INTUDLY

Security & methodology

Precise about what the product does — and what it doesn't.

Design commitments, decision logic and limitations, stated plainly. Launch scope is kept separate from the roadmap.

Trust, security & methodology

Rules first, AI second. People sign off.

Security items below are product and security design commitments, not independently verified certifications.

Principles

  • No citation, no finding
  • A low score never cancels a mandatory restriction
  • Missing data is UNKNOWN, never eligible
  • Nobody approves their own work
  • Describe risk, never diagnose a player
  • Decision support, not legal advice

Security design commitments

  • EU hosting, optional dedicated tenant (Enterprise)
  • Pseudonymised player IDs, no identity documents
  • Encryption in transit and at rest
  • Customer data is not used to train AI models
  • Maker / checker roles; AML detail on a need-to-know basis
  • Hashed, time-stamped evidence and audit records
  • SSO / SAML (Professional), SCIM and MCP (Enterprise)
  • Controls designed for ISO/IEC 27001; certification on the roadmap

How the AI layer is constrained

Deterministic rule checks run first. AI reads, summarises and drafts; outputs without a citation are blocked. Every suggestion — a redline, a fix, a task — needs a named human approver before it changes anything.

Limitations we state plainly

  • • Intudly is decision-support software and does not provide legal advice.
  • • Sealed decision records are your internal records, not a certification by a regulator or third party.
  • • Market rule packs are updated as regulation changes and shown to you for approval before they apply.
  • • Native CRM and PAM connectors roll out by vendor from Phase 2; launch uses CSV/SFTP and API.

Regulatory basis of the design: granular marketing consent (UKGC LCCP SR 5.1.12) · clear significant conditions for bonuses (CAP / ASA) · data minimisation, human involvement, processor terms and security (GDPR Art. 5, 22, 28, 32).

Roadmap

Start with the MVP. Grow into the full platform.

Each phase is useful on its own. Phases 1 and 2 are planned to land before the EU AML Regulation applies on 10 July 2027. Nothing below is generally available yet.

Launch · MVP · Q1 2027

Phase 1 · MVP · Q1 2027

Campaign Shield (MVP)

  • • Content, T&C and audience checks
  • • Campaign risk score & review queue
  • • Hard gates, UNKNOWN fail-safe, maker / checker
  • • Sealed decision records, send-log reconciliation
  • • CSV / SFTP, API, Slack / Teams
Roadmap · Phase 2 · Q2 2027

Phase 2 · Q2 2027

Risk & workflow

  • • Player Risk Check Score
  • • CRM and PAM connectors
  • • Remediation Board with Jira / Linear
  • • Regulatory Radar and Command Center
  • • Compliance Copilot
Roadmap · Planned · H2 2027

Phase 3 · Planned H2 2027

Full Compliance OS

  • • Obligations Map & Policy Gap Engine
  • • Market Access Matrix
  • • Affiliate shield & Enforcement Intelligence
  • • Audit Room, Vendor Gatekeeper
  • • Market-Entry Accelerator

Week 1

Licences & markets

Brands, domains, roles · Radar scope and alerts

Week 2

Policies & obligations

Import and map policies · first gap report

Week 3

Integrations

CRM, PAM, Jira, Slack · config sync and backtest

Week 4

Go-live & training

Team training by role · first board report

Planned 30-day full-platform onboarding once the relevant phases ship. Campaign Shield alone targets 14 days to a first live check.

See what your last three campaigns would have flagged.

Free backtest of three recent campaigns, or a 30-minute walkthrough on a sample operator configured for your markets. We reply to agree scope and a secure way to share files.

Get a free 3-campaign backtest Book a 30-minute walkthrough

Sources

  1. CMS Law, “Gambling Commission action on AML and SR failings in 2025” (AG Communications, Football Pools, Corbett Bookmakers, March 2025).
  2. iGamingToday, “The cost of gambling compliance in 2025”.
  3. Regulation (EU) 2024/1624 (AMLR), applicable from 10 July 2027; European Gaming, 16 July 2026.
  4. EU Reporter, “Major European markets tighten iGaming laws: what to expect in 2026”, 29 April 2026.
  5. Zitadelle AG, “Curaçao iGaming licence 2026: LOK reform”.

Screens show an illustrative interface with sample data for a fictional operator; rule IDs and policy clauses are examples. Third-party names are trademarks of their owners; mention does not imply partnership.