Regulatory library

How this library is organised

Each market has a section. Where the working language is not English, the market has two sections: one written in the local language for people who deal with the regulator directly, and one written in English for teams elsewhere who have to comply with that regulation without reading the statute in the original. These are not translations of one another. The English pages explain what binds a foreign parent's local entity; the local-language pages go into the detail a domestic team needs.

Five cross-market sections cut across all of it, including a corrections register that records every claim this library has had to withdraw or fix.

Cross-market topics

• AI agent governance — 7 articles.
  AI agent governance means control before execution and evidence after it: permissions, approval thresholds, audit trails and the rules now demanding them.
• Governed workflow automation — 5 articles.
  The cost of an automation platform is the exit, not the subscription. No industry standard for workflow definitions exists, so migration is a rebuild.
• FinOps for AI agents — 1 article.
  Cost measurement for AI agents and automated finance workflows: cost per operation, the ledger that doubles as an audit trail, and where spend escapes.
• Regulatory and technical glossary — 76 terms.
  Regulatory and technical terms across 15 markets, in the original language with an English gloss: KSeF, E-Rechnung, DUAA, eTIMS, ADMT and MCP.
• Corrections register — 20 claims.
  The Colorado AI Act never took effect; FINMA 08/2024 is a supervisory communication, not a circular; NIS2 does not apply in Norway. Twenty sourced corrections.

English-language markets

• United Kingdom — 8 articles.
  UK regulation for automated finance and AI: DUAA automated decisions, e-invoicing from 2029, the Cyber Security and Resilience Bill, FCA and PRA rules.
• United States — 3 articles.
  US regulation for automated finance and AI agents: California ADMT rules, Texas TRAIGA, Illinois HB 3773, Colorado SB 26-189 and FINRA oversight duties.
• Kenya — 4 articles.
  Kenyan compliance for automated finance and AI: eTIMS invoice validation, the Data Protection Act, 2019, ODPC registration and the cybercrime regulations.

Markets covered in two languages

Germany

• Germany, in English — 9 articles.
  E-Rechnung, NIS-2 director liability and AI Act supervision in Germany: what binds a foreign parent's German entity, and what the statute actually says.
• Deutschland, auf Deutsch — 9 Beiträge.
  Fachbeiträge zu E-Rechnung ab 2027, NIS-2 und § 38 BSIG sowie KI-MIG für Unternehmen mit automatisierten Prozessen. Jede Aussage mit Quelle und Stand.

Poland

• Poland, in English — 9 articles.
  KSeF, structured invoicing and automated compliance in Poland: scope, penalties from 2027, offline modes and API integration, for English-speaking teams.
• Polska, po polsku — 9 artykułów.
  Analizy KSeF dla firm automatyzujących fakturowanie: kary od 1 stycznia 2027 r., API 2.0, tryby offline, ślad audytowy i koszty. Źródła z datą.

France

• France, in English — 6 articles.
  France's e-invoicing reform for cross-border teams: what changed on 1 September 2026, plateformes agréées, formats, audit trails and the 2027 wave.
• France, en français — 6 dossiers.
  Réception obligatoire depuis le 1er septembre 2026, émission des PME et e-reporting au 1er septembre 2027. Analyses sourcées et datées pour la France.

Switzerland

• Switzerland, in English — 6 articles.
  Swiss AI governance for international teams: the revised FADP, FINMA's 08/2024 guidance, the 24-hour NCSC reporting duty and AI-agent traceability.
• Schweiz, auf Deutsch — 12 Beiträge.
  Die Schweiz hat kein KI-Gesetz: DSG, DSV, FINMA-Erwartungen und ISG gelten trotzdem. Fachbeiträge mit Quelle und Stand für Unternehmen mit KI-Einsatz.

Norway

• Norway, in English — 4 articles.
  Why NIS2 does not apply in Norway, what the digitalsikkerhetslov requires instead, and mandatory e-invoicing from 1 January 2027 with detail still open.
• Norge, på norsk — 4 artikler.
  Norske analyser om e-fakturaplikten fra 2027 og digitalsikkerhetsloven for virksomheter som automatiserer prosesser. Hver påstand er kildebelagt og datert.

Denmark

• Denmark, in English — 8 articles.
  Danish AI Act supervision, NIS 2-loven management duties, approval thresholds and the digital bookkeeping rules, for teams that do not read Danish.
• Danmark, på dansk — 7 artikler.
  Danske analyser om NIS 2-loven, AI-forordningen og bogføringsloven for virksomheder, der automatiserer processer. Hver påstand er kildeangivet og dateret.

Belgium

• Belgium, in English — 2 articles.
  Belgium's structured B2B e-invoicing obligation, the Peppol network model, and why the 2028 e-reporting proposal is still only a preliminary draft.
• Belgique, en français — 6 dossiers.
  La facture électronique structurée est obligatoire en Belgique depuis le 1er janvier 2026. Analyses sourcées pour les entreprises qui automatisent.

Estonia

• Estonia, in English — 4 articles.
  Estonian cyber-security law after NIS2 and what the e-invoicing duty actually requires, including the two things English coverage regularly gets wrong.
• Eesti, eesti keeles — 4 artiklit.
  Eesti analüüsid e-arve kohustusest ja küberturvalisuse seadusest ettevõtetele, kes automatiseerivad protsesse. Iga väide on allikaviidatud ja dateeritud.

Slovakia

• Slovakia, in English — 3 articles.
  Slovak e-invoicing from January 2027, the Peppol 5-corner model and the digitálni poštári, and why this is not a clearance system like Poland's KSeF.
• Slovensko, po slovensky — 3 články.
  Slovenské analýzy povinnej elektronickej fakturácie od 1. januára 2027 pre firmy, ktoré automatizujú procesy. Každé tvrdenie je zdrojované a datované.

How claims are sourced

Every regulatory claim in this library names the instrument it comes from, whether that is the statute, the decree or the regulator's own publication, and the date that source was last checked. Where a date or a threshold has been announced but is not yet in law, the page says so rather than presenting it as settled. Where professional commentary has inferred something the primary source does not say, the page says that too.

When this library gets something wrong, the fix is recorded in the corrections register with what was previously said, what the primary source actually says, and the date of the correction. The register currently holds twenty claims.