The crew
The translation layer between
regulation and engineering.
Landfall is a compliance-to-engineering tool for public bodies, banks and product teams: it reads regulation — the EU AI Act, the GDPR, child-safety law, NIST and ISO — and turns the obligations that apply to your product into engineering work you can ship and audit.
Why is regulation so hard to turn into engineering work?
Regulations like the EU AI Act, the GDPR or the UK Age Appropriate Design Code run to hundreds of pages. Engineering teams need to build products that comply with these rules — but there's no clean way to go from legal prose to engineering tickets. The result: spreadsheets, miscommunication, and audit trails held together with sticky notes.
What does Landfall do about it?
Landfall reads the regulation and structures it into machine-readable obligations. You describe your product context — who your users are, what data you collect, how your service works — and Landfall maps which obligations apply to you, with rationale for every decision. Those obligations become prioritised engineering work items with acceptance criteria and full traceability back to the source text.
The principle
Every interpretation is auditable. Every decision is traceable. Ambiguities are flagged for human review — never silently resolved. Landfall is the bridge between legal and product, not a replacement for either.
Where we work
Landfall started as a child-safety tool. Today it is an EU AI Act and DPIA pre-scan for public bodies and regulated industries, with the children's safety codes still first-class. It is five use cases, chosen when you create a project: an AI system pre-scan under the EU AI Act with the data protection impact assessment beside it, a privacy / DPIA screening, child online safety, accessibility, and a NIST security and privacy framework mapped onto the codebase. The choice decides which frameworks are pre-selected, which questions you are asked, and what the guidance says.
The pre-scan is the sharpest of these today: a public body or regulated deployer points Landfall at a repository, and gets back a computed risk tier with an article citation on every step of the rationale, the duties that follow — the Article 27 fundamental rights impact assessment, EU database registration under Article 49, the GDPR Article 35 DPIA — and a register-entry draft. Sector packs add what the sector itself owes on top: public sector and financial services among them.
Why “Landfall”?
In navigation, landfall is the moment a ship first sights land after a long voyage at sea. It's the point where uncertainty ends and solid ground begins. For teams building products in regulated markets, the regulatory landscape can feel like open water — vast, complex, and hard to navigate. Landfall is the tool that gets you to shore: from ambiguous legal text to concrete engineering work, with a clear path you can trace back to where you started.
Interested?
We are onboarding pilot teams now. Pilot partners get every feature, a DPA on request, and the option to self-host.