regel.dk

What It Is

Regel.dk is a Danish GRC and AI Governance consulting and automation service focused on helping companies turn requirements such as NIS2, ISO 27001, GDPR, the EU AI Act, and ISO 42001 into auditable, executable operating processes. The site emphasizes that it does not merely deliver PPTs or PDFs, but provides outputs such as SoA reports, AI permission matrices, and gap remediation plans that can be used directly for audits and management approvals.

Core Features and Capabilities

Its core modules include Audit-Ready Statement of Applicability, AI Permission Matrix, Gap Analysis & Remediation, operationalization of NIS2 and ISO 27001, AI Act and ISO 42001 implementation, Agentic AI governance, Bias Monitoring, Human-in-the-Loop process design, and GRC automation. Methodologies mentioned include NIST AI RMF, ISO 42001, ISO 31000, and OWASP LLM06, making it suitable for organizations that need to embed security, risk, and AI governance into IT operational workflows.

Deployment, Integration, and Data Security

Regel GRC Platform is described as “Zero-Backend” and can run 100% locally behind the customer’s own firewall. This is a clear differentiator for scenarios involving GDPR Art. 9 sensitive data, Schrems II, and data sovereignty. For third-party integrations, the text mainly mentions the Atlassian ecosystem: through ROVO AI, it connects to Jira and Confluence, automatically reads tickets, process documents, approvals, and logs, and maps them to NIS2 clauses or ISO 27001 Annex A controls.

Pricing and Service Model

The website does not disclose packages, pricing, subscription options, or implementation timelines; it only mentions the option to book a free Gap-Check and maturity assessment. As such, it appears more like a customized, expert consultant-led service than a standardized self-service SaaS product. API availability, developer documentation, SLA, and payment methods are also not specified.

Pros, Cons, and Best-Fit Users

Its strengths are broad coverage of compliance frameworks and a focus on practical control points such as audit readiness, management sign-off, residual risk, and HITL. Local deployment also makes it suitable for organizations handling highly sensitive data. The drawbacks are limited public information, unclear productization, lack of pricing transparency, and uncertain scalability of delivery. It is best suited for mid-sized to large enterprises in the European market affected by NIS2 and the AI Act, CISO teams, IT operations teams, and organizations already using Jira/Confluence that want to reduce the burden of compliance documentation.

Access from China and Alternatives

Access from China cannot be determined from the available text, and payment methods are not disclosed. If a Chinese company only needs compliance related to MLPS, the Data Security Law, or the Personal Information Protection Law, it may need local security compliance vendors or consulting firms. If the goal is EU business compliance, comparable options include OneTrust, ServiceNow GRC, Drata, Vanta, MetricStream, Hyperproof, and similar solutions.