Step 1 · What does your agent do?
2 selectedSelect every capability your agent can exhibit. The SDK uses these to self-classify into a risk tier per published tier_classifiers.
Financial services & lending
Consumer-facing
High-stakes decisions
Identity & biometric
Critical infrastructure / autonomous systems
Synthetic / deepfake content
Prohibited categories
Internal-only
Step 2 · Where is your firm legally established?
Your home regulator. Always part of the obligation set.
Step 3 · Where are your customers?
Customer-side regulations stack with your home regulator. Tick every jurisdiction with active customers.
Step 4 · Where does your AI infrastructure run?
The cloud region your agent's workload lives in. Affects cross-border data-transfer obligations (POPIA §72, GDPR Chapter V).