Regulatory change to control mapping API

Map regulatory changes to controls and evidence gaps

Supply the changed requirement and your control inventory. Regulation to Control maps affected obligations, control coverage, evidence gaps, deadlines, and priority.

Run the keyless demo Create a sandbox key

Customer-supplied input No key for the demo No card for a sandbox account

Exact use case

A rule or policy amendment lands and compliance needs to know which controls and evidence records require review.

Input you provide

A customer-supplied changed requirement plus the organization’s controls, owners, tags, test dates, and evidence.

Output you receive

Obligation-to-control mappings, uncovered gaps, stale evidence, deadlines, and prioritized impact.

What the API does

Maps a supplied change onto the supplied control and evidence graph with traceable reasons.

Authenticated first value

A successful authenticated POST /v1/changes that returns an impact mapping.

OpenAPI-grounded keyless demo

Map the change

Edit the supplied example, send it to /v1/demo/map, and inspect the service’s unedited JSON response. The demo stores nothing and consumes no account quota.

Request body Ready

JSON input

{
  "controls": [
    { "controlId": "CTL-014", "name": "Disclosure template review",
      "owner": "Payments Compliance", "status": "implemented",
      "tags": ["payments", "disclosure"],
      "lastTestedAt": "2026-07-01T00:00:00Z",
      "evidence": [
        { "kind": "policy_document", "collectedAt": "2026-07-02T00:00:00Z" },
        { "kind": "notification_record", "collectedAt": "2026-07-14T00:00:00Z" }] },
    { "controlId": "CTL-027", "name": "Fee change notification job",
      "owner": "Payments Engineering", "status": "planned",
      "tags": ["payments", "notification"] },
    { "controlId": "CTL-101", "name": "Account record retention",
      "owner": "Records Management", "status": "implemented",
      "tags": ["recordkeeping"], "lastTestedAt": "2024-02-01T00:00:00Z" }
  ],
  "change": {
    "changeId": "REG-2026-0117", "citation": "12 CFR 1026.19(e)",
    "title": "Revised cost-of-credit disclosures",
    "jurisdiction": "US", "regulator": "CFPB",
    "changeType": "amendment", "publishedAt": "2026-03-02T00:00:00Z",
    "effectiveAt": "2026-09-01T00:00:00Z", "transitionEndsAt": "2026-12-01T00:00:00Z",
    "currency": "USD",
    "obligations": [
      { "obligationId": "OB-1", "type": "disclosure",
        "text": "Provide the revised disclosure within three business days.",
        "appliesTo": ["payments", "disclosure"],
        "enforcement": "penalty", "maxPenaltyMinor": 500000000 },
      { "obligationId": "OB-2", "type": "notification",
        "text": "Notify existing customers 45 days before the fee change.",
        "appliesTo": ["payments", "notification"],
        "enforcement": "penalty", "maxPenaltyMinor": 250000000 },
      { "obligationId": "OB-3", "type": "recordkeeping",
        "text": "Retain each issued disclosure for five years.",
        "appliesTo": ["recordkeeping", "disclosure"],
        "enforcement": "supervisory" }
    ]
  }
}

This sample matches the published request contract for /v1/demo/map. Do not paste secrets or personal data.

Response

Run the demo to see the API response.

A successful response demonstrates the bounded classification or calculation shown here. It is not evidence of a deployed connector, autonomous external action, customer outcome, or commercial performance.

Capability boundary

What this page does not promise

It does not provide a proprietary regulatory feed, a static crosswalk catalog, or legal advice or determinations.

The demo qualifies the transformation only; account verification, key creation, and a successful authenticated primary-value request are required for activation.
Inputs and outputs must be reviewed in the context of your own data rights, policies, and operational controls.
No ranking, accuracy, savings, recovery, prevention, customer, or revenue result is claimed.

From evaluation to first value

A short, explicit path

Run the keyless demo.
Confirm that the input and output shape match the job you need done.
Create and verify a sandbox account.
The email claim flow creates a product-scoped API key. No card is required for the free tier.
Call the authenticated primary-value operation.
A successful authenticated POST /v1/changes that returns an impact mapping.

Create a sandbox key Read the API reference