5 AI-Powered Compliance Skills for Product Managers โ covering 35+ jurisdictions, ISO standards, and flexible compliance depth
A suite of 5 specialized compliance skills that transform any AI assistant (Gemini, Claude, ChatGPT, Copilot, Cursor...) into a Compliance-Aware Product Manager. It generates PRDs with built-in security checks, regulatory mapping, and actionable engineering checklists.
Not every PRD needs full compliance. To prevent over-engineering simple features, the agent asks you to choose your depth at the start of every chat:
| Level | Mode Name | Best For | What Happens |
|---|---|---|---|
| ๐ข | ๐ Standard PRD | MVPs, internal tools, fast iteration | Generates a clean, standard PRD โ no compliance scanning. |
| ๐ก | ๐ก๏ธ Smart Compliance (Default) | Products going to production | Auto-detects region and applies only the relevant local laws. |
| ๐ด | ๐ Full Compliance Audit | Enterprise, strictly regulated industries | Full audit: All jurisdictions + ISO 27001/42001 + SOC 2 + WCAG. |
Tip: You don't have to wait for the bot to ask. Just say "Standard PRD" or "Full compliance for EU" in your very first prompt to skip Step 0.
| # | Skill | Focus | For Who |
|---|---|---|---|
| ๐ | SafeAI-Global PRD Agent | 35+ jurisdictions, cross-border transfers, AI governance | All Product Managers |
| ๐ช๐บ | SafeAI GDPR Expert | GDPR Art-by-Art, EU AI Act risk classification, DPIA | EU market PMs |
| ๐ฅ | SafeAI HIPAA Expert | HIPAA safeguards, FDA SaMD, PHI handling | HealthTech PMs |
| ๐ณ | SafeAI FinTech Compliance | PCI-DSS v4.0, PSD2/SCA, AML/KYC, Open Banking | FinTech PMs |
| ๐ | SafeAI ASEAN Data Protection | VN, SG, TH, MY, ID, PH country deep-dives | ASEAN startups |
The SafeAI-Global suite uses a Hub-and-Spoke architecture to ensure your AI agent doesn't suffer from "context dilution".
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ ๐ SafeAI-Global PRD Agent (Hub) โ
โ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โ
โ โข Covers 35+ Jurisdictions โ
โ โข Cross-border Data Transfers โ
โ โข Defines AI Governance โ
โโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโ
โ
[ Step 0: Auto-Detects Region & Depth ]
โ
โโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโดโโโโฌโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโ
โผ โผ โผ โผ โผ
โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ
โ ๐ช๐บ GDPR โ โ ๐ฅ HIPAA โ โ ๐ณ FinTech โ โ ๐ ASEAN โ โ ๐ Standard โ
โ Expert โ โ Expert โ โ Compliance โ โ Data Prot. โ โ PRD โ
โโโโโโโโโโโโโโโค โโโโโโโโโโโโโโโค โโโโโโโโโโโโโโโค โโโโโโโโโโโโโโโค โโโโโโโโโโโโโโโค
โ โข Art-by-Artโ โ โข FDA SaMD โ โ โข PCI-DSS โ โ โข VN, SG, THโ โ โข No Legal โ
โ โข EU AI Act โ โ โข PHI Safeguโ โ โข PSD2/SCA โ โ โข MY, ID, PHโ โ โข Fast MVP โ
โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโ
The Hub Workflow: Start your chat with the Global PRD Agent. If it detects a highly regulated domain (like Healthcare in the US or FinTech in Europe), it will automatically recommend you switch to the specialized Spoke skill for a deeper audit.
npx skills add datht-work/safeai-global-agentThis will show all 5 skills โ select the ones you need.
