Compliance Automation Python Packages

mcp-server-for-oscal

OSCAL tools for AI agents

opencomplai-core

Code-First AI Compliance. The open-source regulatory engine for the EU AI Act. Automate your risk assessments directly within your CI/CD pipeline.

opencomplai-cli

Code-First AI Compliance. The open-source regulatory engine for the EU AI Act. Automate your risk assessments directly within your CI/CD pipeline.

opencomplai-ai

Code-First AI Compliance. The open-source regulatory engine for the EU AI Act. Automate your risk assessments directly within your CI/CD pipeline.

opencomplai

Code-First AI Compliance. The open-source regulatory engine for the EU AI Act. Automate your risk assessments directly within your CI/CD pipeline.

gdpr-shift-left-mcp

GDPR Shift-Left Compliance MCP Server — Azure-focused GDPR compliance automation.

data-boar

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

building-beaver

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

burrowing-badger

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

capo-maestro

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

mimic-octopus

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

polyglot-pangolin

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

loaded-llama

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

picket-prairie-dog

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

scarfer

Source Code scan report file reporter

resolute-rikki

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

aigov

Static analysis + CI enforcement for AI/LLM risk in codebases

sweeping-squirrel

Forensic-grade, open-source PII & sensitive-data discovery — LGPD/GDPR/CCPA-aware. Scans databases, filesystems, APIs & shares; deterministic detection (regex + ML), evidence-ready Excel/heatmap reports. Local-first: your data never leaves. Data soup in, structured findings out.

aicertify

Compliance-as-code for AI systems: evaluate AI apps against EU AI Act, NIST AI RMF, and OPA/Rego policies.

agentpolicypack

Open-source, vendor-neutral policy-as-code toolkit for defining, testing, simulating, and enforcing governance rules across AI agents, models, tools, data, providers, and workflows.

fidesops

Privacy as Code for DSAR Orchestration: Privacy Request automation to fulfill GDPR, CCPA, and LGPD data subject requests.

csaf-check

Python API and CLI for CSAF 2.0 and VEX validation using Secvisogram's validator, with CI-friendly unavailable-validator handling.

squash-ai

🛡️ Automated EU AI Act compliance for AI/ML teams — Annex IV docs, SBOMs, policy checks, and signed audit records inside your CI/CD pipeline. August 2, 2026 enforcement deadline. ⏰

complyroll

Compiles STIG and SCAP output into schema-valid FedRAMP 20x vulnerability reports, with every response clock read from FedRAMP's published rules dataset