Open-source tools for EU compliance, built to be used in real products and checked against the official texts.
| Project | What it does | Law | Licence |
|---|---|---|---|
| Telltale | AI Act Article 50: disclosure notices and labels as web components, machine-readable marking of AI-generated images, disclosure log | Regulation (EU) 2024/1689, Art. 50 | Apache-2.0 |
| Cooloff | The EU withdrawal button for online shops: component, server handlers, acknowledgement of receipt, WooCommerce and Medusa plugins | Directive (EU) 2023/2673, Art. 11a CRD | Apache-2.0 |
| Groundwork | AI literacy for staff: open course (CC BY 4.0), offline course site, SCORM and xAPI export for any LMS, tamper-evident training records | Regulation (EU) 2024/1689, Art. 4 | AGPL-3.0 + commercial |
| Kerbcut | European Accessibility Act scanner (WCAG 2.1 / EN 301 549) with Annex V service information and accessibility statements in every EU language | Directive (EU) 2019/882 | AGPL-3.0 + commercial |
| Tocsin | Incident register for NIS2 reporting: 24 h / 72 h / one-month deadlines, significance thresholds, report content, encrypted local store | Directive (EU) 2022/2555, Art. 23; Implementing Regulation (EU) 2024/2690 | AGPL-3.0 + commercial |
| Evenkeel | Pay-gap indicators and the joint pay assessment test from a payroll export, computed locally (TypeScript, Python, offline app) | Directive (EU) 2023/970, Art. 9–10 | AGPL-3.0 + commercial |
| Brightline | Scanner for likely manipulative design (dark patterns), each finding mapped to the consumer-law or GDPR rule it may breach | UCPD, CRD, DSA Art. 25 | AGPL-3.0 + commercial |
| Rationale | SDK for submitting statements of reasons to the Commission's DSA Transparency Database: typed builder, validation mirroring the server rules, batch submission with retries, durable queue (TypeScript and Python) | Regulation (EU) 2022/2065, Art. 17 and 24(5) | Apache-2.0 |
| Roster | DORA register of information: builds and validates the templates and writes the EBA xBRL-CSV report package, offline (TypeScript, Python, CLI, Docker) | Regulation (EU) 2022/2554, Art. 28(3); Implementing Regulation (EU) 2024/2956 | AGPL-3.0 + commercial |
| Fixform | The European Repair Information Form in all 24 EU languages: validation, period of validity, document and e-mail rendering, web component, React and Vue, CLI, server handler | Directive (EU) 2024/1799, Art. 4 and Annex I | Apache-2.0 |
| Plotline | EUDR plot geolocation: validates and safely repairs GeoJSON, KML and CSV against the EU Information System rules, area, split, producer data for due-diligence statements (TypeScript, Python, CLI, offline page) | Regulation (EU) 2023/1115, Art. 9(1)(d) | AGPL-3.0 + commercial |
| Sourcebook | The public summary of training content for general-purpose AI models on the Commission's template: collectors for Hugging Face cards, dataset manifests and crawl logs, domain ranking, validation, document and model-card output (TypeScript, Python) | Regulation (EU) 2024/1689, Art. 53(1)(d) | AGPL-3.0 + commercial |
| Offramp | Switching between cloud and data processing services: request timelines and statutory periods, unfeasibility and extensions, switching-charge and contract checks, customer notices (CLI, local web UI, JSON Schemas) | Regulation (EU) 2023/2854, Chapter VI | AGPL-3.0 + commercial |
Every tool cites the article it implements and links the official text on EUR-Lex. None of them is legal advice.
Licences. Libraries meant to be embedded in your product are Apache-2.0. Applications and scanners are AGPL-3.0, with a commercial licence for organisations that cannot accept AGPL terms, plus integration, custom connectors and features, and support agreements. Contact info@afkzonagroup.lt.
Security. Report vulnerabilities privately through each repository's Security tab ("Report a vulnerability").
Maintained by MB AFKzona Group, Lithuania.