Cyber, AI & finance rules — in one place
Know exactly what
the rules ask of you.
In minutes, not days.
Quonai has read the rulebooks for cyber, AI and finance — line by line. Ask a question in plain language and get the exact passages that apply, checked against your own policies and kept up to date as the rules change. No hallucinations, no guesswork: every answer comes straight from the official text — never invented, always 100% verifiable — and tells you which date that version applies from.
- Answers down to the exact article
- Alerts only for what applies to you
- Always sourced, dated, never guessed
quonai · ask anything
Deadlines differ per regulator. NIS2 wants a first warning within 24 hours and a full report within 72. DORA also uses 72 hours for major IT incidents. Under GDPR the 72-hour clock starts the moment you become aware of the breach.
- 0.94
NIS2 · 23(4)
Significant incident — initial notification within 72 hours of awareness
- 0.91
DORA · 19(4)
Major ICT incident — final report within 30 days of detection
- 0.88
GDPR · 33(1)
Personal data breach — notify supervisory authority within 72h
Update · 12 min ago
NIS2 rule on suppliers updated
Touches 4 of your own policy documents
Days → minutes
Time to answer a regulatory question
Realtime
24/7 Regulatory changes tracked continuously
100% sourced
Every answer points to the real text
1 place
Cyber, AI and finance rules together
How it works
Three steps. No manual reading required.
You don't need to be technical, and you don't need to know where a rule lives. Quonai has already read the rulebooks so your team doesn't have to.
Ask your question
Type it the way you would ask a colleague. Quonai finds the exact passages in the law that answer it — across all the rulebooks that apply to you.
Check your own documents
Upload a policy. Quonai shows, section by section, which obligations it covers, where the gaps are, and hands you a client-ready report.
Get told when it changes
When a rule is updated, you hear about it — with the old and new wording side by side and the documents of yours it affects.
Built for teams who have to be right about the rules — and fast.
Why Quonai
Stay ahead of what's coming next.
The rules keep moving: NIS2 is being enforced, DORA is tightening, the EU AI Act is phasing in, MiCA is reshaping finance and CSRD is widening reporting. Nobody should have to read hundreds of pages of PDF to find out what that means for them.
Without Quonai
Always catching up — you hear about a change once the deadline is already set.
- Newsletters that say something changed, but not what or where
- Spreadsheets that are out of date within a quarter
- Chatbots that invent article numbers you then have to verify
- Every colleague re-doing the same search from scratch
- Text that has quietly been superseded — with nothing telling you so
With Quonai
Always ahead — the rules, your documents and every update in one place.
- New and changed rules added continuously, 24/7
- Alerts filtered to your sector, country and documents only
- Exactly what changed, when it starts applying, and what it affects
- Answers built only from real text — with the source one click away
- Every passage dated, so you always know which version you are reading
Ask a question
Ask in plain words. Get the passages that apply.
No legal search syntax, no keyword tricks. Ask what you want to know and Quonai shows the relevant passages from every rulebook that applies to you — sorted by relevance, with a short summary on top and the official text one click away.
- Best matches first, so you start with what actually matters
- A short plain-language summary, with every claim linked to its source
- Narrow it down by country, sector, rulebook or how strict the duty is
- Exemptions, definitions and powers too — not just the duties — with who each one applies to
- Ask the same question on any past date: every version of every provision is kept
quonai · best matches
- NIS2 · Art 21(2)(a)0.96
Risk assessment and security policy requirements
Essential - DORA · Art 60.92
A documented IT risk framework, reviewed every year
Mandatory - ISO 27001 · A.5.70.87
Collecting and reviewing threat information
Required - NIST CSF · ID.RA-10.81
Known weaknesses identified and written down
Conditional
Check your documents
Upload a policy. See where you stand.
Quonai reads your document section by section, works out which obligations each part is meant to cover, and links them to the rules that apply — so gaps and overlaps are visible at a glance.
