Open-source regulatory compliance monitoring for SMBs and startups.
LexShield monitors changes across major regulatory frameworks, including GDPR, the EU AI Act, and others, and delivers plain-language summaries and alerts so small teams can stay ahead of compliance requirements without a dedicated legal department.
It runs entirely on a free API chain (Groq, Gemini, OpenRouter) with no paid subscriptions and no fixed monthly cost.
Regulatory frameworks change faster than most small teams can track. GDPR enforcement is rising. The EU AI Act is rolling out in phases. New frameworks like NIS2 and DORA are already in effect. Most compliance tooling is priced for enterprises.
LexShield is built for teams that cannot afford a compliance consultant or a $500/month SaaS subscription but still need to know when something changes that affects them.
- Monitors official regulatory sources for GDPR, EU AI Act, NIS2, DORA, and CCPA.
- Summarizes updates in plain language using a free LLM chain.
- Categorizes changes by severity and the business functions they affect.
- Visualizes risk density and regulatory impacts via an interactive dashboard.
- Sends digest alerts via email or webhook.
- Runs on a zero-cost stack with no always-on server required (optional GitHub Actions deployment).
| Framework | Region | Status |
|---|---|---|
| GDPR | EU / EEA | Stable |
| EU AI Act | EU | Active (phased rollout) |
| NIS2 Directive | EU | Stable |
| DORA | EU (Financial) | Stable |
| CCPA / CPRA | California, US | Stable |
| UK GDPR | United Kingdom | Stable |
LexShield uses a modular pipeline integrated into a full-stack application:
Regulatory Sources
|
v
Fetcher Layer (Backend) # Pulls from official EUR-Lex, ICO, FTC, and gov feeds
|
v
Change Detector # Diffs against last known state, flags new content
|
v
LLM Summarizer # Free chain: Groq -> Gemini -> OpenRouter (fallback)
|
v
Classifier # Tags severity, affected business function, deadline
|
v
Interactive Dashboard # Next.js Frontend for visualization and management
|
v
Alert Dispatcher # Email digest or webhook
| Component | Tool |
|---|---|
| Frontend | Next.js 15+, TailwindCSS, Framer Motion |
| Backend | FastAPI (Python 3.11+) |
| LLM (Primary) | Groq API (free tier) |
| LLM (Fallback 1) | Google Gemini Flash (free tier) |
| LLM (Fallback 2) | OpenRouter (free models) |
| Database | SQLite (Metadata) & ChromaDB (Vector Store) |
| Scheduling | GitHub Actions (cron) or local cron |
Zero fixed monthly cost. All API tiers used are free with reasonable rate limits.
LexShield/
├── backend/ # FastAPI Backend
│ ├── app/
│ │ ├── main.py # Entry point
│ │ ├── services/ # Fetchers and LLM logic
│ │ ├── routers/ # API endpoints
│ │ └── models/ # DB schemas
│ └── requirements.txt
├── frontend/ # Next.js Frontend
│ ├── src/ # UI components and pages
│ └── package.json
├── scripts/ # Utility and population scripts
└── .github/
└── workflows/ # CI/CD and automation
git clone https://github.com/yourusername/LexShield.git
cd LexShieldcd backend
python -m venv .venv
# Windows: .venv\Scripts\activate | Linux/Mac: source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
# Edit .env with your free API keys (Groq, Gemini, OpenRouter)
uvicorn app.main:app --reloadcd ../frontend
npm install
cp .env.example .env.local
npm run devVisit http://localhost:3000 to access the dashboard.
- GDPR and EU AI Act monitoring
- Free LLM fallback chain (Groq -> Gemini)
- Interactive Global Risk Map
- Full-stack dashboard (Next.js + FastAPI)
- NIS2 and DORA monitoring
- CCPA / CPRA monitoring
- Slack and Teams webhook templates
- Business profile filtering
Contributions are welcome! See CONTRIBUTING.md for details.
LexShield runs entirely on your own infrastructure. The LLM APIs receive only regulatory document text for summarization, never your business data or configuration.
Apache License 2.0. See LICENSE for details.
LexShield provides informational summaries of publicly available regulatory content. It is not legal advice. For compliance decisions affecting your business, consult a qualified legal professional.
I lead operations at Concentrix, where I manage technical ecosystems for enterprise clients. My work bridges the gap between systemic theory and technical architecture, focusing on building high-performance applications and optimizing AI workflows.
Connect on LinkedIn or open an issue if you want to collaborate.