Skip to main content

Regulations Catalogue

The Regulations Catalogue is a curated reference set of regulations and frameworks, tagged by geography and industry, that you can import into the compliance scanner. Instead of writing each regulation's assessment scope by hand, browse the catalogue, pick the ones that apply to your organisation and import them in one step. Australian regimes (for example the Privacy Act and APPs, SOCI, APRA CPS 234 and CPS 230, and the Essential Eight) are well represented alongside EU, UK, US, New Zealand and global frameworks.

Opening the page​

Click the user icon in the top-right corner of the app, expand Reference Catalogues, then click Regulations Catalogue. The page is admin-only: it requires the admin.metamodel permission, the same permission needed to manage regulations under Administration → Metamodel.

Filtering by geography and industry​

Every entry carries one or more region tags (for example Australia, an Australian state, New Zealand, the EU, the UK, the US or Global) and one or more industry tags (for example Financial Services, Healthcare, Government, Critical Infrastructure or Cross-Industry).

Use Filter by region and Filter by industry to narrow the list. Selecting several values in one filter shows entries that match any of them. Entries tagged Global or Cross-Industry are always included, because they apply everywhere. The search box matches the name, summary, category and assessment scope.

Click Show assessment scope on an entry to read the text the AI scanner will use for that regulation.

Importing regulations​

Tick the checkbox on each entry you want, then click the sticky Import button at the bottom of the page. On confirmation Canopy:

  • Creates a custom regulation (not built-in) with the entry's name, assessment scope, regions and industries. It is enabled by default.
  • Links instead of duplicating when a regulation with the same key already exists (for example one you created by hand). The existing label, scope and enabled state are kept, and empty tags are filled in.
  • Skips entries that are already imported. Running the same import again is safe.

After importing​

Imported regulations appear under Administration → Metamodel → Regulations, where you can edit the scope or tags, disable or delete them. They also appear in the regulation picker of the GRC → Compliance scan. That picker has its own region and industry filters; Select shown only limits the next scan to the filtered subset.

Tagging your own regulations​

Custom regulations can be tagged too: edit a regulation and choose its Regions and Industries. Leave them empty for no restriction (the regulation is then treated as Global / Cross-Industry). The Regulations admin list offers the same filters.

Important notes​

  • An entry's assessment scope is guidance for the AI scanner, not legal advice. Have your compliance or legal team review the scope and the scan results.
  • The catalogue is bundled with Canopy, so it works offline. A revised catalogue arrives with a Canopy upgrade.