EU dual-use export controls: a primer for tech startups
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
ComplyTrain by Skylen
Get compliant, and stay compliant, in the standards your customers, tenders and regulators demand - faster and with higher quality. ComplyTrain runs your whole compliance programme - quality management, documents, training, audits, risk, suppliers and tenders - in one platform, with AI agents doing the heavy reading and drafting, and your team always in control. Built for regulated industries; defence and dual-use is our flagship.
The difference is not that there is AI. It is senior subject-matter experts, trained by our compliance experts, doing the reading and drafting inside a structured system - while your team keeps the decision.
Every agent is an always-on subject-matter expert, trained by Skylen’s compliance experts. It reads the standard, digests the detail and drafts the documents, records and answers - so the reading and the first pass are done for you. Talk to any agent by voice or by typing.
Each standard is pre-processed by our experts into the templates, requirements and workflows the agents fill in. You never face a blank page - the structure is already there, and the agents work inside it, grounded in the facts you have given.
The agents draft; a named person decides. Nothing is published without your approval, and what you tell ComplyTrain once grounds every document it writes. It runs in the EU, with each customer isolated at the database, identity and storage layers.
Nothing scheduled right now.
How it works
Compliance is a journey, and everyone boards at a different station. Wherever you start from, the pattern is the same.
Tell ComplyTrain about your organisation, or point it at the documents you already keep. It ingests what you have, holds your facts with where they came from, and never asks you for the same thing twice.
Your expert-trained agents take those facts and the expert-built templates and draft what each standard needs - documents, records and answers - grounded in what you gave them, not the open internet.
Every draft comes to a named person to accept, change or reject. The agents do the moving of known information into place; your team keeps the judgement and the sign-off.
Start with the module you need most. They share the same records, so they compound.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know whether your controls are operating, not just whether a policy says they exist.
Collect information the same way every time, and decide in advance what happens next.
| ComplyTrain | Spreadsheets & shared drives | |
|---|---|---|
| One authoritative version of every document | Yes | NoCopies drift across drives, inboxes and desktops. |
| Full revision history and audit trail | Yes | PartialFilename suffixes - if someone remembered. |
| Electronic signatures on approvals | Yes | No |
| Training tied to the document that changed | Yes | No |
| Requirements traced to the evidence that meets them | Yes | NoA separate sheet, maintained by hand. |
| Organised around the ISO 9001 clause structure | Yes | No |
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
A practical way to turn in-your-head risk management into a register that survives staff turnover and answers the risk questions now showing up in tenders.
ISO 9001:2026 was published in September 2026. What changed from the 2015 edition, the transition deadlines, and a practical checklist for your next audit.