Extend Bolt

Compliance packs.

Name: Aeira
Brand: Sparcle

A pack that switches on a regulation's identifiers, rights, retention and evidence screens. Admin only, tier 2: it changes masking for everyone.

Turn one on.

Settings → Admin → Security & Compliance → Compliance Packs. Turning a pack on folds its identifiers into masking and lights up its dashboard, rights requests and evidence screens. Industry packs (healthcare, legal, defense, finance, logistics) are under Settings → Admin → Catalog Gallery.

Ship with Bolt: Australia Privacy Act, Brazil LGPD, Canada PIPEDA, Canada Quebec Law 25, China PIPL, EU GDPR, India DPDP Act 2023, Indonesia PDP Law, Japan APPI, Nigeria NDPA 2023, Saudi Arabia PDPL, Singapore PDPA, South Africa POPIA, South Korea PIPA, Switzerland revFADP, Thailand PDPA, Turkiye KVKK, UK GDPR and DPA 2018, US California CCPA, US Indiana CDPA, US Kentucky CDPA, US Rhode Island DTPPA.

The packs built into Bolt are signed by Sparcle, and a release build refuses one that was changed.

What is in a pack.

Part	What it does
`schema_version`, `id`, `title`	Identity.
`recognizers`	Identifiers to find and, with `governance: mask`, to mask. See Detectors.
`tables`, `entities`, `nl`	Lookup tables, cards for recognised things, and plain-language lookups.
`vertical`, `enabled_by_default`, `requires_systems`, `license`	Gallery group, whether it is on for everyone, and the systems that suggest it.
`regulation`	Turns a pack into a compliance pack: `jurisdiction`, `authority`, `residency`, `retention`, `rights` (with response days), `safeguards`, `dashboard` tiles and `evidence`.
`edm`	Exact records to match, read from a file on your own server.

From the EU GDPR pack, shortened

regulation:
  jurisdiction: EU
  authority: "the competent Data Protection Authority (DPA)"
  residency:
    requireInCountry: true
    label: "Data residency - EEA"
  retention:
    purge: manual
  rights:
    - { id: access,  label: "Access",  slaDays: 30, section: "Art 15" }
    - { id: erasure, label: "Erasure (right to be forgotten)", slaDays: 30, section: "Art 17" }
  safeguards:
    - { id: llm_masking, capability: "pii.boundary", label: "PII masking at LLM boundary" }
  dashboard:
    tiles: ["identifiers_masked@30d", "data_residency", "audit_events"]

Your own pack.

Packs travel in a signed org bundle that an admin imports under Settings → Admin → Utilities → Bundles. Today Bolt accepts a bundle only when it is signed by a key built into Bolt, which means Sparcle; a way for your organization to sign its own is not available yet. If you run your own Bolt server, it also reads packs from its config/catalog folder.