Platform services

Behind the analysis capabilities sit three platform services that bring regulations in, reason about them, and keep sensitive data safe.

Regulatory Discovery Core

The ingestion and monitoring backbone. It runs discovery jobs against regulatory sources, syncs and scrapes the web, triages regulatory news, maps jurisdiction exposure, manages a review queue and schedule, and runs the FDL pipeline that turns a regulation into a structured questionnaire.

Where it lives: server/src/endpoints/regulatory_discovery/.

Regulatory Intelligence Core

The reasoning layer over a regulation: applicability (does this apply to us?), classification, conflict detection, clarifying questions, and a topic index — the signals the analyze/monitor capabilities build on.

Where it lives: server/src/agents/aibitat/plugins/regulatory-intelligence/.

PII Handling Core

Detect, redact, and scan documents for PII/PCI, with risk-level reporting and audit certificates — so evidence can be shared without leaking personal data.

Where it lives: pii-detector, pii-redactor, pii-scanner plugins.

Caution

Redaction runtime. PDF redaction depends on the PyMuPDF runtime being installed on the host. Where it isn’t, redaction fails closed — the document is blocked rather than shared un-redacted. That’s the safe default, but it means redaction must be provisioned before relying on it in a live workflow.