# ReguShield AI — Frequently Asked Questions Quick answers to the questions pilot teams ask most often. For more detail on security and data handling, see the **Security Whitepaper** and the **Data Retention Policy** in this pilot kit. --- ## Getting Started ### What should I upload? A **single flat file**, with **one row per record**, matching one of the four supported datasets: - **AML / FinTech** — required: `customer_id`, `transaction_amount`, `kyc_status` - **Crypto / CASP** — required: `customer_id`, `transaction_amount`, `asset_type` - **EU AI Act** — required: `ai_system_name`, `high_risk_ai` - **DORA ICT** — required: `record_id`, `ict_incident` The engine does **not** join separate customer and transaction files, so put everything for each record on its own row in one file. See the Data Preparation Guide for required vs optional fields and sample rows. Downloadable templates are in the in-app **Template & Data Readiness Center** on the upload page. ### Can I upload Excel? **Yes.** Excel (`.xlsx` / `.xls`) is a primary, fully supported "Live" path alongside CSV. TXT files (delimited or `label: value`) are also supported. ### Can I upload PDFs? **Yes, in beta — but for a different purpose.** PDF intake goes through **Document Ingestion**, which extracts **obligations and evidence from policy documents** — it does **not** parse transaction or record-level data. For record-level data, use CSV or Excel. Note: `.docx` files are **not parsed** — export them to PDF or CSV first. ### What if my file is the wrong format or empty? ReguShield AI shows a **clear guidance message** telling you what to do. It never crashes on an unsupported or empty file. Column headers are matched case- and language-insensitively (many aliases, including Turkish), so you don't need to rename columns exactly. --- ## Data, Storage & Privacy ### Do you store my data? Yes — your uploaded data and analysis are stored so you can return to your workspace. Data is stored **in the EU**, via **Supabase (PostgreSQL)**. See the Security Whitepaper in this kit for the full picture. ### How long do you retain it? Retention is described in the **Data Retention Policy** included in this pilot kit. In short, pilot data is retained for the duration of your pilot engagement; you remain in control of clearing it. ### Can I delete my data? **Yes.** You can clear your workspace from within the app, and you can request full deletion at any time by emailing **hello@regushield.ai**. See the Data Retention Policy for detail on what is removed and when. --- ## Outputs & Reports ### Can I export reports? **Yes.** The audit-ready Executive Report can be exported as **PDF, DOCX, XLSX, or TXT**. Each export carries a **content hash, signature block, and audit envelope** so its integrity can be verified. ### How is evidence generated? When the engine detects a **control or evidence gap** in your data, it raises an **evidence requirement** — describing what you would need to demonstrate compliance with the relevant obligation. Flagged records also produce **recommended actions**. You can trace the full reasoning in the **Compliance Graph**: Transaction → Regulation → Obligation → Risk → Decision → Action → Audit. ### What regulations are supported? ReguShield AI provides decision-support across: - **AMLA 2027** — EU anti-money-laundering supervisory authority - **AMLR** — EU Anti-Money-Laundering Regulation - **AMLD6** — Sixth Anti-Money-Laundering Directive - **MiCA** — Markets in Crypto-Assets Regulation - **DORA** — Digital Operational Resilience Act - **EU AI Act** — Artificial Intelligence Act - **FATF Travel Rule** — originator/beneficiary information on transfers A framework activates **only when its required fields are present** in your upload. If a framework does not trigger, the Executive Report explains why. --- ## Scope & Limits ### Is this legal advice? **No.** ReguShield AI is **compliance decision-support**, not legal advice. Its scores, mappings, and recommendations are **inputs** to your team's decision-making. Final regulatory decisions — including STRs, CDD completions, and supervisory filings — must be made and submitted by your **authorised compliance personnel**. --- ## Support Anything not covered here: **hello@regushield.ai**. --- ReguShield AI — compliance decision-support, not legal advice. Questions: hello@regushield.ai