The compliance platform for lean teams.
Cob learns your business, evaluates it against 100+ US and European laws, builds tailored solutions, and keeps you compliant as things change.
Laws covered: GDPR CCPA EU AI Act PECR CIPA and 100+ more
You already have all we need.
Your website, investor materials or unstructured notes are enough to get started.
northsend.example.com
- pitch-deck.pdf
- business-notes.txt
- data-flows.png
We start by learning your business.
Cob analyzes what you handed over and builds a profile of your company. Who it sells to, what it handles, where it sells, what it does, and how big it is. Everything else rests on that profile.
northsend.example.com
Northsend is bookkeeping for small teams — invoices, expenses, and the year-end return without the spreadsheet. Start your free trial — all you need is an email address. Built in Denver, used by 12,000 small businesses in the US and the UK. Now serving Germany, Ireland and the Netherlands. Need help with a number? Ask our AI assistant — it knows your books as well as you do. Subscribe to our newsletter for product updates. We use cookies to improve your experience.
Northsend
Bookkeeping software for small teams, based in Denver, serving European markets
Who it sells to
- Consumers
What it handles
- Personal data
Where it sells
- US
- DE
- IE
- NL
What it does
- Tracking
How big it is
A short conversation completes the picture.
An AI compliance advisor fills the gaps, works through uncertainty, and answers your questions. Speak with it in your own terms.
Where does your customer data actually sit?
In the US — all of it’s on AWS in Oregon.
Your assistant handles financial data. Does it decide anything for a user, or just answer questions?
It only answers questions about their own books.
That distinction matters. Systems that make decisions about people fall under stricter rules.
Roughly what does the company turn over in a year?
Under two million euros.
We evaluate your business against 100+ laws.
Your profile becomes a set of facts. Our rule engine checks them against every law we review, document, and maintain.
Facts about your business
- Uses an AI chatbot Yes
- Tracks people's behaviour in the EEA Yes
- Uses non-essential cookies or trackers Yes
- Runs sales and discounts Yes
- Makes green claims Yes
- Annual turnover (EUR) up to 1,800,000 EUR
and 46 more
Cob’s legal database
- Switzerland — revised Federal Act on Data Protection (revFADP)
- Switzerland — TCA Art. 45c(b) Cookie Rules
- Switzerland — Unfair Competition Act (UWG/UCA) + PBV
- ePrivacy Directive (2002/58/EC)
- EU ADR consumer-information duties
- EU Consumer Rights Directive
- EU Geo-blocking Regulation
- EU General Product Safety Regulation
- EU Price Indication Directive
- EU Unfair Commercial Practices Directive
- EU AI Act (Reg. (EU) 2024/1689)
- EU Cyber Resilience Act (Reg. (EU) 2024/2847)
- EU Cyber Resilience Act — open-source stewards (Reg. (EU) 2024/2847 Art. 24)
- EU Data Act — cloud switching (Reg. (EU) 2023/2854)
- EU Digital Services Act (Reg. (EU) 2022/2065)
- European Accessibility Act (Dir. (EU) 2019/882)
- eIDAS 2 / EU Digital Identity Wallet (Reg. (EU) 2024/1183)
- EU NIS2 — digital entities (Dir. (EU) 2022/2555)
- EU P2B platform-fairness rules (Reg. (EU) 2019/1150)
- EU GDPR (Regulation (EU) 2016/679)
- UK PECR (Privacy and Electronic Communications Regulations 2003)
- UK DMCC Act 2024 (consumer provisions)
- UK GDPR (Retained Regulation (EU) 2016/679 as amended)
- UK Online Safety Act 2023 (Part 3)
- UK Online Safety Act 2023 — Part 5 (provider pornographic content)
- Switzerland — revised Federal Act on Data Protection (revFADP)
- Switzerland — TCA Art. 45c(b) Cookie Rules
- Switzerland — Unfair Competition Act (UWG/UCA) + PBV
- ePrivacy Directive (2002/58/EC)
- EU ADR consumer-information duties
- EU Consumer Rights Directive
- EU Geo-blocking Regulation
- EU General Product Safety Regulation
- EU Price Indication Directive
- EU Unfair Commercial Practices Directive
- EU AI Act (Reg. (EU) 2024/1689)
- EU Cyber Resilience Act (Reg. (EU) 2024/2847)
- EU Cyber Resilience Act — open-source stewards (Reg. (EU) 2024/2847 Art. 24)
- EU Data Act — cloud switching (Reg. (EU) 2023/2854)
- EU Digital Services Act (Reg. (EU) 2022/2065)
- European Accessibility Act (Dir. (EU) 2019/882)
- eIDAS 2 / EU Digital Identity Wallet (Reg. (EU) 2024/1183)
- EU NIS2 — digital entities (Dir. (EU) 2022/2555)
- EU P2B platform-fairness rules (Reg. (EU) 2019/1150)
- EU GDPR (Regulation (EU) 2016/679)
- UK PECR (Privacy and Electronic Communications Regulations 2003)
- UK DMCC Act 2024 (consumer provisions)
- UK GDPR (Retained Regulation (EU) 2016/679 as amended)
- UK Online Safety Act 2023 (Part 3)
- UK Online Safety Act 2023 — Part 5 (provider pornographic content)
From hundreds of laws to the ones that apply to yours.
Every law that applies comes with the exact provision, what it requires of your business, and the steps to comply.
Here are four that apply, and one that doesn't.
- Applies
EU GDPR (Regulation (EU) 2016/679)
GDPR Arts. 2-3
- Applies
EU ADR consumer-information duties
Dir. 2013/11/EU Arts. 2, 13 (CELEX 32013L0011)
- Applies
EU AI Act (Reg. (EU) 2024/1689)
AI Act (Reg. (EU) 2024/1689) Arts. 2-4
- Applies
Germany ePrivacy & national rules
TDDDG §25 (formerly TTDSG §25)
- Doesn’t apply
Switzerland — revised Federal Act on Data Protection (revFADP)
- Based in Switzerland No
- Tracks people's behaviour in Switzerland No
- Sells or offers services to people in Switzerland No
What your business needs to stay compliant — built, live, and maintained.
A consent banner configured for your obligations. Policies drafted for your business. A trust center that shows customers and partners where you stand. All kept up to date as the law or your business changes.
Privacy Policy
What we collect
Where it goes
Your rights
Transfers outside the EEA
Drafted by Cob
Trust center
Subprocessors
Data residency
How to make a request
Hosted by Cob
Questions
Who is Cob for?
Companies based in or serving customers in the US or Europe, with real compliance obligations and limited resources to manage them. Startups, growing teams, and companies entering new markets.
What laws does Cob cover?
Over 100 laws, including GDPR, CCPA, the EU AI Act, PECR, state privacy statutes, and accessibility rules. Coverage grows as the law does.
How does Cob know which laws apply?
Every law Cob covers is documented, maintained, and reviewed by hand. Each carries the conditions that trigger it, the obligations it creates, and the provision behind every answer. Our rule engine evaluates your business against it, one law at a time.
Does Cob use AI?
Yes. We use AI to build the picture of your business and help manage your compliance. It never makes legal determinations, and final decisions stay in your hands.
Why not just ask ChatGPT or Claude?
Foundation models are useful, but they hallucinate and don't know your business. Cob uses AI too. The difference is that every answer is grounded in your business profile and a body of law that doesn't change between questions.
Does Cob provide legal advice?
No. Cob is not a law firm and nothing on the platform constitutes legal advice. Cob is not responsible for any output it produces about your business, including determinations, documents, and recommendations. We recommend consulting with a lawyer for legal decisions.
See what applies to your business.