Built from The Gated Republic and the GPCR rules architecture developed by Societās.

GPCR Compliance Simulator 2.0

Stress-test a proposed or existing international research partnership against the GPCR's dated ruleset for research security, funding eligibility, restricted entities, export controls and data-sovereignty conflict. The engine is deterministic. The rule that drives a verdict can be inspected.
GPCR Vault v2.2.0 · rules verified through 7 July 2026 · Q4 review underway
SIMULATION CONTROL

Simulation Date

Simulate compliance evaluations before or after the regulatory snapback deadline (1 October 2026).
STEP 1 OF 3 · OPTIONAL

Lead Institution Country & Target Funding Source

Whose rules apply depends on who leads the project and whose money is involved. Skip if unknown.
STEP 2 OF 3

Partner Institution

Note: This BETA simulator screens against a curated list of the top 150 highest-risk academic and sovereign institutions globally.
STEP 3 OF 3

Scientific Discipline / Technology

The research field determines how much scrutiny the partnership attracts.

Executive Assessment

Awaiting scenario inputs… Select your partnership variables to generate an intelligence briefing.

Your file never leaves your computer. Portfolio triage runs entirely inside your browser — nothing is uploaded, transmitted, or stored. Close the page and it's gone.

Triage your whole agreement register in seconds

Upload a CSV of your international agreements — columns for Partner, Country, Discipline, and optionally Funding and Lead. Or and fill it in.

About this compliance simulator

What the engine evaluates
The simulator tests proposed or existing international research partnerships against Western research-security frameworks, export-control regimes, restricted-entity lists, and data-sovereignty conflict. It evaluates the funding source, lead institution jurisdiction, partner entity, and technology domain to return a rules-based assessment.
Frameworks evaluated
The simulator evaluates partnerships against the following regulatory instruments: • Canada: The Policy on Sensitive Technology Research and Affiliations of Concern (STRAC) and the National Security Guidelines for Research Partnerships (NSGRP). • United States: OFAC sanctions, DoD Section 1286, CHIPS Act research-security provisions, NSPM-33 disclosure requirements, and PP 10043 visa restrictions. • European Union: Horizon Europe Article 22(5) exclusions and EU restrictive measures. • United Kingdom: National Security and Investment (NSI) Act. • Australia: Defence Trade Controls Act (DTCA). • Global South Data-Sovereignty: China's Network Data Security Management Regulations and comparable partner-jurisdiction data-localisation regimes. • Strategic Zones: The Societās Gated Republic jurisdiction schema. Note on effective dates: The engine respects the 1 October 2026 regulatory snapback boundary. Simulating a date after 1 October triggers the stricter vetting rules for multi-zonal consortia. This 1 October implementation date represents the consolidation of the US BIS Affiliates Rule and associated talent program restrictions.
What sits behind the assessment
Every result is deterministic. The engine queries the dated GPCR Vault (currently verified through 7 July 2026), applying formal rules to restricted-entity profiles, country classifications, the funding nexus, technology sensitivity, and counter-jurisdictional data-sovereignty laws. The rule that drives an assessment can be directly inspected.
What the engine cannot establish
• The Vault is a versioned intelligence product maintained on a quarterly cadence, not a live regulatory feed. • Entity coverage is curated for high-risk profiles rather than being an exhaustive global register. Absence from the curated list is not certification. • It evaluates declared parent organisations but does not resolve beneficial-ownership structures. • The technology-sensitivity tiers are Societās analytical constructs designed to normalise flat government lists. • The output is strategic intelligence, not legal advice.
Where Societās goes beyond the engine
The public engine handles what can be formalised. Strategic Partnership Intelligence adds analysis the rules engine cannot derive from current inputs. This includes assessing institutional capability, strategic fit, reciprocity, governance, agreement terms, operational feasibility, and your specific institutional risk appetite.
The Global North and South
The same regulatory architecture looks different depending on where you stand. • For a Northern institution, the GPCR helps identify funding and research-security exposure before commitment. • For a Southern partner, it clarifies the regulatory perimeter it is being asked to enter, replacing information asymmetry with a shared understanding of the rules.

Intellectual Provenance

What this tool is — and is not. A dated, versioned snapshot maintained on a visible quarterly cadence — not a live regulatory feed. Curated coverage of the top of the risk distribution — not the tail. Declared parent organisations — not resolved ownership graphs. Strategic intelligence — not legal advice: confirm every legal obligation with qualified counsel in your jurisdiction. The internal Tier 1/2/3/4 gradation is a GPCR analytical construct informed by — but not identical to — the flat Canada STL/STRA and US CET lists (neither government list assigns numeric tiers); every sensitive domain maps to at least one governing list; Humanities & Social Sciences is the sole non-sensitive domain. The exclusion of Human-Machine Integration (TECH-13) from the R8 competitor-collision RED path is an intentional design choice; although TECH-13 appears as sensitive on both governing lists, its divergence is by design to permit conditional vetting instead of an automatic block.
BETA: Core rules are stable. "Beta" denotes curated (rather than exhaustive) entity coverage and quarterly active versioning. Institutional and legal confirmation remains required.