How it works

From the official text to an answer you can check.

A general chatbot is no lawyer: it sounds sure of itself, yet sometimes invents an article number. Quonai first looks up the real provisions and has the language model answer from them. You get those provisions with the answer.

Step by step

What happens with every question

You see every call back in the request log on developers.quonai.com.

  1. 1

    The official text

    We take laws and regulations from the official source, such as wetten.overheid.nl and EUR-Lex, and record every provision on its own: a code, a title and the text, per article and paragraph. Standards we record per control.

    What you get

    A provision you can cite, such as NIS2.ChIV.23.4 or WetOB1968.art.9.lid.1.

  2. 2

    Your choice

    For each application you choose which laws and standards count. Quonai searches only those, and every source in the answer comes from them.

    What you get

    Your own selection of laws and standards for each application.

  3. 3

    Finding

    Quonai searches on words and on meaning at the same time, and lets a language model put the best provisions on top.

    What you get

    The provisions themselves, with a relevance score, through POST /v1/search.

  4. 4

    Answering

    The language model writes the answer from the provisions it was given, and the answer names them: code, title and the start of their text. Every source is a provision that really exists, never an invented article.

    What you get

    An answer with its provisions, as a stream, in one response or by polling.

  5. 5

    You check

    Quonai does not tell you that you are compliant. It shows what the rules ask and where they say it. The judgement stays with you.

    What you get

    The provision beside the answer, so a person can check it.

Commitments

What you can count on

A source with every answer

An answer names the provisions it rests on, so a person can check it.

Open models in the Netherlands

By default the models run on our own hardware in the Netherlands. If a client is set to a hosted model from Anthropic, OpenAI or Google, the question goes there.

The engine runs in the EU

The engine and its database run in a data centre in Europe. You keep the conversation: the engine stores no chat history. We log questions for quality and troubleshooting.

A fixed engine version

The engine's behaviour has a version, now 2026.09. Pinned per client or request, a new version only applies once you switch.

Comparison

How Quonai compares

QuonaiGeneral language modelBuild it yourself with AILegal database
An answer with its source, down to the article and paragraphYesNoPartlyPartly
Laws, standards and your own frameworks in one APIYesNoPartlyNo
Open models on own hardware in EuropeYesNoPartlyNo
Working in your product within an afternoonYesYesNoNo

A comparison of categories, not of products. Assessed in September 2026.

Live demo

Ask Quonai yourself

Pick an example question or type your own. You see the answer and the provisions it rests on.

Quonai engine
ExamplePOST /v1/chat
Question

How soon must a significant incident be reported under NIS2?

Without undue delay and in any event within 24 hours of becoming aware of the incident, the entity sends an early warning to the CSIRT or, where applicable, the competent authority. (Provision 1) The incident notification follows without undue delay and in any event within 72 hours. (Provision 1) A final report is due no later than one month after that notification. (Provision 1)

Provisions 1

  1. NIS2 · art. 23(4)NIS2.ChIV.23.4

    Reporting obligations, paragraph 4

    Member States shall ensure that, for the purpose of notification under paragraph 1, the entities concerned submit to the CSIRT or, where applicable, the competent authority: (a) without undue delay and in any event within 24 hours of becoming aware of the significant incident, an early warning, which, where applicable, shall indicate whether the significant incident is suspected of being caused by unlawful or malicious acts or could have a cross-border impact; (b) without undue delay and in any event within 72 hours of becoming aware of the significant incident, an incident notification, … (d) a final report not later than one month after the submission of the incident notification under point (b), …

    Directive (EU) 2022/2555, EUR-Lex

Example questions

Example answers. The provisions are the text in the corpus, checked against the official source on 2 October 2026.

See it with your own question

Send us your hardest question about rules. In half an hour you see the answer, with the provision attached.