78 AI Prompts for Compliance

The best Compliance prompts in the Legal library. Tested on ChatGPT, Claude, Gemini and every major model.

Browse the prompts

## Role
You are a cybersecurity architect specializing in e-commerce platforms. You identify vulnerabilities in hosting environments, integrations, and compliance gaps before attackers exploit them. Your recommendations balance regulatory requirements with practical implementation constraints.

## Task
Generate a comprehensive, prioritized security assessment and roadmap tailored to the user's e-commerce environment. Analyze the hosting platform's capabilities and limitations, identify region-specific compliance obligations, evaluate integration-layer risks, and recommend high-impact, cost-effective measures.

Before responding, map: hosting environment constraints β†’ applicable regulatory frameworks β†’ integration attack surfaces β†’ threat prioritization by likelihood and business impact.

## Context
The user operates an e-commerce platform handling sensitive customer data and payment info

E-Commerce Security Best Practices Recommendation

Generates a prioritized security assessment and implementation roadmap tailored to your e-commerce platform, hosting environment, and regional compliance requirements. Runs on ChatGPT, Claude, Gemini, and Grok.

97
{
  "model": "jev-latest",
  "state": {
    "claim_rules": "{{claim-rules}}",
    "creative": {
      "headline": "{{headline}}",
      "body_copy": "{{body-copy}}",
      "disclaimer": "{{disclaimer}}"
    }
  },
  "questions": {
    "claim_type": {
      "type": "choice",
      "instructions": "What is the strongest kind of claim this creative makes?",
      "criteria": {
        "factual_measurable": "States a number, percentage, ranking, or test result",
        "comparative": "Says it is better, faster, cheaper than named or implied rivals",
        "health_or_safety": "Promises a health, safety, or medical outcome",
        "financial_outcome": "Promises earnings, returns, or savings",
        "puffery": "Vague praise no reasonable person would take literally",
        "none": "Makes no claim beyond describing the product"
      }
    },
    "substantiation_present": {
      "type"

Marketing Claim Compliance Screen

Evaluates ad creative for compliance with claim substantiation rules and generates a compliance report as JSON.

91

Fair Housing Compliance Guidelines Prompt

Generates tailored Fair Housing compliance guidelines covering tenant screening standards, anti-discrimination communication protocols, record-keeping systems, and advertising compliance. Runs on ChatGPT, Claude, Gemini, and Grok.

70

Community Post Moderation Decision Set

Generate a structured classification for community post moderation based on rules, author history, and post text.

63

Build Compliance Checklists

Generates a risk-prioritized, multi-phase compliance requirements checklist tailored to your regulatory environment, industry, and jurisdiction. Runs on ChatGPT, Claude, Gemini, and Grok.

62
## Role

You are a corporate policy consultant and organizational risk management specialist with expertise in internal governance frameworks, compliance vulnerabilities, and operational risk mitigation.

## Task

Identify and analyze 7 common mistakes companies make when drafting internal policies. For each mistake, examine:

- **The drafting error itself** – what specifically goes wrong
- **Why it occurs frequently** – root causes and organizational blind spots
- **Real-world consequences** – legal exposure, operational disruption, compliance failures, employee disputes, and regulatory penalties
- **Prevention strategies** – how to avoid and correct the mistake

Focus on errors that appear simple but create complex downstream effects. Include specific examples of how each mistake manifests in practice and warning signs that indicate a company is making these errors.

## Context

{{busi

Corporate Policy Drafting Mistakes Analysis Prompt

Generates a detailed analysis of 7 common internal policy drafting errors, their root causes, real-world consequences, and prevention strategies. Runs on ChatGPT, Claude, Gemini, and Grok.

60
## Role
You are an internal audit specialist with expertise in the COSO Internal Control–Integrated Framework. You assess control design and operating effectiveness, identify gaps, and deliver actionable recommendations that strengthen compliance while maintaining operational efficiency.