Copy the raw SKILL.md content and paste it into your AI assistant's system prompt:
| AI Tool | Setup |
|---|---|
| Google Gemini | Gems โ Create Gem โ Paste SKILL.md into Instructions |
| Claude (Anthropic) | Projects โ Create Project โ Paste into Project Instructions |
| ChatGPT (OpenAI) | Explore GPTs โ Create โ Paste into Instructions |
| GitHub Copilot | Save as .github/copilot-instructions.md in your repo |
| Cursor | Place SKILL.md in .cursor/rules/ directory |
| Windsurf | Place SKILL.md in .windsurfrules directory |
| Skill | Raw URL |
|---|---|
| Global PRD Agent | Copy |
| GDPR Expert | Copy |
| HIPAA Expert | Copy |
| FinTech Compliance | Copy |
| ASEAN Data Protection | Copy |
Paste this prompt into any AI chat:
Please read and follow the instructions at this URL as your system prompt:
https://raw.githubusercontent.com/datht-work/safeai-global-agent/main/SKILL.md
๐ป๐ณ Vietnam ยท ๐จ๐ณ China ยท ๐ฏ๐ต Japan ยท ๐ฐ๐ท South Korea ยท ๐ฎ๐ณ India ยท ๐ธ๐ฌ Singapore ยท ๐ฆ๐บ Australia ยท ๐น๐ญ Thailand ยท ๐ฒ๐พ Malaysia ยท ๐ฎ๐ฉ Indonesia ยท ๐ต๐ญ Philippines
๐ช๐บ EU ยท ๐ฌ๐ง UK ยท ๐จ๐ญ Switzerland ยท ๐น๐ท Turkey ยท ๐ฆ๐ช UAE ยท ๐ธ๐ฆ Saudi Arabia ยท ๐ฎ๐ฑ Israel ยท ๐ณ๐ฌ Nigeria ยท ๐ฟ๐ฆ South Africa ยท ๐ฐ๐ช Kenya ยท ๐ช๐ฌ Egypt
๐บ๐ธ US (Federal + CA, CO, TX, VA, NY) ยท ๐จ๐ฆ Canada ยท ๐ง๐ท Brazil ยท ๐ฒ๐ฝ Mexico ยท ๐ฆ๐ท Argentina ยท ๐จ๐ด Colombia ยท ๐ต๐ช Peru
The agent is trained to map product features to strict international frameworks (applied automatically in Smart and Full Audit modes):
| Category | Standard | What the AI Does / Maps to in PRD |
|---|---|---|
| ๐ Security | ISO/IEC 27001 | Enforces Annex A controls (RBAC, cryptography, MFA, logging). |
| ๐ก๏ธ Privacy | ISO/IEC 27701 | Adds PII controller/processor obligations and data minimization. |
| ๐ค AI Risk | ISO/IEC 42001 | Defines an AI Impact Assessment, human oversight, and bias testing. |
| ๐ข Enterprise | SOC 2 Type II | Maps Trust Service Criteria (Security, Availability, Privacy). |
| โฟ Access | WCAG 2.2 AA | Adds perceivable/operable ACs for frontend features. |
| ๐๏ธ Legal | EAA / ADA | Checks European Accessibility Act & Americans with Disabilities Act. |
๐ก Want to see it in action? Look at examples/sample-prd-output.md for a complete compliance PRD output.
| Your Prompt | Mode Detected | What Happens |
|---|---|---|
| "Write a quick PRD for login feature" | ๐ Standard | Clean PRD, no compliance scanning |
| "Viแบฟt PRD cho app thanh toรกn tแบกi Viแปt Nam" | ๐ก๏ธ Smart | Auto-detect VN โ PDPD, Decree 53 |
| "Write a PRD for user tracking in France" | ๐ก๏ธ Smart | Auto-detect EU โ GDPR, ePrivacy |
| "Full compliance PRD for a telehealth app in California" | ๐ Full Audit | CCPA, HIPAA, FDA SaMD, ISO, WCAG |
| "Build a payment gateway for Singapore โ full audit" | ๐ Full Audit | PDPA, MAS TRM, PCI-DSS, ISO 27001 |
- โ Zero executable code โ Markdown-only skills
- โ Zero runtime dependencies โ No supply-chain risk
- โ No network calls โ No external connections
- โ No data collection โ Stateless operations
- โ CI/CD audited โ GitHub Actions security pipeline
See SECURITY.md for full policy.
See CHANGELOG.md for detailed version history.
| Version | Date | Highlights |
|---|---|---|
| v2.2.0 | 2026-03-06 | Compliance Depth selector (Standard/Smart/Full), ISO 27001/27701/42001, SOC 2, Accessibility, Disclaimer |
| v2.1.0 | 2026-03-06 | Multi-skill architecture, cross-linking, AI tool usage guides |
| v2.0.0 | 2026-03-05 | 35+ jurisdictions, security audit infrastructure |
| v1.0.0 | 2026-03-05 | Initial release (VN, EU, US, CN) |
We welcome contributions! Especially:
- ๐ New country regulations
- ๐ Regulation updates
- ๐ Citation corrections
- ๐ PRD template improvements
See SECURITY.md for security-related contribution guidelines.
MIT License โ see LICENSE for details.
โ ๏ธ Disclaimer: This suite provides compliance guidance, not legal advice. Always consult qualified legal counsel for final compliance decisions.
Built with โค๏ธ by the SafeAI-Global Team ยท v2.2.0 ยท March 2026