Built from The Gated Republic and the GPCR rules architecture developed by Societās.
GPCR Compliance Simulator 2.0
Stress-test a proposed or existing international research partnership against the GPCR's dated ruleset for research security, funding eligibility, restricted entities, export controls and data-sovereignty conflict. The engine is deterministic. The rule that drives a verdict can be inspected.
GPCR Vault v2.2.0 · rules verified through 7 July 2026 · Q4 review underwaySIMULATION CONTROL
Simulation Date
Simulate compliance evaluations before or after the regulatory snapback deadline (1 October 2026).
STEP 1 OF 3 · OPTIONAL
Lead Institution Country & Target Funding Source
Whose rules apply depends on who leads the project and whose money is involved. Skip if unknown.
STEP 2 OF 3
Partner Institution
Note: This BETA simulator screens against a curated list of the top 150 highest-risk academic and sovereign institutions globally.
STEP 3 OF 3
Scientific Discipline / Technology
The research field determines how much scrutiny the partnership attracts.
Executive Assessment
Awaiting scenario inputs… Select your partnership variables to generate an intelligence briefing.
Your file never leaves your computer. Portfolio triage runs entirely inside your browser — nothing is uploaded, transmitted, or stored. Close the page and it's gone.
Triage your whole agreement register in seconds
Upload a CSV of your international agreements — columns for Partner, Country, Discipline, and optionally Funding and Lead. Or and fill it in.
About this compliance simulator
What the engine evaluates
The simulator tests proposed or existing international research partnerships against Western research-security frameworks, export-control regimes, restricted-entity lists, and data-sovereignty conflict. It evaluates the funding source, lead institution jurisdiction, partner entity, and technology domain to return a rules-based assessment.
Frameworks evaluated
The simulator evaluates partnerships against the following regulatory instruments:
• Canada: The Policy on Sensitive Technology Research and Affiliations of Concern (STRAC) and the National Security Guidelines for Research Partnerships (NSGRP).
• United States: OFAC sanctions, DoD Section 1286, CHIPS Act research-security provisions, NSPM-33 disclosure requirements, and PP 10043 visa restrictions.
• European Union: Horizon Europe Article 22(5) exclusions and EU restrictive measures.
• United Kingdom: National Security and Investment (NSI) Act.
• Australia: Defence Trade Controls Act (DTCA).
• Global South Data-Sovereignty: China's Network Data Security Management Regulations and comparable partner-jurisdiction data-localisation regimes.
• Strategic Zones: The Societās Gated Republic jurisdiction schema.
Note on effective dates: The engine respects the 1 October 2026 regulatory snapback boundary. Simulating a date after 1 October triggers the stricter vetting rules for multi-zonal consortia. This 1 October implementation date represents the consolidation of the US BIS Affiliates Rule and associated talent program restrictions.
What sits behind the assessment
Every result is deterministic. The engine queries the dated GPCR Vault (currently verified through 7 July 2026), applying formal rules to restricted-entity profiles, country classifications, the funding nexus, technology sensitivity, and counter-jurisdictional data-sovereignty laws. The rule that drives an assessment can be directly inspected.
What the engine cannot establish
• The Vault is a versioned intelligence product maintained on a quarterly cadence, not a live regulatory feed.
• Entity coverage is curated for high-risk profiles rather than being an exhaustive global register. Absence from the curated list is not certification.
• It evaluates declared parent organisations but does not resolve beneficial-ownership structures.
• The technology-sensitivity tiers are Societās analytical constructs designed to normalise flat government lists.
• The output is strategic intelligence, not legal advice.
Where Societās goes beyond the engine
The public engine handles what can be formalised. Strategic Partnership Intelligence adds analysis the rules engine cannot derive from current inputs. This includes assessing institutional capability, strategic fit, reciprocity, governance, agreement terms, operational feasibility, and your specific institutional risk appetite.
The Global North and South
The same regulatory architecture looks different depending on where you stand.
• For a Northern institution, the GPCR helps identify funding and research-security exposure before commitment.
• For a Southern partner, it clarifies the regulatory perimeter it is being asked to enter, replacing information asymmetry with a shared understanding of the rules.