joao-aires/governance
Applicability-led compliance design and GDPR/SOC 2 readiness: translate obligations and service commitments into accountable controls and evidence.
Translate applicable legal, contractual and assurance requirements into system boundaries, controls, ownership and evidence. Use during product/system design or a scoped compliance assessment; distinguish engineering work from legal interpretation and independent assurance.
Assess GDPR applicability and engineering readiness for an actual service or changed processing operation. Use for personal-data flows, privacy-by-design, rights/retention/provider consequences and evidence gaps rather than reproducing the regulation.
Prepare or assess SOC 2 readiness for a defined service, commitments and examination scope. Use for system/control boundaries, operating evidence, exceptions and remediation priorities; does not perform an independent attestation.