What analysts, compliance, risk and procurement teams ask about NovaCopilot: what the Intelligence Graph delivers, how every outcome stays tied to its sources, and how data is handled.
Regulatory questions
Rules, scope and the sources behind them
General summaries of public EU legislation, published by NovaCopilot. These are not individual legal assessments or a record of legal review. Verify the current text and its application with your legal or data protection team.
Which DORA obligations apply to ICT suppliers?
DORA places ICT risk management and third-party risk obligations on the financial entities within its scope. Their ICT suppliers may be required to meet contractual requirements on security, incident assistance, audit access and exit arrangements. Suppliers designated as critical ICT third-party service providers are also subject to a specific EU oversight framework. An ordinary supplier is not automatically a designated critical provider.
Scope
European Union · Financial entities and ICT third-party services · DORA, Articles 2, 28, 30 and 31
The registry is large. The first answer can take a few seconds to load.
How does the EU AI Act affect market access?
The EU AI Act can apply to providers placing AI systems or general-purpose AI models on the EU market, including providers established outside the EU. The relevant duties depend on the organisation's role, the intended use and the applicable risk classification. Where a system is classified as high risk, requirements can include risk management, technical documentation, human oversight and conformity assessment before market placement, subject to the applicable provisions and transition rules.
Scope
European Union · AI providers and other operators · EU AI Act, Articles 2, 6, 16 and 43
Assess the actual system, role, exceptions and applicable transition provisions. This overview does not determine a product's classification or launch date.
The registry is large. The first answer can take a few seconds to load.
Does GDPR apply to publicly available personal data?
Public availability does not, by itself, remove information from the definition of personal data. Information relating to an identified or identifiable natural person can still be personal data. Where GDPR applies, processing needs a lawful basis and must follow the relevant principles, including purpose limitation, data minimisation and accuracy. Public access is not a general permission to reuse personal data without those checks.
Scope
European Union · Processing of personal data within GDPR's scope · Articles 4, 5 and 6
The registry is large. The first answer can take a few seconds to load.
Frequently asked questions
The questions that come up in review
The same questions are asked by procurement, risk and data protection in every process. The answers describe principles and boundaries of responsibility. Detailed technical documentation is provided under NDA in a formal review.
01
Platform and intelligence
What NovaCopilot is, who it is built for, and what it delivers.
02
Sources and traceability
How each outcome remains tied to the underlying legal, regulatory and supervisory sources.
03
Security and data protection
How data is handled and where responsibility passes to you.
