Stats
Actions
Tags
Implement compliance requirements (SOC2, GDPR, HIPAA). Design architecture for regulations. Map technical controls to compliance requirements. Use when building regulated systems.
How this skill is triggered — by the user, by Claude, or both
Slash command
/architecture-governance:compliance-frameworkThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Design systems that meet regulatory requirements and establish continuous compliance monitoring.
Design systems that meet regulatory requirements and establish continuous compliance monitoring.
You are implementing compliance for regulated systems. Map regulations to technical controls. Design for audit readiness. Read requirements, existing controls, certification timelines.
Based on compliance frameworks and regulatory standards:
Identify Applicable Standards: Which regulations apply? GDPR (EU users)? HIPAA (health data)? SOC2 (enterprise customers)? PCI DSS (payment processing)?
Map Controls to Architecture: For each regulation, what technical controls needed? GDPR: encryption at rest/transit, audit logs, consent tracking. HIPAA: role-based access, encrypted backups, breach detection.
Design for Audit: Audit logs must be immutable, encrypted, sent to separate system. Log all data access, configuration changes, admin actions. Retention per regulation (GDPR: 3 years minimum).
Build Operational Processes: Change management: approve all changes, test in staging, audit trail. Incident response: detect, contain, notify (GDPR: 72 hours). Annual training on compliance.
Plan for Verification: Audit readiness: document controls, gather evidence. Penetration testing annually. Vulnerability scanning continuous. Third-party assessments (SOC2, HIPAA).
npx claudepluginhub sethdford/claude-skills --plugin architect-governancePerforms compliance audits for GDPR, HIPAA, SOC2, PCI-DSS and provides implementation guidance. Includes gap analysis, control checklists, and audit trail generation.
Audits codebases against SOC2, HIPAA, GDPR controls: scans data stores, traces user data flows, and generates gap analysis reports with remediation plans.
Translates regulations like HIPAA, FERPA, SOC 2, PCI, GDPR into concrete technical requirements for tech stacks in regulated industries like healthcare, fintech, edtech.