Is this a serious incident, and what has to be reported
Methodology: map · optional AI · human review
SeriousKit decides whether a described event is a reportable serious incident under Article 73, states the notification path and timing, and drafts the report skeleton. Decision-support only — not legal advice.
1. What the engine owns
Deterministic lines with cited articles, conditional triggers, and a provider demand checklist. Demo is labelled Rule-based — never silent mock.
2. What optional AI may do
Polish wording when a key is configured. Upstream failure returns 502. No invented legal conclusions or conformity claims.
3. What you must do
- Verify against Regulation (EU) 2024/1689 primary text.
- Keep humans accountable for oversight assignments and notices.
- Track the Annex III timeline against the consolidated text before you rely on a date.
4. What we deliberately do not do
- Broad TPRM / CVE monitoring (that dilutes the Act-focused moat).
- Replace VendorVet vendor screening — use VendorVet before you buy.
- Legal advice, CE marking, or the official EU Compliance Checker.