A simulation plan is an account’s set of report limits and features. Free includes three simulations per month. Compare the paid plans below for higher monthly simulation allowances.
$29.00/month · $290.00/year
$1.16 per included simulation if you use all 25 each month. Professional advice is separate.
Before you pay, preview a sample report and read “Can I cancel a paid plan?”
$99.00/month · $990.00/year
Before you pay, preview a sample report and read “Can I cancel a paid plan?”
A subscription buys a monthly allowance for one account, not seats for a whole team. Compare the allowance with the number of reviews you need. First-pass reports do not replace professional legal or consulting advice.
Scroll the table sideways to see all three plans.
| Account allowance | Free | Pro | Enterprise |
|---|---|---|---|
| Reviews per month | 3 | 25 | Unlimited |
| Use case | First AI-use-case review | Recurring compliance reviews | High-volume AI-use-case reviews |
| AI-generated risk and policy report | Included | Included | Included |
| Saved report history | Included | Included | Included |
| Report comparison | Included | Included | Included |
| PDF export | Included | Included | Included |
| Draft saving | Included | Included | Included |
History, comparison, PDF export, and drafts require sign-in. Anonymous visitors can try three free simulations. Available subscription prices and checkout options come from the current catalog above.
A plan fee buys a monthly simulation allowance, not a per-seat meter. Each subscribing account has its own allowance; a Pro account includes 25 simulations per month for recurring reviews.
The free tier requires no credit card. Paid checkout requires sign-in. Read how simulation data is handled.
Frequently asked questions
The analysis can discuss the EU AI Act, GDPR, and U.S. rules relevant to the organization type, such as HIPAA, GLBA, FERPA, FCRA, ECOA, the Fair Housing Act, and OSHA. The rules named in a report depend on the use case and location. This is a first-pass review, not a compliance certification.
You can select a country and, where relevant, a state or region. The simulator is designed for the United States, EU countries, the United Kingdom, Canada, Australia, and several other countries. The depth of analysis varies by jurisdiction.
Yes. Report generation sends the following information to OpenAI's gpt-4o-mini through the configured Replit AI Integrations connection:
The app stores inputs and reports, including anonymous runs linked to a browser session; designated administrators can review stored simulations.
The app's API request logger now records only method, route template, status, and duration, not request or response bodies. Historical server logs may still contain inputs, reports, or PDF data from earlier versions and have not been deleted by this change.
Provider and platform retention remain unconfirmed. Do not enter confidential, personal, or regulated information. See the Data handling page for details.
OpenAI's published API policy says data is not used for training unless sharing is explicitly enabled. Its default abuse-monitoring logs may contain prompts and responses for up to 30 days, with exceptions allowing longer retention. The owner has not confirmed training/data-sharing settings, special retention controls, or Replit proxy retention terms for this managed connection. We cannot promise no training or zero retention for this product. See the Data handling page for sources and limits.
Simulation inputs, reports, and saved PDFs have no automatic expiry, including anonymous simulations. Signing out or closing the browser does not delete them. There is no self-service report or account deletion control. Draft deletion removes only that draft from the app database, not reports generated from it. Log and backup retention periods are unconfirmed, and no deletion deadline is promised.
Email denise@welchconsulting.ai for privacy questions or requests. The owner has confirmed this inbox is monitored for privacy requests. No response-time or deletion completion guarantee is published. Do not include confidential information, sensitive personal data, or a full scenario in your email. The Data handling and Contact pages provide the email link.
A report shows a suggested risk classification and a brief explanation of why that tier was assigned. It can also include a use-case summary, regulatory themes, policy impacts, named risks and possible mitigations, a compliance checklist, questions for legal counsel, resource links, and a DPIA assessment. These sections give you findings and references to check, rather than only a risk label. The model's internal reasoning is not shown, and the findings still need human verification. The output is general information, not legal advice or compliance approval.
Paid plans can be managed from the billing portal linked on the pricing page for signed-in customers. Review the plan and billing terms shown during checkout before subscribing.
