Outlex connects legal changes to company context: source, impact, owner, and next action.
Regulatory radarDRE + EUR-Lex + DGSI
Three sources. One product.
Legislation, European proposals, and Portuguese court decisions enter the same operational workflow.
DRE.pt · Daily
EUR-Lex · Weekly
DGSI · Continuous
DRE.pt
Portuguese legislation
Daily monitoring of the Portuguese Official Gazette.
EUR-Lex
EU regulatory proposals
EUR-Lex CELLAR queries for European legislative and regulatory proposals.
DGSI
Portuguese court decisions
13 Portuguese court databases indexed.
Audit trail
Every obligation needs a source, owner, and action.
The goal is to show what changed, why it matters to the company, and which decision needs to be made.
01
Daily Portuguese legislation monitoring.
02
Weekly EU proposal scanning.
03
Portuguese court decisions indexed continuously.
04
AI-generated bilingual (PT/EN) briefings from the monitored sources.
Founder Dilemma
"We are deploying an LLM feature that evaluates candidate resumes. Does GDPR or the EU AI Act require a formal DPIA?"
SOURCE:GDPR Art. 35 & EU AI Act (2024/1689) Annex III
Mandatory Regulatory Law · EU & Portugal
Yes, a DPIA is legally mandatory. Under GDPR Article 35(3)(a), automated processing evaluating personal aspects requires a DPIA. Furthermore, under Annex III Section 4 of the EU AI Act, AI systems used for recruitment and CV screening are classified as High-Risk AI Systems, requiring technical documentation, bias monitoring, and human oversight logs.
Recommended Operational Action:Complete the Outlex 8-point DPIA template and establish an auditable human-in-the-loop review log before production rollout.
The Empathy Reframe
“Regulatory compliance is not about slowing down innovation. It is about shipping frontier AI features with audit-proof confidence.”
PRODUCT PROOF · AUDITVERIFIED AUDIT
// Compliance Register · AI System Classification
Internal classification of AI resume evaluation model is treated as an internal prototype exempt from documentation is classified as Annex III High-Risk System with completed DPIA.
✓ Article 30 Processing Record updated with model metadata
Regulatory Audit Trail · CNPD & EU AI Office● Verified in product
Natural scale product frame (380px–420px max). Zero full-width stretching.
Source to action
When the rules change, you see what to update and why.
Real Outlex screen · synthetic example data
What needs to change
The law it is based on
Legal & Statutory Strip
Statutory articles and standard agreements for this workflow.
Applicable articles, court precedents, and verified guardrails embedded into every document.
GC
General Counsel
GDPR
GDPR Article 30 Records
Automated processing records audit ready instantly.
CNPD / DPA ready
GDPR
LE
Legal Engineer
EU AI Act
EU AI Act Annex III
Classify high-risk systems under Annex III.
EU AI Act 2026
EU AI Act
OP
Operations
NIS2 Directive
NIS2 Cyber Incident Loop
Incident reporting protocols triggered within hours.
Directive adherence
NIS2 Directive
GC
General Counsel
Transfers
Standard Contractual Clauses
Cross-border transfer mechanisms verified with safeguards.
Adequacy shield
Transfers
GC
General Counsel
DPIA
DPIA Article 35 Assessment
Risk assessment matrices completed with rationale.
Proportionality
DPIA
LE
Legal Engineer
ePrivacy
Cookie Consent Telemetry
Zero tracking fired before explicit consent.
Privacy by design
ePrivacy
GC
General Counsel
GDPR
GDPR Article 30 Records
Automated processing records audit ready instantly.
CNPD / DPA ready
GDPR
LE
Legal Engineer
EU AI Act
EU AI Act Annex III
Classify high-risk systems under Annex III.
EU AI Act 2026
EU AI Act
OP
Operations
NIS2 Directive
NIS2 Cyber Incident Loop
Incident reporting protocols triggered within hours.
Directive adherence
NIS2 Directive
GC
General Counsel
Transfers
Standard Contractual Clauses
Cross-border transfer mechanisms verified with safeguards.
Adequacy shield
Transfers
GC
General Counsel
DPIA
DPIA Article 35 Assessment
Risk assessment matrices completed with rationale.
Proportionality
DPIA
LE
Legal Engineer
ePrivacy
Cookie Consent Telemetry
Zero tracking fired before explicit consent.
Privacy by design
ePrivacy
Operating note
Law and court practice belong in the same map.
Lexi knows what Portuguese courts decided last month — not just what the law says.