## Task
Conduct a comprehensive internal control assessment across all five COSO components:

1. **Control Environment** – Assess governance structure, tone at the top, and ethical culture
2. **Risk Assessment** – Evaluate how the organization identifies, analyzes, and responds to risks
3. **Control Activities** – Examine policies, procedures, and controls that mitigate identified risks
4. **Information & Communication** – Analyze data flows, reporting channels, and communication effectiveness
5. **Monitoring Activities** – Review ongoing evaluations and corrective action processes

For each component:

Internal Control Assessment Using COSO Framework

Generates a comprehensive internal control evaluation across all five COSO components, identifying gaps, quantifying risks, and prioritizing remediation actions. Runs on ChatGPT, Claude, Gemini, and Grok.

59

Regulatory Monitoring System Architect Prompt

Generates a complete blueprint for a proactive regulatory monitoring system that tracks changes across jurisdictions, translates updates into workflows, and scales with organizational growth. Runs on ChatGPT, Claude, Gemini, and Grok.

56

Cookie Banner Design and Compliance Implementation

Generates a complete cookie banner implementation guide with GDPR and ePrivacy Directive compliance architecture, consent logic, and technical specifications tailored to your platform and regions. Runs on ChatGPT, Claude, Gemini, and Grok.

55
## Role

Compliance management specialist with expertise in ISO 37301 standards, regulatory validation, and audit-ready documentation.

## Task

Design comprehensive compliance certification templates that meet ISO 37301 requirements and ensure audit readiness. Create structured frameworks with clear documentation standards that capture evidence-based assurance for regulatory scrutiny.

## Context

The templates will operate in environments where regulatory scrutiny is intensifying, compliance failures trigger significant legal consequences, and audit teams require complete, organized documentation.

**Compliance Scope:**  
{{compliance-scope}}

**Organizational Context:**  
{{organizational-context}}

## Output

Provide template frameworks that include:

**1. Certification Record Templates**
- Policy alignment documentation sections
- Risk assessment documentation fields
- Control imple

ISO 37301 Compliance Certification Template Builder

Generates structured compliance certification templates that meet ISO 37301 standards, including policy alignment, risk assessment fields, verification checklists, and audit sign-off protocols. Runs on ChatGPT, Claude, Gemini, and Grok.

55
## Role

You are an enterprise risk architect with investigative experience in regulatory failures. You design risk mitigation systems that organizations actually implementβ€”not academic exercises that collect dust. Your approach combines ISO 31000 rigor with operational practicality, focusing on the gap between documented plans and ground-level reality.

## Task

Create a living risk mitigation framework that satisfies regulatory requirements, protects operations, and integrates into existing workflows. Address mounting regulatory scrutiny while acknowledging resource constraints and competing priorities.

## Context

{{organizational-context}}

The organization faces regulatory environment requirements, operational vulnerabilities, past incidents or near-misses, resource constraints (budget, staffing, time), and defined risk appetite thresholds.

Previous risk assessments failed because

Risk Mitigation Plan Builder

Generates a living risk mitigation framework that integrates ISO 31000 principles with practical, operational controls. Runs on ChatGPT, Claude, Gemini, and Grok to produce actionable risk registers, mitigation roadmaps, and monitoring dashboards.

55

Regulatory Compliance Strategy Builder

Generates a structured compliance plan that identifies industry regulations, analyzes requirements, and outlines implementation steps. Runs on ChatGPT, Claude, Gemini, and Grok to produce a markdown table mapping regulation names to actionable compliance measures.

55

Analyze Payroll Compliance Under FLSA

Generates a structured FLSA compliance report that identifies wage-and-hour violations, quantifies liability exposure, and provides an actionable remediation roadmap. Runs on ChatGPT, Claude, Gemini, and Grok.

54

Litigation Hold Notice Generator for Legal Teams

Generates enterprise-grade litigation hold notices that protect organizations from spoliation sanctions while remaining clear and executable by non-lawyers. Runs on ChatGPT, Claude, Gemini, and Grok.

54
## Role
You are an expert compliance officer and internal auditor specializing in regulatory frameworks, risk management, and COSO Internal Control Framework implementation.

## Task
Produce a compliance violation report that withstands scrutiny from auditors, regulators, and executive leadership while providing clear pathways for remediation.

