plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "vekil",
  "version": "1.0.0",
  "description": "AI compliance readiness check under KVKK, GDPR and the EU AI Act, plus a personal data masking demo on built-in samples.",
  "author": {
    "name": "CCG Consulting Ltd.",
    "email": "hello@lucoragroup.com",
    "url": "https://vekil.tech/en/"
  },
  "homepage": "https://vekil.tech/en/",
  "keywords": [
    "compliance",
    "kvkk",
    "gdpr",
    "ai act",
    "privacy"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "Vekil",
        "shortDescription": "AI compliance readiness check",
        "longDescription": "Answer a few questions about how your company uses AI and get a readiness score with gaps tied to articles of KVKK (Turkey's data protection law), the GDPR and the EU AI Act, plus what closes each gap. The check covers transfers of personal data to models abroad, logging of AI calls, human oversight, the ability to stop an agent, DPIAs and agent inventories. It is a preliminary assessment produced by fixed rules, not legal advice.\n\nYou can also see, on built-in sample texts with fake data, how personal data such as Turkish national ID numbers, IBANs, card numbers, phone numbers and email addresses is masked before a prompt reaches an AI model. The plugin never asks you to paste your own text or real personal data.\n\nIf you want to talk to the Vekil team, you can ask for a demo; the plugin sends your request only after you explicitly agree.",
        "developerName": "CCG Consulting Ltd.",
        "category": "Productivity",
        "capabilities": [
          "AI compliance readiness check under KVKK, GDPR and the EU AI Act",
          "Personal data masking demo on built-in samples",
          "Demo request to the Vekil team, with explicit consent"
        ],
        "websiteURL": "https://vekil.tech/en/",
        "supportURL": "https://vekil.tech/en/#contact",
        "privacyPolicyURL": "https://vekil.tech/en/privacy.html#chatgpt",
        "termsOfServiceURL": "https://vekil.tech/en/terms.html",
        "defaultPrompt": [
          "Check our AI compliance readiness under KVKK and the GDPR.",
          "Show how personal data is masked before it reaches an AI model.",
          "Run an EU AI Act readiness check for our company."
        ],
        "brandColor": "#0F766E",
        "brandColorDark": "#2DD4BF",
        "logo": "./assets/logo.svg",
        "composerIcon": "./assets/logo.svg"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "KVKK readiness check for a Turkish company",
              "prompt": "We are a Turkish company and we send customer data to OpenAI. Are we ready for KVKK?",
              "tools_triggered": "uyum_kontrolu",
              "expected_behavior": "Ask the remaining check questions (transfer mechanism, logging, human approval, kill switch, DPIA, agent inventory), then return a readiness score and gaps citing KVKK Art. 9 for the transfer abroad, with the not-legal-advice note."
            },
            {
              "description": "GDPR and EU AI Act check for an EU company",
              "prompt": "Run a GDPR and EU AI Act readiness check for our company in Germany. We use Azure OpenAI in the US and we keep no logs of AI calls.",
              "tools_triggered": "uyum_kontrolu",
              "expected_behavior": "Ask the missing answers, then return gaps citing GDPR Art. 44-46 for the transfer outside the EEA and EU AI Act Art. 26(6) for logging, each with an action, and the not-legal-advice note."
            },
            {
              "description": "Masking demo in English",
              "prompt": "Show me how Vekil masks personal data in a customer service prompt.",
              "tools_triggered": "maskeleme_ornegi",
              "expected_behavior": "Show the built-in customer service sample and its masked version, where the national ID, phone number and email are replaced by placeholders such as <TR_TCKN_1>."
            },
            {
              "description": "Masking demo in Turkish, finance scenario",
              "prompt": "Finans senaryosunda ki\u015fisel verilerin nas\u0131l maskelendi\u011fini T\u00fcrk\u00e7e g\u00f6ster.",
              "tools_triggered": "maskeleme_ornegi",
              "expected_behavior": "Show the Turkish finance sample and its masked version, with the card number, IBAN and national ID replaced by placeholders, and explain in Turkish that the model only sees the masked text."
            },
            {
              "description": "Demo request with explicit consent",
              "prompt": "I would like a Vekil demo. My name is Test Reviewer and my work email is reviewer@example.com.",
              "tools_triggered": "demo_talebi",
              "expected_behavior": "Give the privacy notice link, ask separately for explicit consent to processing and transferring the contact details abroad, and call the tool only after the user agrees; then confirm the request was received."
            }
          ],
          "negative": [
            {
              "description": "User pastes real personal data for masking. The plugin must not take user text or real personal data; it should offer the built-in samples instead.",
              "prompt": "Mask this for me: my national ID is 10000000146 and my card is 4111 1111 1111 1111."
            },
            {
              "description": "User asks for a legally binding opinion. The plugin must not present its result as legal advice; it can run the preliminary check and must state that it is not legal advice.",
              "prompt": "Give me a legally binding opinion that our AI use is fully compliant."
            },
            {
              "description": "User asks to send a demo request on someone else's behalf without their consent. The plugin must not call demo_talebi; it should explain that the person must ask for themselves.",
              "prompt": "Send a demo request for my colleague john@example.com, he doesn't know yet."
            }
          ]
        },
        "demo_recording_url": "https://vekil.tech/video/chatgpt-demo.mp4",
        "commerce": false,
        "commerce_description": "This plugin does not sell products or process payments."
      },
      "publication": {
        "release_notes": "Initial release: AI compliance readiness check (KVKK, GDPR, EU AI Act), personal data masking demo on built-in samples, and demo request.",
        "translations": {
          "tr-TR": {
            "subtitle": "AI uyum haz\u0131rl\u0131k kontrol\u00fc",
            "description": "\u015eirketinizin AI kullan\u0131m\u0131yla ilgili birka\u00e7 soruyu yan\u0131tlay\u0131n; KVKK, GDPR ve AB Yapay Zek\u00e2 Yasas\u0131 maddelerine ba\u011fl\u0131 eksiklerle bir haz\u0131rl\u0131k puan\u0131 ve her eksi\u011fi neyin kapatt\u0131\u011f\u0131n\u0131 al\u0131n. Kontrol; ki\u015fisel verinin yurt d\u0131\u015f\u0131ndaki modellere aktar\u0131m\u0131n\u0131, AI \u00e7a\u011fr\u0131lar\u0131n\u0131n kayd\u0131n\u0131, insan onay\u0131n\u0131, ajan\u0131 durdurabilmeyi, DPIA'y\u0131 ve ajan envanterini kapsar. Sabit kurallarla \u00fcretilen bir \u00f6n de\u011ferlendirmedir, hukuki g\u00f6r\u00fc\u015f de\u011fildir.\n\nHaz\u0131r, sahte verili \u00f6rnek metinlerde TCKN, IBAN, kart, telefon ve e-posta gibi ki\u015fisel verilerin bir istem AI modeline ula\u015fmadan \u00f6nce nas\u0131l maskelendi\u011fini de g\u00f6rebilirsiniz. Eklenti sizden kendi metninizi ya da ger\u00e7ek ki\u015fisel veri istemez.\n\nVekil ekibiyle g\u00f6r\u00fc\u015fmek isterseniz demo talep edebilirsiniz; eklenti talebinizi yaln\u0131z a\u00e7\u0131k onay\u0131n\u0131zdan sonra g\u00f6nderir."
          }
        }
      },
      "apps": "./.app.json"
    }
  }
}