PassportAI answers your compliance team's questions from EU law and guidance and the national rules of your home and host states — tailored to your licence, your supervisor and where you operate. Every claim links to its source.
DORA art. 28 and EBA outsourcing guidelines — register of information, pre-notification of critical ICT services, exit strategy.
Art. 3:18 Wft and DNB guidance — outsourcing requirements and the supervisor's expectations for critical services.
Branch obligations under BaFin supervision — national layer in preparation; the answer says so and stays at EU level.
Your team sets the institution profile once. It sits next to the answer format in the question bar, travels with every question and decides which rules, which supervisor and which national layers apply.
Decides the rulebook: CRR/CRD, Solvency II, IORP II, MiFID II, UCITS/AIFMD, PSD or MiCA.
Significant institutions under the ECB, or the national competent authority first.
The national implementation and supervisor that come first in every answer.
Branch, free provision of services or subsidiary — host-state rules are added where they bite.
The EU layer covers EUR-Lex, the EBA, ESMA and EIOPA guidelines and Q&As, the ECB and SSM, the SRB and AMLA, and the Court of Justice. National layers add legislation, supervisory guidance and enforcement.
Where a national layer is not yet live, PassportAI says so in the answer and stays at EU level — it never fills in national rules from general knowledge.
Eight domains, each answering across the EU and national layers that your profile selects.
CRR/CRD, capital and liquidity, ECB/SSM supervision.
Solvency II, IORP II, supervision of insurers and pension funds.
MiFID II, MAR, prospectus and transparency.
AML directives and regulation, AMLA, sanctions screening.
ICT risk, third-party arrangements, incident reporting.
PSD2, e-money and MiCA.
SFDR, taxonomy, CSRD and climate risk.
Governance, remuneration and suitability assessments.
Compliance buys traceability. PassportAI is designed for audit files, internal challenge and your vendor-risk review.
Quotes in the original language with an English translation, linked to the statute, guideline or ruling. Nothing is cited that was not in the material.
Each answer has a retrievable evidence package: the provisions, guidance and case law it rests on, for the file and for internal audit.
Servers and language models in the European Union. Attachments are read for the question at hand and not stored.
On request: the sub-processor list, exit arrangements and the contractual terms an ICT third-party arrangement requires.
In the browser today; Word, Outlook and Microsoft Copilot integrations with single sign-on are available for pilots.
When a national layer or a source is not covered, the answer says so instead of guessing.
We are onboarding a small number of compliance departments as design partners. Tell us about your institution and we will set up a pilot with your profile.