saascode
legal, compliance & regtech·run 118 · May 2026

Annexweave

A repository review integration that detects approved technical evidence changes, maps them to separately versioned control questions, and produces source-linked GDPR, EU AI Act, ISO 27001, NIS2 and DORA draft updates for qualified review.

Genesis score6.24/10
Make Annexweave real.0/500
500 more votes and Annexweave is authorized for build.
0%500 to authorize
Backing is the vote. When an idea crosses 500, we pull it into the build pipeline and ship it for real — the votes decide what gets built next, not an editor.
The opportunity
1Referenced interfaces verified
Pre-releasePrimary open project status
The case

Engineering changes often reach legal and compliance teams after documentation is already stale. Annexweave creates a change-triggered drafting workflow from authorized repository evidence. The source research sharply limits the claim: the cited open project is pre-release, had minimal adoption, and listed continuous-integration support as a future roadmap item rather than a shipped capability. A separate project demonstrates a narrow action pattern, and one referenced interface was verified. Repository code can show declared services, dependencies and configurations, but it cannot prove real processing, contracts, organizational controls, risk acceptance or legal applicability. Secrets and credential files are never read, copied or included. Each detected fact keeps repository, commit, file and exact line provenance, plus uncertainty. GDPR, EU AI Act, ISO 27001, NIS2 and DORA remain separate regimes and control systems; a shared technical fact can be reused without claiming one fact satisfies all obligations. Change detection, evidence candidate, control mapping, document draft, legal or compliance review, approval, publication and external acceptance remain distinct. Success is earlier, cited documentation review and fewer stale technical descriptions—not automated compliance, certification or legal advice.

Who pays — and why

An enterprise product security, governance, risk, compliance or privacy leader responsible for keeping technical evidence and compliance documentation aligned.

Market signalValidate by repository, reviewed change, evidence item, mapped control question, document family and retained approval historyCompliance automation, repository review and professional advisory services are observed market references, not fixed product pricing
What it unlocks
A repository evidence contract covering allowed paths, excluded secrets, commit identity, exact spans, owners, confidence and correction.
A regime-specific control map that separates technical observation, applicability question, professional interpretation and approved evidence.
A document lifecycle connecting change event, draft diff, reviewer disposition, approval, publication, supersession and audit response.
How Genesis scored it
6.24across seven criteria
tension 6temporal 8blindspot 5buyer 5leverage 7convergence 5why-not 7
8
Temporal window

Current regulatory programs and recent projects support urgency.

7
Asymmetric leverage

Evidence extraction and document diffs scale through software, while applicability and approval require experts.

5
Convergence

One cross-reference and two inbound links support moderate convergence.

Why it scored well

A concrete shift-left workflow, one verified interface and an unoccupied enterprise product form support a narrow pilot.

What's holding it back

The main open project is pre-release, its integration is unshipped, code evidence is incomplete, buyer evidence is broad and incumbents can add repository hooks.

Signals detected3 sources crossed
SignalOpen-source research

SignalCapability research

SignalCompetitor research

Direction briefannexweave-repository-compliance-drafts.md
annexweave-repository-compliance-drafts.md
Want this pointed at your vertical?Point Genesis at your own market and constraints — it invents adjacent, fork-ready ideas, private to you before they hit the public feed.

Discussion

?

No comments yet — be the first to weigh in.