Guides
EU Compliance and Security Guides
Start with a topic. Each guide puts our articles in reading order and points to the free tools and templates for it. All articles: blog.
NIS2 · 13 articles
NIS2 Guide: Scope, Requirements, Reporting and Enforcement
Everything on the NIS2 Directive in one place: whether it applies, the Article 21 measures, incident reporting, board duties, fines and supply chain rules.
DORA · 10 articles
DORA Guide: Scope, ICT Risk, Incidents, Testing and Third Parties
Everything on DORA in one place: who it applies to, the 59 requirements, incident classification, the register of information, contracts, testing and exit plans.
GDPR · 23 articles
GDPR Guide: Legal Bases, Documentation, Rights, Breaches and Fines
A practical GDPR guide for companies: lawful bases, records of processing, privacy notices, DPIAs, processors, transfers, data subject rights, breaches and fines.
Cyber Resilience Act · 5 articles
Cyber Resilience Act Guide: Reporting, Requirements and Open Source
Everything on the EU Cyber Resilience Act in one place: reporting since 11 September 2026, the Annex I requirements from December 2027, open source, and how it relates to NIS2.
AI Act and AI agents · 12 articles
AI Act and AI Agents Guide: Timeline, Duties, GDPR and Security
The EU AI Act after the 2026 Digital Omnibus and the practical side of AI agents: AI literacy, transparency, GDPR, vendor checks, security and incident response.
Security for startups and SMEs · 13 articles
Cybersecurity for Startups and SMEs: Practical Guides
Practical cybersecurity for small companies: the first 20 controls, policies, incident response, vendor risk, security questionnaires, pentests, backups and training.