Which regulations apply to your business?
You run a website? Collect emails? Sell online? Provide a cloud service? Each of these triggers specific EU regulatory obligations. Find your scenario below.
Quick reality check
GDPR
Applies if you process any personal data of EU residents
NIS2
Applies if you provide digital services and exceed size thresholds
EAA
Applies to all digital products and services from June 2025
What does your business do?
Select your scenario to see which regulations apply, what your obligations are, and what happens if you don't comply.
Company Website
You have a website? You have obligations.
Newsletter & Email Marketing
Collecting email addresses? Welcome to double opt-in territory.
Online Shop / E-Commerce
Selling online means regulatory obligations stack up fast.
SaaS / Cloud Platform
You process other people's data? That changes everything.
Business Email Communication
Every email your company sends is subject to regulations.
Customer Portal / User Accounts
User accounts mean identity data. Identity data means serious obligations.
Mobile App
Apps collect more data than websites — and the rules are stricter.
API / Developer Platform
APIs are invisible to users — but not to regulators.
Not sure? Quick self-check.
If you answer yes to 2 or more of these, you likely have regulatory obligations.
Most businesses check 3 or more. The question isn't whether regulations apply — it's which ones and how strictly.
See where you stand — in seconds
Our free scanner checks your website's security posture, SSL configuration, security headers, email authentication, and more. No account needed.
Scan your website for freeThis page provides general information about EU regulatory frameworks. It does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation. SiteGuardian documents your monitoring continuously — compliance is your organisation's responsibility.