Oversight regimes are documentation duties. The file should keep itself.
In this sector, diligence reads the oversight file first. Registration, personnel assessments, security and biosafety plans and export controls all take the form of documents with dates, and investors and government counterparties examine exactly those documents. A sovereign deployment produces that record inside the organisation's own perimeter, as dated, signed entries, while the work happens.
The review is conducted under mutual NDA, with the organisation's security and technical leads in the room. Nothing is uploaded and nothing is trialled.
Registered work, assessed people, controlled transfers.
Each entry is a published rule with its primary source. Whether a given programme, agent or transfer falls under any of them is a question for the organisation and its counsel, never for a platform.
Showing rules for European Union
The argument on this page does not change with the selection. The citations do.
Every jurisdiction is shown below, grouped and labelled.
European Union
- Export control
Export control reaches the sending of information, and it keeps receipts. The EU dual-use regime controls exports, brokering, technical assistance, transit and transfer, and requires exporters to keep registers and documents for at least five years from the end of the calendar year of the export, produced to the authority on request.
- Investment screening
The Union rewrote its screening regulation, and the successor is adopted. The Union adopted a successor foreign-investment screening regulation on 17 June 2026, replacing the 2019 framework. A filing wants the ownership chain to the ultimate owner, the governance rights and the funding of the specific investment, reproducible as filed.
United Kingdom
- Investment screening
The field itself is on the screening lists. The mandatory-notification regime lists synthetic biology among its sensitive sectors.
NSI Act 2021, Notifiable Acquisition Regulations, Sch. 16 (SI 2021/1264)
United States
- Registration
The work itself runs on registration and plans. The United States regulates possession and use of select agents and toxins through registration, security risk assessments for the people involved, required security and biosafety plans, restrictions on defined experiments, and recordkeeping duties. Every one of those obligations takes the form of documents that must exist, stay current, and be producible on inspection.
Regimes that belong to no one country
These regimes are not the law of any one country, so there is nothing here for a reader to select. They reach this sector whichever jurisdiction is chosen above, and they are shown to every reader.
- Export control
Multilateral regimes
Transfers run under harmonised export controls. The Australia Group, an informal forum of forty-two countries and the European Union, harmonises export controls so that exports do not contribute to the development of chemical or biological weapons. Its common lists are implemented through members’ national controls.
Ledger entries are published in English only, and cite each instrument by its own official name.
Who accessed what, who approved what, recorded as it happened.
On a sovereign deployment the raise, the counterparty diligence and the oversight paperwork run on infrastructure the organisation controls, inside the security perimeter its plans already describe. Sensitive material sits behind a narrower door than the deck, with per-person, per-document access under the organisation's own rules; approval workflows put a named human reviewer on each decision; and every grant, access and approval becomes a dated, signed entry as it happens. When an inspector, an investor or a government counterparty asks who had access to a given document set during a given period, and who approved it, the answer is a record made at the time, not a reconstruction from mailboxes.
The perimeter claim is made per configuration: with identity verification, screening and mail in the organisation's own mode, no document, key or event leaves the perimeter in normal operation; in the connected timestamping postures, the one egress is a SHA-256 fingerprint sent for independent timestamping. The organisation's security team approves every update before it lands.
Stated before anyone asks.
- NOT BIOSAFETY
No biosafety judgment, no compliance conferred. Registration, security risk assessments, plan adequacy and inspection outcomes are decided by the authorities that decide them. The platform records the documents in which the organisation meets its duties; it assesses none of them, and using it satisfies no obligation under any select-agent, export-control or screening regime.
- NOT SCIENCE
No judgment about the research. What is prudent, permitted or wise in any laboratory is a matter for the scientists, the oversight bodies and the regulators. The platform records what the organisation documented and when; it holds no opinion about the work itself.
- THE FRAME
Defence of health systems, oversight of dual-use research. Nothing else. This page addresses organisations that carry oversight duties and want their record of meeting them kept properly: their raise, their counterparty diligence, their documentation. It offers nothing to work that seeks to escape that oversight, in any configuration, for any client.
The inspection will read the file. The file is built now.
An architectural review with the organisation's security and technical leads, under mutual NDA, covers the deployment shapes, the switchboard and its claim consequences, and what an engagement would scope for the organisation's records. A short note on the programme and its jurisdictions is enough to begin.
Exedra Gate is a technology platform, not a broker, dealer, custodian, escrow provider, or investment adviser. It never holds, routes, or settles investor funds, does not recommend offerings to investors, and charges no success-based fees. It assesses no biosafety or security plan, determines no registration or export requirement, holds no classified information, and confers compliance with no select-agent, export-control or screening regime. A sovereign deployment is an implementation engagement, scoped per client. Records and timestamps attest integrity and existence as of a date, not the adequacy of any plan or the wisdom of any research; those judgments remain with the organisation, its overseers and its counsel.
Regulatory references on this page are orientation, not legal advice: see Sources & verification.