Who we help

Non-EU companies serving EU customers

EU rules follow your customers. A US, UK or other non-EU company can fall under GDPR, NIS2, DORA contract requirements or the AI Act simply by serving people and organisations in the EU. We establish which rules apply and prepare what your EU customers will ask for.

The first conversation is free. Scope and price are confirmed in writing before work starts.

Clarify your EU obligations

Is this you?

  • You are established outside the EU — for example in the US or the UK — and sell to EU businesses or consumers.
  • Your EU customers are banks, insurers or NIS2 entities and send you questionnaires and contract clauses.
  • You offer cloud, data centre, managed, online marketplace or similar digital services in the EU, or AI systems placed on the EU market.

Where EU rules reach you

GDPR

Applies when you offer goods or services to people in the EU or monitor their behaviour (Art. 3(2)); you may then need a representative in the EU (Art. 27).

NIS2

Certain digital providers not established in the EU but offering services there — cloud, data centre, CDN, DNS, managed and managed security services, online marketplaces, search engines, social networks — must designate a representative in a Member State (Art. 26(3)).

DORA

Your EU financial customers must apply DORA contract clauses to you (Art. 30). If you are designated a critical ICT third-party provider, you need an EU subsidiary within 12 months (Art. 31(12)).

AI Act

Providers outside the EU of high-risk AI systems or general-purpose AI models must appoint an authorised representative in the EU (Art. 22 and 54).

How we help

StepWhat you receivePrice
Applicability assessmentWhich EU rules apply to you, through which customers and services, and whether a representative is requiredfrom €900
Answer EU customer requirementsQuestionnaires, DORA clauses and evidence prepared to European expectationsby quotation
Assessment and evidence packOne regulation, gaps marked, evidence organised for your EU customersfrom €7 900
External expert rolesA named EU-based specialist for the recurring requestsfrom €1 400 / month

Read more

Boundaries

  • We are not a certification body and do not issue legal opinions; legal questions are commissioned separately from a lawyer.
  • We do not act as a statutory EU representative (under GDPR, NIS2 or the AI Act) — that is a separate legal role.
  • Responsibility for decisions and reporting stays with the organisation’s management.

Clarify your EU obligations

EU law first, national law where it applies. EU regulations such as DORA, the AI Act and the GDPR apply directly in every Member State. Directives such as NIS2 are transposed into national law, so scope details, authorities, reporting channels and deadlines depend on the Member State where you are established or operate. Examples on this site often use Bulgarian law; in each engagement we confirm the national law that applies to you and involve local counsel where needed.