- Upload Word, PDF or text — your own headings are used as the structure
- Every section linked to the rules it covers, with a confidence level
- Download a polished PDF report you can send to a client as-is
quonai · document check
§ 4. Spotting and grading incidents
- NIS2 · Art 21(2)(b)Mandatory
- DORA · Art 17Essential
- ISO 27001 · A.5.24Required
§ 5. Reporting deadlines
- NIS2 · Art 23(4)Essential
- GDPR · Art 33(1)Mandatory
Stay up to date
Hear about changes before they cost you.
Quonai takes in the latest updates, new guidance and national implementations 24/7, as they are published. You see what changed in plain terms, from when it applies, and which of your own documents need attention.
- Old and new wording side by side, with the date it starts applying
- A clear list of your documents affected by each change
- Follow only the countries, sectors and rulebooks you care about
quonai · your updates
- DORA · RTS 17.2+ Added
New guidance on how far security testing has to go. Applies from 17 Jan 2027.
Touches 2 of your documents
- NIS2 · Art 21(2)(d)~ Amended
Supplier security duty widened to include open-source components you rely on.
Touches 4 of your documents
- EU AI Act · Art 9→ Incoming
Risk rules for high-risk AI systems start applying on 2 Aug 2026.
Nothing of yours linked yet
Connect your AI
Your AI, connected via MCP.
With the Quonai MCP server, your developers connect tools like Claude Code to Quonai in one click — no manuals, no custom plumbing. Because Quonai speaks MCP natively, their AI can set up and manage the integration itself.
- One click to connect — you approve exactly what the AI may do
- Set up and manage your Quonai integration by simply asking
- Permissions follow your own account — disconnect any time in Settings
- MCP is the open standard that lets an AI assistant consult outside sources — with your permission, and always naming the source
- No new portal, no extra login, nothing to copy over by hand
quonai · connect an app
Connect “Claude Code” to Quonai?
Acts as you · quonai.com
It will be able to
- Connect via MCP
- Read projects
- Manage projects
- Read team
- Manage API clients
- Read usage & logs
Capped by your own permissions. A permission removed later applies to this connection immediately. Disconnect any time under Settings → MCP.
What we cover
Cyber today. Whatever comes next.
Quonai isn't built around one rulebook. The same approach that covers NIS2 and DORA works just as well for the EU AI Act, MiCA, the Cyber Resilience Act and CSRD. As the library grows, so does the range of questions your team can answer with confidence.
Cyber & data
- NIS2EU · in force
- DORAEU · in force
- GDPREU · in force
- EU CRAEU · phasing
- ISO 27001Standard
- NIST CSFUS · standard
AI regulation
- EU AI ActEU · phasing
- ISO/IEC 42001Standard
- NIST AI RMFUS · standard
- Council of Europe AITreaty
- UK AI frameworkUK · principles
Financial & markets
- MiCAEU
- MiFID II / MiFIREU
- PSD3 / PSREU
- EMIR RefitEU
- Basel frameworkInternational
Product & ESG
- CSRD / ESRSEU
- CSDDDEU
- Product Liability DirectiveEU
- GPSREU
- Battery RegulationEU
Missing a rulebook you need? Request coverage
One library. Every rule, every country, every update — always traceable to the source.
Precise
Every single rule is stored separately, so answers point to one passage instead of a whole document — taken from the official texts on wetten.overheid.nl and EUR-Lex.
Fast
Answers from every rulebook in scope in under two seconds, with sources attached.
Connected
Follow an obligation from the law to your policy, to the person who owns it, to the proof.
Client-ready
Professional PDF reports you can put in front of a client without rewriting them first.
In their words
What our users tell us.
“The first tool that points me straight at the right passage, in the right country's version, instead of a vague summary I still have to check.”
“What used to take a colleague two days now takes a morning — and the report goes to the client as it is.”
Who it's for
Built for the people doing the work.
If your time is billable, or you are the one who has to be sure, Quonai takes the digging off your plate. Quonai does not advise: you get the provision, the date and the context — the judgement, and the professional responsibility that comes with it, stay with you.
Spend your time advising, not searching.
Book a short demo and we'll run it on your own rules, your own documents and your own updates. No preparation needed.