## Context
Analyze the incident through the COSO framework lens, identifying control deficiencies across the five components: Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring Activities. All findings must be supported by audit evidence and aligned with applicable regulatory requirements.

{{incident-details}} should include: the compliance violation specifics, relevant audit results and evidence, impacted policies and procedures, applicable regulations and standards, and organizational context (

Compliance Violation Report Generator

Generates audit-ready compliance violation reports that analyze incidents through the COSO framework, detail control deficiencies, and provide remediation plans. Runs on ChatGPT, Claude, Gemini, and Grok.

53
## Role

You are an expert regulatory compliance attorney specializing in creating Corrective Action Plans (CAPs) that satisfy FDA, SEC, DOJ, FTC, OSHA, EPA, and international regulatory bodies. Your CAPs close enforcement cases definitively by converting regulatory findings into documented compliance excellence.

## Task

Transform regulatory findings into an enterprise-grade Corrective Action Plan. Work through phases dynamically based on finding complexity:

- Simple findings (1-3 issues): 5-7 phases
- Moderate findings (4-8 issues): 7-9 phases  
- Complex findings (9-15 issues): 9-12 phases
- Systemic failures (15+ issues): 10-12 phases

Adapt depth and structure to severity, regulatory expectations, organizational maturity, and available resources.

## Context

{{regulatory-findings}}

{{organizational-context}}

## Process

### Phase 1: Regulatory Intake & Risk Stratification

Anal

Corrective Action Plan Generator for Regulatory Findings

Generates a structured, regulatory-grade Corrective Action Plan (CAP) that converts enforcement findings into documented remediation strategies. Designed for ChatGPT, Claude, and Gemini to address FDA, SEC, DOJ, FTC, OSHA, EPA, and international regulatory requirements.

53

Regulatory Policy Gap Analysis Prompt

Generates a line-by-line compliance gap analysis that maps policy deficiencies to specific regulatory requirements, quantifies enforcement risk, and delivers a prioritized remediation roadmap. Runs on ChatGPT, Claude, Gemini, and Grok.

52

Final Settlement Checklist Generator for HR Compliance

Generates structured employee termination checklists covering payroll, benefits, documentation, and legal compliance requirements. Runs on ChatGPT, Claude, Gemini, and Grok to produce checklists aligned with ILO standards and local labor law.

51
## Role
You are a regulatory compliance auditor specializing in industry-specific regulations.

## Task
Conduct a comprehensive audit to verify regulatory compliance across current processes. Evaluate each process against applicable regulations, identify compliance gaps, assess associated risks, and provide prioritized, actionable recommendations.

## Context
- Industry: {{industry}}
- Current processes to audit: {{processes}}
- Applicable regulations: {{regulations}}

## Audit Criteria
1. Evaluate each process against the specific regulatory requirements listed
2. Identify potential risks associated with non-compliance
3. Prioritize recommendations based on risk level and ease of implementation
4. Focus on specific, actionable insights rather than general advice
5. Support all findings with evidence from the audit

## Output
Structure your audit report in the following sections:

**1. E

Compliance Audit Report Generator for Businesses

Generates a structured regulatory compliance audit report evaluating processes against industry-specific regulations. Runs on ChatGPT, Claude, and Gemini to produce risk assessments and prioritized remediation actions.

51
## Role
You are an expert compliance officer specializing in risk assessment and regulatory frameworks across industries.

## Task
Develop a comprehensive risk management plan that identifies, evaluates, and mitigates compliance risks for the specified business. Analyze the regulatory landscape, identify risk categories specific to the industry and jurisdiction, assess the likelihood of each risk materializing, and propose concrete mitigation strategies.

## Context
Business context: {{business-context}}

Consider the unique compliance obligations tied to the industry sector, geographic jurisdiction, operational scale, and business model. Cover risks across data protection, employment law, health and safety, financial reporting, licensing, environmental regulations, consumer protection, anti-corruption, and sector-specific requirements.

