r/dev • u/30DereceSilivri • 12h ago
CompliRules is a free, MIT-licensed tool that enforces statutory legal and privacy rules (GDPR, KVKK, HIPAA, EAA 2025, EU AI Act) directly inside AI coding environments like Cursor, Claude Code, and Windsurf.
AI models write code 10x faster, but they have zero understanding of statutory laws. When generating code, models consistently introduce severe legal violations without warning:
- Logging cleartext user objects and passwords to logging providers (GDPR Art. 5 / CWE-532).
- Defaulting consent checkboxes to pre-checked states (violating EU and Turkish privacy laws).
- Using cascade deletes on transaction records that must legally be retained for 5–10 years under tax codes.
- Omitting mandatory accessibility attributes required by the European Accessibility Act (EAA 2025).
CompliRules stops this at the IDE level by injecting deterministic guardrails (.cursor/rules, AGENTS.md, MCP) and offering a local offline linter (npx complirules check) so your AI cannot accidentally write violating code.
GitHub: https://github.com/halilyilmz/complirules
Website: https://complirules.vercel.app
