Legal Map
824 nodes of EU digital law as one interactive graph — filter by regime, concept or case law.

It starts as cartography: EU digital law — the DSA, AI Act, GDPR, DMA and NIS2 — mapped into one interactive graph of 824 nodes, 1,692 edges and 126 curated cross-regulation links. That map is the foundation of your twin: you classify once, and the living model shows what applies and reports what changes. Built by a German lawyer specialised in EU digital regulation.
Software: Regingada UG (haftungsbeschränkt) i.G. · Legal advice exclusively: Kanzlei Theo Funk
No customer counts, no saved-hours claims. Every corpus figure below is rendered live in the suite — open the product and count along.
Not six separate tools — one model of your duties. You answer a compact five-question pre-wizard about your case; the Legal Map marks the obligation nodes that apply to you, live. That marked, living map is your twin: it shows what applies and reports what changes.
The Legal Map is the engine of your Digital Twin — a living model of EU digital law that turns your profile into individual, proactive and reactive orientation.
You answer a compact five-question pre-wizard about your case — rule-based and reproducible, no account, no black box.
The Legal Map marks the obligation nodes that apply to you — live, across all five regimes, each grounded to its legal source.
This marked, living map is your twin: it shows what applies and reports what changes. Change one input and the duties, deadlines and cross-regulation links move with it.
The twin mirrors and orients — it does not advise. It shows which duties your inputs point to; it does not decide them, guarantee anything or take them on. The legal judgment and the handling of duties stay with the firm, in a separate mandate.
Six modules, one product — every card shows live data.
824 nodes of EU digital law as one interactive graph — filter by regime, concept or case law.

Where DSA, AI Act, GDPR, DMA and NIS2 overlap — curated links, not statistical guesses.

VLOP, Annex IV, DPIA, gatekeeper and cyber duties as working checklists — every obligation grounded to its legal source.

Full-text and concept search across the entire corpus — works completely offline.

Optional Claude-powered explanations via a Cloudflare Worker. Strictly opt-in — the suite never requires it.

From anonymous self-check to a mandate-ready DRAFT artifact — the handoff to the firm is a deliberate, documented act.

