Law Lab builds legal technology for teams that carry regulatory obligations: bespoke compliance workspaces built around your organisation, self-serve tools that answer specific legal questions, and licensed regulatory data for platforms that need the law inside their product. Each one is built and maintained by the lawyers who verify the underlying legal record.
Obligation registers, guided assessments, breach and vendor registers, regulator notification letters and an audit trail, built for your jurisdictions and handed over. You own it and run it. We have built and delivered one for a pan-African organisation operating in nine jurisdictions.
Product page and case study →The Breach Notification Assessor turns incident facts into notification duties, deadlines and recipients, cited to the statute. The Transfer Matrix codes cross-border transfer rules article by article. Enforcement alerts tell you when a regulator in your jurisdictions acts.
The tools →Statute summaries, the 54-state landscape, transfer rules and a human-reviewed update feed, served as versioned JSON with per-organisation keys. For compliance platforms, law firm knowledge systems and insurers.
Data licensing →The statute summaries, the 54-state landscape, the transfer rules and a human-reviewed regulatory update feed, served as authenticated, versioned JSON. Per-organization keys, scoped to the datasets and jurisdictions you license. Records that have not passed verification are not served. Compliance platforms, law firm knowledge systems and insurers build on the record without having to re-verify it.
Answer a short set of questions about a breach and see which of 44 African regimes require notification, to whom, and on what deadline, with the section of the statute each answer comes from. The assessor is deterministic: it applies rules coded from each law and generates nothing. It runs in your browser, and the facts of your incident are never sent to us or stored.
The full country-by-country notification matrix is on the same page, readable without the tool.
Run the assessor ↗Adequacy, safeguards, derogations, localization mandates and prior-authorization requirements, coded state by state across the continent. Each cell is read from the statute itself and cited to the article, and countries with no law in force recorded as exactly that. Where the text does not settle a point, the matrix says so rather than guessing.
Open the matrix ↗Enforcement alerts for the jurisdictions you choose, sent when a decision passes our verification, never on rumor. The monthly digest is free. Immediate per-decision alerts for compliance teams are coming with the alerts launch.
For one-off questions the record answers, sector exposure, penalty benchmarks, a regulator's posture, we build enforcement profiles to order from the same dataset.
Sign up on the tracker ↗In 2026 we built a full compliance workspace for a pan-African skills-development organisation operating in nine jurisdictions: guided assessments, breach, vendor, consent and data-subject-request registers, regulator notification letters, and an append-only audit trail designed to survive staff turnover.
Every statutory citation in the system was audited against the primary texts before handover. The client owns and runs it. That build is the pattern for every workspace we scope: audited citations, working registers, and a handover your team can run without us.
Alerts for your jurisdictions, the transfer matrix for your data flows, the assessor when an incident lands. When the tools raise a question the record cannot settle, our advisory practice picks it up.
Talk to us →Start with the free tools, they answer the questions that otherwise cost a scoping call. The Founders Compliance Series brings the training to your hub or accelerator, free.
Run the assessor ↗License the Data API and build on verified records instead of re-verifying them: statute summaries for client memos, the update feed for current-awareness, the enforcement record for pleadings and benchmarks.
Data licensing →Enforcement frequency and severity by sector and country, built to order from the dataset, diligence-shaped for deals, actuarial-shaped for underwriting cyber and privacy risk in African markets.
Request a profile →Request a demo of the tools, or tell us your jurisdictions and we will scope a bespoke build.