Compliance Management
BC-130
Level 1
Cross-Industry
130 providers
283 API surfaces
65 rated strong or better
Ensuring adherence to laws, regulations, and internal policies.
Compliance Management (BC-130) is a level-1 business capability in the Cross-Industry model. The catalog holds 283 API surface(s) from 130 provider(s) that can perform some part of it, 65 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.
Where this capability definition comes from.
This capability is part of a published business-architecture model that API Evangelist
did not author. It is redistributed here under
CC-BY-4.0.
Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented.
Source repository · NOTICE and third-party framework attributions
Sub-capabilities
Regulatory Compliance Management BC-130.10
Compliance with sector-specific regulations.
49 providers,
103 API surfaces
Policy Management BC-130.20
Policy lifecycle - drafting, approval, attestation, retirement.
5 providers,
8 API surfaces
Ethics & Conduct Management BC-130.30
Code of conduct, ethics, whistle-blowing programmes.
no catalog coverage
Anti-Bribery & Corruption Management BC-130.40
ABC programmes, third-party due diligence, gifts and hospitality.
1 provider,
1 API surface
Privacy & Data Protection Management BC-130.50
GDPR/equivalent compliance, data subject rights, privacy by design.
79 providers,
159 API surfaces
Providers that reach this capability
Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.
Exemplar 34 Complete, well-documented, and agent-ready
AdaBigCommerceOptimizelyDidomiAmigoAdobe SuiteLinkedInHive CivilizationListrakbeehiivGetResponseGoogle AnalyticsKlaviyoAttentiveOneTrustAdyenAdobe CampaignKhorosUserGemsFeedOracle TechnologiesAvalaraEnturAppsFlyerDrataMatomoMoEngageStrivacityLive Direct MarketingPalo Alto NetworksanecdotesFireblocksiDenfyQualifiedNexGen Cloud
Strong 31 Solid coverage with minor gaps
Common RoomExtoleMOLOCOMolTrustKoalaComplyAdvantageDow JonesGongFenergoMicrosoft GraphSalesloftGenesysZohoLeafLinkZaiusPostscriptLiveRampAmplitudeSourcepointAtomadic TechCouncil of AIZenLedgerReachdeskBlazing Bullet Private LimitedCalifornia Privacy Protection AgencyPimlocSecureframeThe Trade DeskCipherOwlCredo AIObserve.AI
Developing 51 Usable, with meaningful gaps to close
Orion Advisor SolutionsMixpanelObservePointOsanoClerk.ioYouSignEverbridgeJusttBigIDLaterMavrckDotfileSocotraMINETrustBoost PII SanitizerSafelloQualioAmerican Express Global Business TravelDiligentHifiBeazleyPendo.ioTRM LabsWegalvanizeVTEXElastic PathSigma360AghanimSecureAuth (incl. Cloudentity)Google Cloud Assured WorkloadsSERTICADixaSAP Commerce CloudPrewaveTranscendSEONDinariPersonaSiteJabberWishDueUniversity of AmsterdamSalvLiveIntentHarbor ComplianceTikTokOnfidoCalendlyBitrix24American Financial GroupLSEG
Thin 13 Limited public surface area
Emerging 1 Early or largely undocumented
Workflows that realise this capability
Arazzo workflows whose own sourceDescriptions call APIs that carry this
capability. The link is derived, not asserted: each workflow declares
x-realizes-capability-ids with the spec and confidence behind it.
- Amplitude DSAR Request and Poll
— amplitude
· Privacy & Data Protection Management
BC-130.50 - CipherOwl SRR Investigation Funnel
— cipherowl
· Regulatory Compliance Management
BC-130.10 - Didomi Create and Verify a Privacy Center
— didomi
· Privacy & Data Protection Management
BC-130.50 - Didomi Deploy a Consent Notice
— didomi
· Privacy & Data Protection Management
BC-130.50 - Didomi Group Notices Under a Template
— didomi
· Privacy & Data Protection Management
BC-130.50 - Didomi Record a Consent Event and Confirm Status
— didomi
· Privacy & Data Protection Management
BC-130.50 - Didomi Submit Notice Text Content for Approval
— didomi
· Privacy & Data Protection Management
BC-130.50 - Didomi Upload and Verify a Consent Proof
— didomi
· Privacy & Data Protection Management
BC-130.50 - Onboard a customer and place a dShare order
— dinari
· Regulatory Compliance Management
BC-130.10 - Due — Onboard a customer account with KYC/KYB
— due
· Regulatory Compliance Management
BC-130.10 - Mixpanel GDPR Data Deletion Flow
— mixpanel
· Privacy & Data Protection Management
BC-130.50 - Mixpanel GDPR Data Retrieval Flow
— mixpanel
· Privacy & Data Protection Management
BC-130.50 - Submit an EUDR Due Diligence Statement
— prewave
· Regulatory Compliance Management
BC-130.10 - Safello — buy cryptocurrency
— safello
· Regulatory Compliance Management
BC-130.10
This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature.
This page shows which providers and tags reach Compliance Management. The underlying
tag → capability edges — each with the quoted fragment of the provider's own
OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate
it passed — are available through the API, along with company-level capability maps.
Only edges at confidence ≥ 0.7 with evidence found verbatim in
the source contract are published at all.