We certify nothing and badge nothing — we map. Five regimes, each down to article level.
Your DSA twin: shows which platform duties apply — service-by-service, intermediary up to VLOP — and reports what changes.
From notice to VLOP.
Art. 34/35 systemic-risk cockpit · notice-and-action, transparency and audit duties mapped.
Plus: service-by-service portfolio tiering · duty workspace with kanban and an owner per duty — who in your org handles which DSA obligation.
Your AI Act twin: shows the classification of each AI system — prohibited, high-risk, transparency or GPAI, provider and deployer apart — and reports what changes.
Annex IV, operational.
GPAI gating (Art. 51–56) · applicability timeline · technical-documentation cockpit.
Plus: auto-classification per AI system — prohibited, high-risk, transparency or GPAI — with provider and deployer duties kept strictly apart.
Your GDPR twin: shows which duties your processing profile triggers — DPIA, transfers, DPO, employee data — and reports what changes.
DPIA, mapped.
Art. 35/36 triggers with DSK lists · EDPB WP248 risk assessment · Art. 30 records.
Plus: processing records as structured input · conditional cockpits appear only when your profile triggers them — transfers, DPO, employee data.
Your DMA twin: shows your CPS portfolio and threshold status in one run — through to the Art. 15 report — and reports what changes.
Gatekeeper duties.
Art. 5/6/7 obligations · interoperability and self-preferencing rules in one cockpit.
Plus: one continuous run from CPS portfolio and threshold status to the Art. 15 report generator.
Your NIS2 twin: shows whether your entity is essential or important — with 24 h / 72 h / 1-month reporting clocks — and reports what changes.
Cyber baseline.
Directive (EU) 2022/2555 · risk-management measures and reporting duties.
Plus: incident register with live 24 h / 72 h / 1-month reporting deadlines · supplier register with risk rating.
Five regimes, one suite — the graph links DSA, AI Act and GDPR down to article level; DMA and NIS2 plug in as cockpits and search.
Open the full map → go-live pending126 curated cross-regulation links
as rendered live in the suite — the curated heatmap selection; the graph holds further cross-regime edges
A risk assessment you run for the DSA can serve the AI Act and the GDPR too. the suite shows exactly where — the overlap a flat checklist misses.
Every node carries its legal source. Every edge says why it exists. The corpus is lawyer-curated and ratified, source-grounded down to CELEX — and the product shows its work.
Live map canvas — dark theme, colored regime clusters, real corpus data
Reading the law is step one. the suite classifies your profile, triggers the duties indicated by your inputs, and puts them on a timeline — checklists, roadmaps and what-if scenarios a compliance team can actually run.
Every cockpit obligation grounded to its legal source
the suite doesn't stop at cartography. Five moves from first orientation to a documented handoff — four in the software, the fifth in the mandate.
A five-question quick check per regime feeds a deterministic engine: DSA service tier up to VLOP, AI-Act risk class, DMA gatekeeper status, NIS2 essential or important. Rule-based and reproducible — no black box.
Your profile triggers the duties indicated by your inputs — each with its article anchor, phase and concrete tasks. A benchmark compares your duty load against four model profiles, honestly declared as model-based.
Applicability timelines per regime, what-if scenarios — simulate VLOP scale or giving up the EU seat — and a horizon radar that watches beyond the five regimes.
Map each document to the duty it covers in the local Evidence Vault, then export cockpit reports as DOCX. Your files stay in the browser — no third-party upload.
Everything up to here is software: structured self-assessment, not legal advice. Taking on the handling of duties — EU representation, authority correspondence, legal judgment — is the firm's work, under a separate engagement.
The honest boundary is the feature: software output is a DRAFT and says so on every page. FINAL exists only after a lawyer takes the mandate — and responsibility.
In the software. Anonymous, no account — decision support under GDPR and RDG discipline.
The software generates a DRAFT document — expressly not legal advice, and labeled as such.
Only Kanzlei Theo Funk turns a DRAFT into FINAL — after a separate engagement and full lawyer review.
No logos, no testimonials — instead, five synthetic demo personas built into the product. Each one is a complete walkthrough from classification to mandate handoff.
High-risk under Annex III no. 4 — the full provider duty stack, cleanly separated from deployer duties.
Above 45 million users — once designated by the Commission — the DSA changes character: Art. 34/35 systemic-risk work in a dedicated cockpit.
Art. 22 GDPR and Art. 22 AI Act are false friends — the suite keeps them apart, SCHUFA case law included.
Deployer duties under Art. 26 — and the honest line: the Annex IV documentation sits with your vendor, not with you.
Art. 53/55 model tiers plus the triple representation bundle — Art. 54 AI Act, Art. 13 DSA, Art. 27 GDPR — treated as one issue.
All five are demo scenarios with synthetic data — clearly labeled in the product. No real client data, ever.
Established outside the EU? Several EU digital laws require you to appoint a representative inside the Union. Regingada scopes which one you need in a few questions — the representation itself is a legal service, provided by Kanzlei Theo Funk in cooperation.
The statutory addressee in the EU for non-EU intermediary services — for the Digital Services Coordinator, the Commission and the EBDS.
The authorised representative for non-EU providers of high-risk AI systems (Art. 22) and GPAI models (Art. 54).
The EU representative for non-EU DNS, cloud, data-centre, CDN and other in-scope digital service providers.
Software & scoping: Regingada UG (haftungsbeschränkt) i.G. · Representation, a legal service: Kanzlei Theo Funk · RAK Bamberg — under a separate engagement.
No customer logos, no invented testimonials. What we have instead: a founder who practices the law his software maps — and a boundary that protects you.
Software by Regingada UG (haftungsbeschränkt) i.G. · Legal advice exclusively by Kanzlei Theo Funk under separate engagement
When it gets serious, the work changes sides: the firm acts as legal representative under Art. 13 DSA and authorised representative under Art. 22 / Art. 54 AI Act, coordinates authority correspondence and incident notifications, accompanies audits — and, where needed, proceedings. The software shows the duty; the firm takes on its handling. That is the work on the 'right to operate' — done in the mandate.
“Every mandate began the same way — re-tracing how five EU regimes interlock for that one client. So I built the software that does the mapping: it classifies, checks and plans. The duties themselves it doesn’t take on; their handling is my firm’s work in the mandate, along with the legal judgment.”
Grounded, not generated: a curated, CELEX/ELI-citable, versioned corpus your app and your AI can call. A free key to start; Pro and Enterprise scale the limits. All three surfaces are built and verified — hosting and keys follow at launch.
A 43 KB widget. The Regingada quick check on your own site — one sandboxed iframe, no tracker scripts.
<script src="dcis-check.js" defer></script> <dcis-check lang="en"></dcis-check>
Fail-closed by construction: a missing server-side key set returns 503, a missing or invalid client key 403 — never data.
GET /api/v1/search?regime=dsa X-API-Key: <your-key>
Plug the corpus into your AI assistant as a Model Context Protocol server — grounded answers instead of hallucinated articles.
{ "mcpServers": { "funk-eu-digital-law": {
"command": "python",
"args": ["mcp_server/server.py"] } } }
The Digital Twin is free — the full tool, offline, forever. Paid plans add tool and data depth: persistence, teams, monitoring, the Corpus API, white-label. They never add legal assessment — that stays with Kanzlei Theo Funk, in a mandate.
The full Digital Twin — offline, in your browser.
Your twin, saved and synced.
Compliance as a team.
Your twin watches ahead.
White-label for firms & consultancies.
Every plan is software. The other way to work with Regingada is the firm — mandate & EU representation by Kanzlei Theo Funk. Two paths, one honest boundary.
Indicative launch pricing · net of VAT · public launch in preparation.
Five regimes, one map, an honest boundary. Public launch in preparation — the firm is reachable today.
And when it gets serious: EU representation under Art. 13 DSA and Art. 22 / 54 AI Act, authority correspondence, support through audits and proceedings — handled by the firm, in the mandate.
“Talk to the firm” reaches Kanzlei Theo Funk — mandate inquiries go to the lawyer, not the software company.