Artifacts

GRC Artifact Index

Find the right page for your regulation, framework, or control program. Filter by topic, search by keyword, and open the artifact that matches your scope.

Explore artifacts
EU AI Act timeline artifact preview
Featured
Living Timeline

Regulatory deadlines in one living timeline.

Compare deadlines across CRA, NIS2, DORA, the EU AI Act, and other supported frameworks. Open the free universal view or build a timeline limited to the rules, systems, and deadlines that apply to your organisation.

Free universal timeline - broad coverage. Custom timelines can be scoped to your stack.

Sorena regulatory universal timeline preview
ESG
Read

EU Deforestation Regulation (EUDR) Timeline and Implementation Guide

Check Annex I product scope, operator and trader roles, due diligence statements, geolocation, risk assessment, country benchmarking, and application dates under the EUDR.

Sorena AIArtifactsEUDeforestation Regulation
Read EU Deforestation Regulation (EUDR) Timeline and Implementation Guide
Platform
Read

EU Digital Markets Act Timeline and Implementation Guide

Review gatekeeper designation, core platform services, Articles 5-7 obligations, Article 11 reports, interoperability, key dates, and penalties under the DMA.

Sorena AIArtifactsEUDigital Markets Act
Read EU Digital Markets Act Timeline and Implementation Guide
Cybersecurity
Read

EU DORA Timeline and Compliance Guide

Map financial-entity scope, ICT risk management, incident reporting, resilience testing and TLPT, third-party risk, registers, and oversight under DORA.

Sorena AIArtifactsEUDigital Operational Resilience Act
Read EU DORA Timeline and Compliance Guide
Cybersecurity
Read

EU NIS2 Timeline and Compliance Guide

Check NIS2 applicability, governance, cybersecurity risk-management measures, significant-incident reporting, and implementation evidence.

Sorena AIArtifactsEUNIS2 Directive
Read EU NIS2 Timeline and Compliance Guide
ESG
Read

EU CSRD Scope, ESRS Reporting, and Assurance Guide

Review the amended 2027 CSRD scope, ESRS reporting routes, double materiality, value-chain limits, assurance, and digital reporting.

Sorena AIArtifactsEUCorporate Sustainability Reporting Directive
Read EU CSRD Scope, ESRS Reporting, and Assurance Guide
Product
Read

EU MDR Scope, Classification, Evidence, and Transition Guide

Check device qualification, operator roles, Annex VIII classification, conformity assessment, QMS and technical evidence, clinical evaluation, UDI/EUDAMED, PMS, vigilance, and legacy transition.

Sorena AIArtifactsEUMedical Device Regulation
Read EU MDR Scope, Classification, Evidence, and Transition Guide
Cybersecurity
Read

UK PSTI Product Security Scope, Controls, Evidence, and Enforcement Guide

Check connectable-product scope and exceptions, economic-operator roles, the three security requirements, statements, deemed-compliance routes, records, dates, and OPSS enforcement.

Sorena AIArtifactsUKProduct Security And Telecommunications Infrastructure Act
Read UK PSTI Product Security Scope, Controls, Evidence, and Enforcement Guide
Privacy
Read

US CPRA Timeline and Implementation Guide

Apply the CPRA amendments within the CCPA framework, including scope, consumer rights, sensitive information, GPC, contracts, 2026 regulations, deadlines, and evidence.

Sorena AIArtifactsUSCalifornia Privacy Rights Act
Read US CPRA Timeline and Implementation Guide
Privacy
Read

Brazil LGPD Timeline and Implementation Guide

Map LGPD territorial scope, controller and operator roles, legal bases, rights, RIPDs, incidents, international transfers, and ANPD enforcement.

Sorena AIArtifactsLATAMBrazil Lgpd
Read Brazil LGPD Timeline and Implementation Guide

Guidance tailored to your needs

Get guidance tailored to your organisation, systems, and deadlines, with specific actions for the teams responsible.

Talk to an expert