What Acquis indexes today
Everything below is served verbatim from the current consolidated version, with the exact citation and an EUR-Lex deep link. A sweep of the official EUR-Lex/CELLAR catalog runs every day and picks up new consolidations, corrigenda and status changes — so this page describes the corpus as it is right now, not as it was at launch.
In the corpus now
| Act | CELEX | Type | What you can ask about |
|---|---|---|---|
| AI Act | 32024R1689 | Regulation | Risk classes, prohibited practices, high-risk obligations (Annex III), GPAI, transparency. |
| GDPR | 32016R0679 | Regulation | Lawful bases, data-subject rights, breach notification, transfers, fines. |
| Digital Services Act | 32022R2065 | Regulation | Intermediary duties, notice-and-action, trader traceability, VLOP obligations. |
| Digital Markets Act | 32022R1925 | Regulation | Gatekeeper designation thresholds, do/don’t obligations, enforcement. |
| NIS2 | 32022L2555 | Directive | Scope of essential/important entities, risk measures, incident reporting deadlines. |
| Data Act | 32023R2854 | Regulation | IoT data access, cloud switching, unfair contract terms, B2G access. |
| Cyber Resilience Act | 32024R2847 | Regulation | Products with digital elements, manufacturer duties, vulnerability reporting. |
| DORA | 32022R2554 | Regulation | ICT risk management, major incident reporting, third-party providers, testing. |
| eIDAS 2 | 32024R1183 | Regulation | European Digital Identity Wallet, trust services, acceptance duties. |
| Product Liability Directive | 32024L2853 | Directive | Liability for defective products including software and AI systems. |
| Data Governance Act | 32022R0868 | Regulation | Re-use of public-sector data, data intermediation, data altruism. |
| ePrivacy Directive | 32002L0058 | Directive | Confidentiality of communications and the consent rule for cookies/tracking (Art 5(3)). The directive itself — national transpositions vary. |
| Copyright DSM Directive | 32019L0790 | Directive | Text-and-data-mining exceptions (Art 3–4, relevant to AI training), press-publisher and platform-liability rules. |
Recitals and annexes are indexed as retrievable units too — the AI Act's Annex III list, for example. Superseded versions are never deleted: every provision keeps its validity window, so you can ask what an article said before an amendment.
On the way
EDPB guidelines next
GDPR without the EDPB is half an answer — the practitioner's question (“is this a transfer?”, “which basis applies here?”) is settled in the guidance, not the article. It will be labelled for what it is: interpretation, kept distinct from verbatim law.
Under consideration
The ePrivacy Directive (the actual home of cookie and tracking rules, via its national transpositions) and CJEU case law. Both change the shape of the product, not just the corpus — which is why they are candidates, not promises.
Need something we don't cover?
Acquis runs on HIVE, our verifiable knowledge engine: it ingests, chunks and signs information from any source. Adding a corpus is a matter of hours, not a rebuild — the engine, the citation model and the verification are already there. That is a claim you should make us prove.
Tell us the framework and the use case. Requests that land here get published on this page as they ship, and Pro and Enterprise requests go first.
New here? Why legal AI fails explains what this is for. Or just ask it something you already know the answer to — 7-day Pro trial, no card.
Acquis returns official sources verbatim with citations; it is not legal advice. Texts © European Union, reuse permitted (Decision 2011/833/EU).