Your entire GRC function, augmented by AI agents.

Those are forms-and-workflows tools, useful but the work still falls on your humans. regSpace gives you the same building blocks (risk register, controls library, tickets, dashboards) with specialist AI agents doing the work on top of it. Watcher monitors the regulators that touch you and drafts a source-linked digest plus Word redlines; Assessor scores your policies against the law and shows the gaps; Profiler builds your compliance profile from your website. Alongside them, the Privacy Inspector toolkit scores vendor risk and reconciles your privacy notice against your registers, and the GRC Workspace holds the registers, risk matrix, controls, and review workflow.

No, and we say so on every deliverable. regSpace produces draft regulatory intelligence for your qualified counsel to review and rely on. We do not form a lawyer-client relationship and we do not displace your legal team's judgement. Every digest item links to the primary source we captured so your team can verify it; your legal and regulatory team makes the call.

Every item in the digest links straight to the primary source we captured, so your team can read the original and fact-check in one click before relying on anything. Where a change touches a policy you have published, the redline is produced and checked against the exact copy of your policy we saved. The digest is draft intelligence for your review: we don't auto-publish, and nothing is presented as legal advice.

No. Where our AI providers offer it, we use a mode that keeps no copy of what we send, and we do not fine-tune or train on any client data. Your policies are kept separate from every other customer's and are encrypted with a key dedicated to your organisation; revoking that key makes the data unreadable.

Yes. Foundation (Watcher + Assessor + Profiler, plus the core registers) is the entry point, and most pilots start here. Moving up to Compliance Pro adds the GRC Workspace, the Privacy Inspector toolkit, connections that keep your registers up to date automatically, hosted complaints intake, and alerts delivered to Slack, Teams, or your other systems. Compliance Suite adds a contractual SLA, a named CSM, and every connector and channel we operate. Upgrades and downgrades take effect at the next billing period, with nothing to move or re-set-up.

Three plans, billed annually, listed on the website. Foundation is £9,999/year (Watcher + Assessor + Profiler plus the core registers). Compliance Pro is £19,999/year (adds the GRC Workspace, the Privacy Inspector toolkit, connections that keep registers up to date automatically, hosted complaints intake, and alerts delivered to Slack, Teams, or your other systems). Compliance Suite is Talk to sales for groups that want everything uncapped, with a contractual SLA, a named CSM, and white-glove onboarding. Full breakdown on the pricing page.

Your compliance profile captures the sectors you operate in and the sectors you serve. Trickle-down exposure (the rules that flow through your customers' sectors to you) is modelled as a first-class relationship, so a SaaS vendor to airlines automatically inherits the relevant aviation-cyber obligations.

EU instruments at EU level, the UK, US federal and priority states (California, Colorado, Illinois, Massachusetts, New York, Texas), and Australia. Coverage means weekly monitoring of the primary regulators and legislative trackers in each, with each flagged change linked to its source. We add jurisdictions as our client base expands; no jurisdiction is blocked on any paid plan.

Usually a couple of weeks to first value. Profiler does most of the onboarding work itself: it reads your corporate website, sorts the policies it finds, and proposes a draft compliance profile your counsel reviews and edits before it is treated as the official record. Once your profile is set, the weekly digest starts landing.