{
  "site": "https://compliancesme.com",
  "generated": "2026-08-15",
  "description": "ComplianceSME register of 87 EU and UK regulatory instruments, each with a self-serve compliance system. Prices in GBP, one-time purchase. Free applicability assessment at https://compliancesme.com/assessment/.",
  "currency": "GBP",
  "membership": {
    "priceMonthlyGBP": 500,
    "covers": "updates for every owned system",
    "url": "https://compliancesme.com/membership/"
  },
  "instruments": [
    {
      "id": "A-001",
      "name": "GDPR",
      "officialReference": "Regulation (EU) 2016/679",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Personal data processing obligations for any business handling EU residents' data.",
      "sectors": [],
      "status": "available",
      "priceGBP": 0,
      "url": "https://compliancesme.com/tools/gdpr/"
    },
    {
      "id": "A-002",
      "name": "ePrivacy Directive",
      "officialReference": "Directive 2002/58/EC",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Cookies, electronic marketing and communications confidentiality rules.",
      "sectors": [
        "electronic communications providers"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/eprivacy-directive/"
    },
    {
      "id": "A-003",
      "name": "NIS2 Directive",
      "officialReference": "Directive (EU) 2022/2555",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Cybersecurity risk management and incident reporting for essential and important entities.",
      "sectors": [
        "energy",
        "transport",
        "banking",
        "financial market infrastructure",
        "health",
        "drinking water",
        "waste water",
        "digital infrastructure",
        "ICT service management",
        "public administration",
        "space",
        "postal and courier services",
        "waste management",
        "chemicals",
        "food production and distribution",
        "manufacturing of critical products",
        "digital providers (online marketplaces, search engines, social networks)",
        "research",
        "electronic communications providers",
        "trust service providers",
        "DNS and domain name services"
      ],
      "status": "available",
      "priceGBP": 3000,
      "url": "https://compliancesme.com/tools/nis2-directive/"
    },
    {
      "id": "A-004",
      "name": "CER Directive",
      "officialReference": "Directive (EU) 2022/2557",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Physical resilience obligations for critical infrastructure entities.",
      "sectors": [
        "energy",
        "transport",
        "banking",
        "financial market infrastructure",
        "health",
        "drinking water",
        "waste water",
        "digital infrastructure",
        "public administration",
        "space",
        "food production, processing and distribution"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/cer-directive/"
    },
    {
      "id": "A-005",
      "name": "DORA",
      "officialReference": "Regulation (EU) 2022/2554",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "ICT risk management and operational resilience for financial entities.",
      "sectors": [
        "credit institutions",
        "payment institutions",
        "electronic money institutions",
        "account information service providers",
        "investment firms",
        "crypto-asset service providers",
        "central securities depositories",
        "central counterparties",
        "trading venues",
        "trade repositories",
        "fund managers",
        "insurance and reinsurance undertakings",
        "insurance and reinsurance intermediaries",
        "occupational pension institutions",
        "credit rating agencies",
        "critical benchmark administrators",
        "crowdfunding service providers",
        "securitisation repositories",
        "data reporting service providers",
        "ICT third-party service providers to financial entities"
      ],
      "status": "available",
      "priceGBP": 3000,
      "url": "https://compliancesme.com/tools/dora/"
    },
    {
      "id": "A-006",
      "name": "Cyber Resilience Act",
      "officialReference": "Regulation (EU) 2024/2847",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Security requirements for products with digital elements placed on the EU market.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/cyber-resilience-act/"
    },
    {
      "id": "A-007",
      "name": "Data Act",
      "officialReference": "Regulation (EU) 2023/2854",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Data access and sharing obligations for connected products and related services.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/data-act/"
    },
    {
      "id": "A-008",
      "name": "eIDAS 2.0",
      "officialReference": "Regulation (EU) 2024/1183",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Electronic identity, trust services and the European Digital Identity Wallet.",
      "sectors": [
        "trust service providers",
        "electronic identification scheme providers",
        "very large online platforms",
        "mobile device manufacturers",
        "electronic communications providers"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/eidas-2-0/"
    },
    {
      "id": "A-009",
      "name": "Cyber Solidarity Act",
