GRC Artifact Index
Find the right page for your regulation, framework, or control program. Filter by topic, search by keyword, and open the artifact that matches your scope.
Explore artifacts
Regulatory deadlines in one living timeline.
Compare deadlines across CRA, NIS2, DORA, the EU AI Act, and other supported frameworks. Open the free universal view or build a timeline limited to the rules, systems, and deadlines that apply to your organisation.
Free universal timeline - broad coverage. Custom timelines can be scoped to your stack.
Regulatory Universal Timeline
A combined view of regulatory deadlines across frameworks. See what is coming and when, then tailor a custom view for your organisation with Sorena.
AI Act Timeline and Compliance Guide
Classify AI systems and GPAI models by role, risk tier, obligation set, staged application date, and required evidence.
Cyber Resilience Act Timeline and Compliance Guide
Check product scope, operator duties, essential requirements, vulnerability handling, Article 14 reporting, conformity assessment, and CE marking.
FIPS 140-3 Implementation Guide
Define the cryptographic module boundary, security level, approved services, operating environments, laboratory testing, and CMVP validation evidence.
ISO/IEC 42001 AI Management System Guide
ISO/IEC 42001:2023 guide to AIMS scope, Clauses 4-10, AI risk and impact assessment, Annex controls, operating evidence, certification, and framework comparisons.
EU MDR Scope, Classification, Evidence, and Transition Guide
Check device qualification, operator roles, Annex VIII classification, conformity assessment, QMS and technical evidence, clinical evaluation, UDI/EUDAMED, PMS, vigilance, and legacy transition.
EU CSDDD Timeline and Implementation Guide
Apply the amended CSDDD scope and 2029 application date under Directive (EU) 2026/470, including due diligence, evidence, reporting, and national enforcement.
EU Machinery Regulation Compliance Hub
Classify machinery, related products and partly completed machinery; identify economic-operator roles; map Annex III and Annex I; select the Article 25 route; and prepare release and transition evidence.
EU PPWR Packaging Compliance Hub
Classify packaging and operator roles, then map substances, recyclability, recycled content, minimisation, reuse, labelling, conformity, EPR and transition evidence under Regulation (EU) 2025/40.
Guidance tailored to your needs
Get guidance tailored to your organisation, systems, and deadlines, with specific actions for the teams responsible.
Talk to an expert