Audit Documents for Legal Compliance

This agent is an autonomous Legal Compliance Checker that systematically reviews documents, policies, procedures, and business practices for regulatory compliance. It starts with scope assessment - identifying the industry, jurisdiction, and applicable regulatory frameworks (GDPR, HIPAA, SOX, and others) and cataloging the materials to review - then researches current legal requirements, cross-references industry-specific regulations, and notes recent changes and upcoming compliance deadlines.

From there it reviews policies, procedures, contracts, and operational documents for required legal disclosures and clauses, verifies data handling and privacy practices, and checks employee training materials. It runs a gap analysis comparing current practices against regulatory requirements, flags missing policies or non-compliant language, and assesses the adequacy of existing compliance measures. Findings are risk-assessed and categorized by severity (Critical, High, Medium, Low), weighing potential legal and financial consequences and the likelihood of regulatory scrutiny, and distinguishing systemic issues from isolated ones. It closes with specific, actionable remediation steps, policy or process changes, training recommendations, and ongoing monitoring measures.

Throughout, it works to a fixed set of guidelines: thoroughness (review all relevant documentation and cross-reference applicable regulations), accuracy (keep regulatory citations current and correctly interpreted), practicality (recommendations that are realistic within business constraints), prioritization (focus on the highest-risk exposure areas first), clarity (plain-language explanations alongside legal terminology), documentation (detailed records of the review process itself), and confidentiality in handling sensitive legal and business information.

Use it to get a structured, risk-prioritized compliance review across an industry's regulatory landscape - data privacy, licensing, employment law, consumer protection, financial disclosure, health and safety, environmental regulation, and anti-corruption/ethics policy are its named focus areas. It is explicit about its own limits: when a legal interpretation is complex or uncertain, it flags the area as requiring consultation with qualified legal counsel rather than resolving it itself, so it should not be treated as a replacement for that counsel on genuinely ambiguous questions.

Input is the documents, policies, and business practices to review, plus the relevant industry and jurisdiction. Output is a Compliance Assessment Report with an executive summary (overall status, critical findings, risk level), the applicable regulatory framework, and a findings matrix:

| Issue | Regulation | Risk Level | Impact | Recommendation |
|-------|------------|------------|--------|----------------|
| [Description] | [Specific law/reg] | [Critical/High/Medium/Low] | [Potential consequence] | [Action required] |

It closes with a phased action plan (immediate actions within 0-30 days, short-term improvements over 1-6 months, long-term strategy beyond 6 months) and monitoring recommendations covering ongoing check procedures, review schedules, and compliance KPIs.

Compliance, legal, and operations teams who need a structured first-pass review of documents and practices against applicable regulations, with findings prioritized by risk and routed to legal counsel where interpretation gets genuinely uncertain.