      "officialReference": "Regulation (EU) 2025/38",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "EU-level cyber incident detection, preparedness and response structures.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/cyber-solidarity-act/"
    },
    {
      "id": "A-010",
      "name": "UK GDPR and DPA 2018",
      "officialReference": "Data Protection Act 2018 (c. 12)",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK personal data processing regime, retained GDPR plus DPA 2018.",
      "sectors": [],
      "status": "available",
      "priceGBP": 0,
      "url": "https://compliancesme.com/tools/uk-gdpr-and-dpa-2018/"
    },
    {
      "id": "A-011",
      "name": "DUAA 2025",
      "officialReference": "Data (Use and Access) Act 2025",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Amendments to UK data protection covering smart data schemes and digital verification.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/duaa-2025/"
    },
    {
      "id": "A-012",
      "name": "PECR 2003",
      "officialReference": "SI 2003/2426",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK cookies and electronic marketing rules, enforced alongside UK GDPR.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/pecr-2003/"
    },
    {
      "id": "A-013",
      "name": "UK NIS Regulations 2018",
      "officialReference": "SI 2018/506",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK network and information systems security for operators of essential services.",
      "sectors": [
        "energy",
        "transport",
        "health",
        "drinking water supply and distribution",
        "online marketplaces",
        "online search engines",
        "cloud computing services"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/uk-nis-regulations-2018/"
    },
    {
      "id": "A-014",
      "name": "PSTI Act 2022",
      "officialReference": "PSTI Act 2022 (c. 46)",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Security requirements for consumer connectable products sold in the UK.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/psti-act-2022/"
    },
    {
      "id": "A-015",
      "name": "Toolkit for ISO 27001",
      "officialReference": "ISO/IEC 27001:2022",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Information security management system standard. Voluntary, widely required contractually. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-27001-toolkit/"
    },
    {
      "id": "A-016",
      "name": "Toolkit for ISO 27002",
      "officialReference": "ISO/IEC 27002:2022",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Information security controls guidance supporting ISO 27001. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-27002-toolkit/"
    },
    {
      "id": "A-017",
      "name": "Toolkit for ISO 27017",
      "officialReference": "ISO/IEC 27017:2015",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Cloud-specific information security controls. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "cloud services",
        "SaaS",
        "IT and technology",
        "managed services",
        "hosting"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-27017-toolkit/"
    },
    {
      "id": "A-018",
      "name": "Toolkit for ISO 27018",
      "officialReference": "ISO/IEC 27018:2019",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Protection of personal data in public cloud services. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "cloud services",
        "SaaS",
        "IaaS and PaaS vendors",
        "IT and technology",
        "data hosting"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-27018-toolkit/"
    },
    {
      "id": "A-019",
      "name": "Toolkit for ISO 27701",
      "officialReference": "ISO/IEC 27701:2019",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Privacy information management extension to ISO 27001. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "IT and technology",
        "SaaS",
        "health services",
        "marketing and analytics",
        "HR and recruitment services",
        "financial services"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-27701-toolkit/"
    },
    {
      "id": "A-020",
      "name": "Toolkit for ISO 22301",
      "officialReference": "ISO 22301:2019",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Business continuity management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "financial services",
        "healthcare",
        "critical infrastructure",
        "logistics and supply chain",
        "public services",
        "IT and hosting"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-22301-toolkit/"
    },
    {
      "id": "A-021",
      "name": "Cyber Essentials",
      "officialReference": "NCSC Cyber Essentials Scheme",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "United Kingdom",
      "voluntary": true,
      "summary": "UK government-backed baseline cybersecurity certification. Required for many public contracts.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/cyber-essentials/"
    },
    {
      "id": "A-022",
      "name": "SOC 2",
      "officialReference": "AICPA Trust Services Criteria",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Service organisation controls attestation, commonly demanded by B2B software buyers.",
      "sectors": [
        "SaaS providers",
        "cloud computing services",
        "data centres",
        "managed service providers",
        "technology service providers"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/soc-2/"
