliance and regulatory affairs counsel

    Turkey's financial regulatory landscape, across all the agencies that matter

    BDDK, SPK / CMB, TCMB, MASAK — structured intelligence for operators and regional teams.

    Monitor

    Morocco Financial Regulation Monitor

    Bank Al-Maghrib supervision of banks and payment institutions, AMMC oversight of capital markets, ACAPS regulation of insurance and pensions, and the practical regulatory environment for financial services in a growing North African market.

    Type
    Morocco Regulatory
    Cadence
    Monthly
    Formats
    Recurring Brief · Scoped monitor

    What this monitor covers

    Morocco's financial regulatory architecture

    The Morocco Financial Regulation Monitor covers the three principal regulators — Bank Al-Maghrib for banking, payments, and exchange controls; the Autorité Marocaine du Marché des Capitaux (AMMC) for securities and capital markets; and ACAPS for insurance and pensions. Coverage includes the Casablanca Finance City regime, AML/CFT framework and FATF compliance work, and the developing fintech and digital-finance landscape.

    Tracks

    • Bank Al-Maghrib banking supervision and payments oversight
    • AMMC capital markets activity and rulemaking
    • ACAPS insurance and pension regulation
    • Casablanca Finance City regulatory regime
    • AML/CFT framework and FATF compliance

    Useful for

    • Banks, insurers, and payment institutions in Morocco
    • Casablanca Finance City-licensed entities
    • Capital markets and asset-management teams
    • AML and financial-crime functions
    • Investment and market-entry advisors

    Track Morocco's financial regulatory direction across all three regimes

    Bank Al-Maghrib, AMMC, ACAPS — structured intelligence for operators and regional teams.