Understanding Egret's Regulatory Domains

Every answer Egret generates is grounded in a specific domain — a curated, versioned collection of regulatory frameworks scoped to a subject area. Understanding how domains and categories are structured helps you get more precise answers and build more targeted integrations.

Domains and categories

A domain is a regulatory subject area — Business Continuity, Risk Management, Cyber Resilience. A category is a jurisdiction within that domain. The Business Continuity domain currently supports two categories:

• us — United States frameworks, including the FFIEC IT Examination Handbook (Business Continuity Management), BCP guidance, and related federal regulatory material.
• sg — Singapore frameworks, including MAS Technology Risk Management Guidelines and related guidance from the Monetary Authority of Singapore.

When you make a query, you scope it to both a domain and a category. This ensures retrieval stays focused — a question about US BCM requirements won't return Singapore MAS guidance unless you ask for it.

What's live today

The Business Continuity domain is live with US and Singapore categories. You can browse it without authentication:

curl https://api.getegret.com/v1/domains/business-continuity/categories/

Coming soon

Two additional domains are in preparation:

• Risk Management — Enterprise risk frameworks, operational risk standards, and risk assessment guidance.
• Cyber Resilience — Cybersecurity frameworks, incident response standards, and resilience planning requirements.

Domain and category additions are announced via the blog. The full list of available domains is always accessible at GET /v1/domains/.

Egret manages the regulatory library

The documents in each domain are curated and maintained by Egret. When regulations are amended or new guidance is issued, we update the library — you don't need to manage source documents. Every document in the library is versioned, and source citations in responses always link back to the original file.

Your private knowledge base

Alongside Egret's regulatory library, every organisation has its own private knowledge base. Upload your internal policies, procedures, and compliance documentation — these are stored in an isolated, per-organisation partition and blended into retrieval alongside the regulatory content when you query.

Supported upload formats: PDF (text-based), DOCX, XLSX, CSV, and Markdown. Sources from your private KB are identified in responses so you always know whether an answer draws from Egret's library, your own documents, or both.

Upload via the dashboard under Organisation → Knowledge Base, or use the API. Storage limits depend on your plan — check current limits in your organisation settings.

Querying across both sources

There's nothing special to configure — when you make a query, Egret automatically retrieves from both the domain's regulatory library and your organisation's private KB. The is_private flag on each source in the response tells you which pool it came from.

{
  "query": "What does our BCP say about RTO requirements?",
  "domain": "business-continuity",
  "category": "us",
  "mode": "advisory"
}

An advisory-mode response to this query will synthesise your organisation's own RTO commitments alongside what FFIEC guidance says they should be — a comparison you'd otherwise have to do manually.