    },
    {
      "id": "A-023",
      "name": "PCI DSS",
      "officialReference": "PCI DSS v4.0.1",
      "category": "Cybersecurity and data protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": false,
      "summary": "Payment card data security standard. Contractually mandatory when accepting cards.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/pci-dss/"
    },
    {
      "id": "B-001",
      "name": "EU AI Act",
      "officialReference": "Regulation (EU) 2024/1689",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Risk-based obligations for providers and deployers of AI systems in the EU.",
      "sectors": [],
      "status": "available",
      "priceGBP": 3000,
      "url": "https://compliancesme.com/tools/eu-ai-act/"
    },
    {
      "id": "B-002",
      "name": "Digital Services Act",
      "officialReference": "Regulation (EU) 2022/2065",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Obligations for online intermediaries, platforms and marketplaces.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/digital-services-act/"
    },
    {
      "id": "B-003",
      "name": "Digital Markets Act",
      "officialReference": "Regulation (EU) 2022/1925",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Gatekeeper obligations for the largest platforms. Outside SME scope.",
      "sectors": [],
      "status": "in development",
      "priceGBP": null,
      "url": "https://compliancesme.com/tools/digital-markets-act/"
    },
    {
      "id": "B-004",
      "name": "Product Liability Directive",
      "officialReference": "Directive (EU) 2024/2853",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Strict liability for defective products, now covering software and AI.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/product-liability-directive/"
    },
    {
      "id": "B-005",
      "name": "GPSR",
      "officialReference": "Regulation (EU) 2023/988",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "General product safety obligations for consumer products including online sales.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/gpsr/"
    },
    {
      "id": "B-006",
      "name": "European Accessibility Act",
      "officialReference": "Directive (EU) 2019/882",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Accessibility requirements for products and services including e-commerce.",
      "sectors": [
        "consumer technology products",
        "electronic communications",
        "consumer banking",
        "e-commerce",
        "e-books and e-readers",
        "passenger transport"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/european-accessibility-act/"
    },
    {
      "id": "B-007",
      "name": "ESPR (Ecodesign)",
      "officialReference": "Regulation (EU) 2024/1781",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Ecodesign requirements and Digital Product Passports for products on the EU market.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/espr-ecodesign/"
    },
    {
      "id": "B-008",
      "name": "Machinery Regulation",
      "officialReference": "Regulation (EU) 2023/1230",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Safety requirements for machinery placed on the EU market from January 2027.",
      "sectors": [
        "machinery and related products"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/machinery-regulation/"
    },
    {
      "id": "B-009",
      "name": "Green Transition Directive",
      "officialReference": "Directive (EU) 2024/825",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Ban on unsubstantiated environmental claims and greenwashing in consumer marketing.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/green-transition-directive/"
    },
    {
      "id": "B-010",
      "name": "Right to Repair Directive",
      "officialReference": "Directive (EU) 2024/1799",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Repair obligations for producers of certain consumer goods.",
      "sectors": [
        "repair services"
      ],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/right-to-repair-directive/"
    },
    {
      "id": "B-011",
      "name": "Online Safety Act 2023",
      "officialReference": "OSA 2023 (c. 50)",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Duties of care for UK services hosting user-generated content or search.",
      "sectors": [],
      "status": "available",
      "priceGBP": 3000,
      "url": "https://compliancesme.com/tools/online-safety-act-2023/"
    },
    {
      "id": "B-012",
      "name": "DMCC Act 2024",
      "officialReference": "DMCC Act 2024 (c. 13)",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK consumer protection enforcement, subscription traps, fake reviews, drip pricing.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/dmcc-act-2024/"
    },
    {
      "id": "B-013",
      "name": "Consumer Rights Act 2015",
      "officialReference": "CRA 2015 (c. 15)",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Statutory rights on goods, services and digital content sold to UK consumers.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/consumer-rights-act-2015/"
    },
    {
      "id": "B-014",
      "name": "Toolkit for ISO 42001",
      "officialReference": "ISO/IEC 42001:2023",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "AI management system standard. Strong evidence of AI Act readiness. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-42001-toolkit/"