## Output
Present your analysis as a markdown tabl

Compliance Risk Assessment Plan Generator

Generates a comprehensive risk management table identifying, evaluating, and mitigating compliance risks across regulatory domains for any business context. Runs on ChatGPT, Claude, Gemini, and Grok.

50

Develop Data Privacy Policies

Create robust data privacy policies with this AI prompt, ensuring compliance with GDPR and NIST Privacy Framework.

48

Document Retention Policy Generator

Generates a complete document retention policy framework covering classification, retention schedules, disposal procedures, and governance structures. Runs on ChatGPT, Claude, Gemini, and Grok.

48

Compliance Risk Warning Sign Analysis Prompt

Generates a structured assessment of the five most critical early warning signs that indicate an organization is drifting toward non-compliance. Runs on ChatGPT, Claude, Gemini, and Grok to help compliance teams detect systemic vulnerabilities before they escalate into regulatory failures.

48
## Role

You are a vendor compliance architect with deep regulatory expertise and pattern-recognition skills. You understand that vendor risk management is a continuous process of identifying interconnected vulnerabilities before they materialize. Your approach combines regulatory knowledge with practical implementation constraints.

## Task

Analyze vendor compliance data against OCC Third-Party Risk Management (TPRM) guidelines to identify gaps, regulatory breaches, and ethical violations. Deliver a risk intelligence report with specific, prioritized oversight actions aligned with global best practices.

Work systematically:
1. Map vendor data to OCC requirements
2. Identify compliance gaps and regulatory breaches
3. Assess ethical violations and reputational risks
4. Calculate risk levels using multiple factors
5. Design practical, risk-aligned oversight actions

## Context

{{organiz

Vendor Compliance Risk Analysis Prompt

Generates a structured risk intelligence report that maps vendor data against OCC Third-Party Risk Management guidelines, identifying compliance gaps, regulatory breaches, and ethical violations. Runs on ChatGPT, Claude, Gemini, and Grok.

47

What are AI prompts for Compliance?

AI prompts for Compliance are engineered instructions that already work. These are not one-line questions. Each one fixes the role, the context, the task and the output format before you type a word, so you get a usable result on the first run instead of the fourth.

They cover the work Compliance actually get asked for: research and briefs, copy and content, analysis and reporting, planning, outreach and the admin that eats the day. Open a card to see the full prompt and the output it returns.

Popular on this page right now: "E-Commerce Security Best Practices Recommendation", "Marketing Claim Compliance Screen", "Fair Housing Compliance Guidelines Prompt".

78 on this page, every one scoped to Compliance. Free to read, free to copy.

Why these prompts work for Compliance

A weak prompt costs you the hour you were trying to save: you rewrite it three times, get something generic, then finish the job by hand. An engineered prompt front-loads that thinking once.

In Compliance that means first drafts you can send, analysis you can act on, and the repetitive work handed off, so the time goes into judgement instead of typing.

Every prompt here was written for a real job and tested against the models people actually use. Nothing scraped from a thread.

How to use these prompts

Open a prompt, copy it, and replace the [bracketed] variables with your own product, audience or topic. The structure around them stays as is. That structure is the part doing the work.

Paste it into ChatGPT, Claude, Gemini, Grok or the model you already use. If the output drifts, tighten the context line instead of rewriting the whole prompt.

No account needed to copy one. No setup, no extension, nothing to install.

Which AI tool works best for Compliance prompts?

Text prompts here run well in ChatGPT, Claude, Gemini and Grok; image prompts target Midjourney and Nano Banana. Each card lists the models it was tested with.

Are these AI prompts free to use?

A big part of the library is free: open a prompt, copy it, use it. Premium packs and the Complete AI Bundle unlock the full collection with lifetime updates.

How do I adapt these prompts to my use case?

Start with the [variables]: niche, audience, constraints. If the result still misses, add one example of the output you want. A single good example beats three extra instructions.

For a prompt built from scratch, the Start Now card above opens the custom prompt generator.

Related resources

Get smarter on AI every week

One email a week with the best new prompts, tools, and model updates. Unsubscribe anytime.

Join 100,000+ subscribers. One email a week, real prompts, tools, and model updates. Unsubscribe anytime.