    },
    {
      "id": "B-015",
      "name": "Toolkit for ISO 9001",
      "officialReference": "ISO 9001:2015",
      "category": "AI, digital commerce and consumer protection",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Quality management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-9001-toolkit/"
    },
    {
      "id": "C-001",
      "name": "CSRD",
      "officialReference": "Directive (EU) 2022/2464",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Sustainability reporting for large undertakings. Thresholds raised under Omnibus I.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/csrd/"
    },
    {
      "id": "C-002",
      "name": "CS3D / CSDDD",
      "officialReference": "Directive (EU) 2024/1760",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Supply chain due diligence for the largest companies. SMEs affected as suppliers.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/cs3d-csddd/"
    },
    {
      "id": "C-003",
      "name": "EU AML Regulation",
      "officialReference": "Regulation (EU) 2024/1624",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Directly applicable anti-money laundering obligations for obliged entities.",
      "sectors": [
        "credit institutions",
        "financial institutions",
        "investment firms",
        "crypto-asset service providers",
        "crowdfunding platforms",
        "dealers in precious metals, precious stones and other high-value goods",
        "dealers in motor vehicles, watercraft and aircraft",
        "real estate agents and developers",
        "independent legal professionals",
        "notaries",
        "auditors",
        "external accountants",
        "tax advisors",
        "trust or company service providers",
        "investment migration operators",
        "consumer and mortgage credit intermediaries",
        "collective investment undertakings and their managers",
        "professional football clubs and football agents",
        "gambling service providers"
      ],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/eu-aml-regulation/"
    },
    {
      "id": "C-004",
      "name": "EU Taxonomy Regulation",
      "officialReference": "Regulation (EU) 2020/852",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Classification of environmentally sustainable economic activities for reporting.",
      "sectors": [
        "financial market participants"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/eu-taxonomy-regulation/"
    },
    {
      "id": "C-005",
      "name": "SFDR",
      "officialReference": "Regulation (EU) 2019/2088",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Sustainability disclosure for financial market participants and advisers.",
      "sectors": [
        "insurance undertakings offering IBIPs",
        "investment firms providing portfolio management",
        "institutions for occupational retirement provision (IORPs)",
        "manufacturers of pension products",
        "alternative investment fund managers (AIFMs)",
        "PEPP providers",
        "EuVECA managers",
        "EuSEF managers",
        "UCITS management companies",
        "credit institutions providing portfolio management",
        "insurance intermediaries advising on IBIPs",
        "investment advisers"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/sfdr/"
    },
    {
      "id": "C-006",
      "name": "Whistleblower Directive",
      "officialReference": "Directive (EU) 2019/1937",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Internal reporting channels required at 50 or more employees, and in financial services at any size.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/whistleblower-directive/"
    },
    {
      "id": "C-007",
      "name": "Pay Transparency Directive",
      "officialReference": "Directive (EU) 2023/970",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Pay transparency and gender pay gap reporting, phased by employer size from 2027.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/pay-transparency-directive/"
    },
    {
      "id": "C-008",
      "name": "Platform Workers Directive",
      "officialReference": "Directive (EU) 2024/2831",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Employment status and algorithmic management rules for digital labour platforms.",
      "sectors": [
        "digital labour platforms"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/platform-workers-directive/"
    },
    {
      "id": "C-009",
      "name": "Foreign Subsidies Regulation",
      "officialReference": "Regulation (EU) 2022/2560",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Notification of foreign subsidies in large concentrations and public tenders.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/foreign-subsidies-regulation/"
    },
    {
      "id": "C-010",
      "name": "Working Time Directive",
      "officialReference": "Directive 2003/88/EC",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Working hours, rest periods and annual leave minimums for EU employers.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/working-time-directive/"
    },
    {
      "id": "C-011",
      "name": "Companies Act 2006",
      "officialReference": "Companies Act 2006 (c. 46)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Core UK company law: directors' duties, accounts, filings and registers.",
      "sectors": [],
      "status": "available",
      "priceGBP": 0,
      "url": "https://compliancesme.com/tools/companies-act-2006/"
    },
    {
      "id": "C-012",
      "name": "ECCTA 2023",
      "officialReference": "ECCTA 2023 (c. 56)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Companies House identity verification and the failure to prevent fraud offence.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/eccta-2023/"
    },
    {
      "id": "C-013",
      "name": "Employment Rights Act 2025",
      "officialReference": "Employment Rights Act 2025 (c. 36)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Employment law reform for all employers in Great Britain: employee, worker and agency worker rights, statutory sick pay, and enforcement.",
      "sectors": [
        "all employers",
        "agency work",
        "employment agencies"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/employment-rights-act-2025/"
    },
    {
      "id": "C-014",
      "name": "Modern Slavery Act 2015",
      "officialReference": "MSA 2015 (c. 30)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Slavery and human trafficking statements for businesses over 36 million pounds turnover.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/modern-slavery-act-2015/"
    },
    {
      "id": "C-015",
      "name": "Bribery Act 2010",
      "officialReference": "Bribery Act 2010 (c. 23)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Corporate offence of failing to prevent bribery. Adequate procedures defence.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/bribery-act-2010/"
    },
    {
      "id": "C-016",
      "name": "Equality Act 2010",
      "officialReference": "Equality Act 2010 (c. 15)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Protected characteristics, discrimination and workplace adjustment duties.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/equality-act-2010/"
    },
    {
      "id": "C-017",
      "name": "MLR 2017",
      "officialReference": "SI 2017/692",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK money laundering regulations for relevant businesses.",
      "sectors": [
        "credit institutions",
        "financial institutions",
        "auditors",
        "insolvency practitioners",
        "external accountants",
        "tax advisers",
        "independent legal professionals",
        "trust or company service providers",
        "estate agents",
        "letting agents",
        "high value dealers",
        "casinos",
        "art market participants",
        "cryptoasset exchange providers",
        "custodian wallet providers",
        "auction platforms"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/mlr-2017/"
    },
    {
      "id": "C-018",
      "name": "MTD ITSA",
      "officialReference": "Finance Act provisions",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Making Tax Digital for income tax self assessment, phased from April 2026.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/mtd-itsa/"
    },
    {
      "id": "C-019",
      "name": "FSMA 2023",
      "officialReference": "FSMA 2023 (c. 29)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK financial services regulatory structure post-Brexit.",
      "sectors": [
        "financial services",
        "payment systems",
        "digital settlement assets",
        "investment exchanges",
        "central counterparties",
        "central securities depositories",
        "data reporting services",
        "critical third party service providers to financial entities"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/fsma-2023/"
    },
    {
      "id": "C-020",
      "name": "UK Sanctions Regime",
      "officialReference": "SAMLA 2018 (c. 13)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Sanctions screening obligations applying to all UK businesses.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/uk-sanctions-regime/"
    },
    {
      "id": "C-021",
      "name": "Procurement Act 2023",
      "officialReference": "Procurement Act 2023 (c. 54)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK public procurement rules for suppliers bidding on public contracts.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/procurement-act-2023/"
    },
    {
      "id": "C-022",
      "name": "Toolkit for ISO 31000",
      "officialReference": "ISO 31000:2018",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Risk management guidance standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "financial services",
        "professional services",
        "public sector suppliers",
        "growing mid-size businesses across sectors"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-31000-toolkit/"
    },
    {
      "id": "C-023",
      "name": "Toolkit for ISO 37001",
      "officialReference": "ISO 37001:2016",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Anti-bribery management systems. Supports Bribery Act adequate procedures. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "construction",
        "defence",
        "extractives and energy",
        "pharmaceuticals",
        "public procurement suppliers",
        "international trade"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-37001-toolkit/"
    },
    {
      "id": "C-024",
      "name": "Toolkit for ISO 37301",
      "officialReference": "ISO 37301:2021",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Compliance management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "financial services",
        "regulated industries",
        "public procurement suppliers",
        "corporate groups and subsidiaries"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-37301-toolkit/"
    },
    {
      "id": "C-025",
      "name": "Right to Work Checks",
      "officialReference": "Immigration, Asylum and Nationality Act 2006",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Employer duty to verify right to work before employment begins. Civil penalties per worker.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/right-to-work-checks/"
    },
    {
      "id": "C-026",
      "name": "National Minimum Wage",
      "officialReference": "NMW Act 1998 (c. 39)",
      "category": "Corporate governance, employment and financial",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Minimum wage rates, record keeping and HMRC enforcement including naming.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/national-minimum-wage/"
    },
    {
      "id": "D-001",
      "name": "EU Climate Law",
      "officialReference": "Regulation (EU) 2021/1119",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Binding EU climate neutrality target. Drives downstream obligations rather than direct SME duties.",
      "sectors": [],
      "status": "in development",
      "priceGBP": null,
      "url": "https://compliancesme.com/tools/eu-climate-law/"
    },
    {
      "id": "D-002",
      "name": "EU PPWR",
      "officialReference": "Regulation (EU) 2025/40",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Packaging design, recyclability and labelling requirements from 2026 onward.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/eu-ppwr/"
    },
    {
      "id": "D-003",
      "name": "EU REACH",
      "officialReference": "Regulation (EC) 1907/2006",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Registration and restriction of chemical substances on the EU market.",
      "sectors": [
        "chemicals"
      ],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/eu-reach/"
    },
    {
      "id": "D-004",
      "name": "EU Deforestation Regulation",
      "officialReference": "Regulation (EU) 2023/1115",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Due diligence on deforestation-linked commodities entering the EU market.",
      "sectors": [
        "cattle products",
        "cocoa",
        "coffee",
        "oil palm",
        "rubber",
        "soya",
        "wood and timber"
      ],
      "status": "in development",
      "priceGBP": null,
      "url": "https://compliancesme.com/tools/eu-deforestation-regulation/"
    },
    {
      "id": "D-005",
      "name": "EU Battery Regulation",
      "officialReference": "Regulation (EU) 2023/1542",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Battery sustainability, labelling and due diligence including embedded batteries.",
      "sectors": [
        "batteries",
        "waste battery management and recycling"
      ],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/eu-battery-regulation/"
    },
    {
      "id": "D-006",
      "name": "CBAM",
      "officialReference": "Regulation (EU) 2023/956",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Carbon border adjustment reporting and certificates on carbon-intensive imports.",
      "sectors": [
        "cement",
        "iron and steel",
        "aluminium",
        "fertilisers",
        "hydrogen",
        "electricity"
      ],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/cbam/"
    },
    {
      "id": "D-007",
      "name": "RoHS Directive",
      "officialReference": "Directive 2011/65/EU",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Hazardous substance restrictions in electrical and electronic equipment.",
      "sectors": [
        "electrical and electronic equipment"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/rohs-directive/"
    },
    {
      "id": "D-008",
      "name": "WEEE Directive",
      "officialReference": "Directive 2012/19/EU",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Producer responsibility for waste electrical and electronic equipment.",
      "sectors": [
        "electrical and electronic equipment",
        "waste treatment and recycling"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/weee-directive/"
    },
    {
      "id": "D-009",
      "name": "CLP Regulation",
      "officialReference": "Regulation (EC) 1272/2008",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Classification, labelling and packaging of chemical substances and mixtures.",
      "sectors": [
        "chemicals"
      ],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/clp-regulation/"
    },
    {
      "id": "D-010",
      "name": "Single-Use Plastics Directive",
      "officialReference": "Directive (EU) 2019/904",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Restrictions and marking requirements on single-use plastic products.",
      "sectors": [],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/single-use-plastics-directive/"
    },
    {
      "id": "D-011",
      "name": "Waste Framework Directive",
      "officialReference": "Directive 2008/98/EC",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union",
      "voluntary": false,
      "summary": "Waste hierarchy, duty of care and extended producer responsibility foundations.",
      "sectors": [
        "waste collection, transport, recovery and disposal",
        "hazardous waste dealers and brokers"
      ],
      "status": "available",
      "priceGBP": 750,
      "url": "https://compliancesme.com/tools/waste-framework-directive/"
    },
    {
      "id": "D-012",
      "name": "HSWA 1974",
      "officialReference": "HSWA 1974 (c. 37) + 11 sub-regulations",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK workplace health and safety duties including COSHH, RIDDOR, PUWER and LOLER.",
      "sectors": [],
      "status": "in development",
      "priceGBP": null,
      "url": "https://compliancesme.com/tools/hswa-1974/"
    },
    {
      "id": "D-013",
      "name": "CDM Regulations 2015",
      "officialReference": "SI 2015/51",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Construction project design and management duties for clients, designers and contractors.",
      "sectors": [
        "construction",
        "architecture and design",
        "property development"
      ],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/cdm-regulations-2015/"
    },
    {
      "id": "D-014",
      "name": "Building Safety Act 2022",
      "officialReference": "BSA 2022 (c. 30)",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Building safety regime, dutyholder requirements and higher-risk building rules.",
      "sectors": [
        "construction",
        "architecture and design",
        "property management",
        "building control"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/building-safety-act-2022/"
    },
    {
      "id": "D-015",
      "name": "SECR",
      "officialReference": "SI 2018/1155",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Streamlined energy and carbon reporting for large UK companies.",
      "sectors": [],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/secr/"
    },
    {
      "id": "D-016",
      "name": "EPR for Packaging",
      "officialReference": "SI 2024/1332",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK extended producer responsibility: packaging data reporting and fees.",
      "sectors": [],
      "status": "available",
      "priceGBP": 2500,
      "url": "https://compliancesme.com/tools/epr-for-packaging/"
    },
    {
      "id": "D-017",
      "name": "UK REACH",
      "officialReference": "SI 2019/758",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK chemical registration regime post-Brexit, parallel to EU REACH.",
      "sectors": [
        "chemicals",
        "manufacturing"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/uk-reach/"
    },
    {
      "id": "D-018",
      "name": "Environment Act 2021",
      "officialReference": "Environment Act 2021 (c. 30)",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "UK environmental governance: waste reform, biodiversity net gain, due diligence powers.",
      "sectors": [
        "waste management"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/environment-act-2021/"
    },
    {
      "id": "D-019",
      "name": "Toolkit for ISO 14001",
      "officialReference": "ISO 14001:2015",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Environmental management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "manufacturing",
        "construction",
        "logistics and transport",
        "chemicals",
        "waste management",
        "utilities"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-14001-toolkit/"
    },
    {
      "id": "D-020",
      "name": "Toolkit for ISO 14064",
      "officialReference": "ISO 14064-1:2018",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Greenhouse gas quantification and reporting standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "manufacturing",
        "energy",
        "logistics and transport",
        "suppliers to large corporates",
        "carbon project developers"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-14064-toolkit/"
    },
    {
      "id": "D-021",
      "name": "Toolkit for ISO 45001",
      "officialReference": "ISO 45001:2018",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Occupational health and safety management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "construction",
        "manufacturing",
        "logistics and transport",
        "agriculture",
        "utilities",
        "facilities management"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-45001-toolkit/"
    },
    {
      "id": "D-022",
      "name": "Toolkit for ISO 50001",
      "officialReference": "ISO 50001:2018",
      "category": "Environmental, health and safety",
      "jurisdiction": "European Union and United Kingdom",
      "voluntary": true,
      "summary": "Energy management systems standard. The ISO standard document is not included: you purchase your licensed copy separately and this toolkit works alongside it.",
      "sectors": [
        "manufacturing",
        "data centres",
        "logistics and transport",
        "food processing",
        "heavy energy users"
      ],
      "status": "available",
      "priceGBP": 495,
      "url": "https://compliancesme.com/tools/iso-50001-toolkit/"
    },
    {
      "id": "D-023",
      "name": "Fire Safety Order 2005",
      "officialReference": "SI 2005/1541",
      "category": "Environmental, health and safety",
      "jurisdiction": "United Kingdom",
      "voluntary": false,
      "summary": "Fire risk assessment and precaution duties for the responsible person in any workplace.",
      "sectors": [
        "property management"
      ],
      "status": "available",
      "priceGBP": 1500,
      "url": "https://compliancesme.com/tools/fire-safety-order-2005/"
    }
  ]
}