Map your profile once. Regingada turns EU digital regulation into a living, source-grounded model of what applies, what overlaps, and what becomes applicable when. For providers without an EU establishment, Regingada UG can act as the appointed EU representative. Built in Bamberg, Germany.
Software & appointed EU representation: Regingada UG (haftungsbeschränkt) · Legal advice on demand: the law firm Theo Funk — separate mandate
If your company has no EU establishment, you can appoint Regingada UG (haftungsbeschränkt) as your representative in the Union, where the relevant EU act allows a representative in Germany. It receives authority correspondence, logs it and forwards it to your team.
Several roles may apply at once. For the GDPR, DSA, AI Act and NIS2, a few yes/no questions indicate whether the role is likely required.
May apply toIntermediary services such as hosting, online platforms, marketplaces and messaging.
The statutory addressee in the EU for non-EU intermediary services — for the Digital Services Coordinator, the Commission and the EBDS.
From €1,480 a year, net; large enterprises on request
Start the questions: Art. 13 DSA →May apply toProviders placing a general-purpose AI model on the EU market, such as a large generative model.
The authorised representative for non-EU providers of GPAI models (Art. 54, since 2 Aug 2025) and — from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), Regulation (EU) 2026/1744 — of high-risk AI systems (Art. 22).
Art. 54: from €690 a year, net
Start the questions: Art. 54 AI Act →May apply toSaaS, apps and online services that offer goods or services to people in the EU or monitor their behaviour.
The EU representative for non-EU controllers and processors under Art. 27 GDPR — the point of contact for supervisory authorities and data subjects.
From €490 a year, net
Start the questions: Art. 27 GDPR →May apply toSuch as DNS, cloud, data centres, CDNs, managed (security) services, marketplaces, search engines and social networks, some only from medium size.
The EU representative for non-EU DNS, cloud, data-centre, CDN and other in-scope digital service providers — available on request.
Engagement terms on request
Start the questions: Art. 26(3) NIS2 →May apply toConnected products, related services and data processing services such as cloud and edge.
The contact for competent authorities, in addition to or instead of the entity (Article 37(12)). On request, the representative forwards compliance evidence provided by the entity to those authorities.
From €1,480 a year, net; large enterprises on request
Request scoping →May apply toData intermediation services and data altruism organisations.
The legal representative for providers and organisations not established in the Union. The designation also determines which Member State has jurisdiction.
Do several acts apply? The free Digital Twin shows which duties your inputs point to.
To the Digital Twin ↓Not covered by the fee: any duties the acts place on your company itself.
Regingada UG is not a law firm and does not provide legal advice within the meaning of the German Legal Services Act (RDG). Its role is limited to the appointed representative function: regulatory contact handling, receipt and forwarding of correspondence, communication coordination and documentation. Legal assessment and advice require a separate legal mandate.
Three steps per regime: what you provide and what you receive. Several regimes share one onboarding, each with its own designation.
A guided questionnaire (GDPR, DSA, AI Act, NIS2) or your request (Data Act, DGA) records where you are established, the services you offer and your connection to the EU.
A written contract per regime sets out tasks, information channels, escalation paths and response times.
Where the act provides for it, the designation is notified or published. Regingada UG notifies the Digital Services Coordinator (DSA) on your behalf.
Authorities are notified only after the representation contract is signed.
Forwarding goes to the people you name in the representation contract.
Fixed annual fees by regime and company size: GDPR from €490, AI Act Art. 54 from €690, DSA and Data Act from €1,480 a year. NIS2, the DGA roles and large DSA and Data Act engagements are quoted individually.
| Role | Annual fee by company size | ||||
|---|---|---|---|---|---|
| Micro | Small | Medium | Large | ||
| DSA Article 13 | €1,480 | €2,400 | €3,900 | On request | €1,480 (micro), €2,400 (small), €3,900 (medium); large enterprises on request. Includes the Article 11 point-of-contact function. |
| AI Act Article 54 | €690 | €1,290 | €2,900 | €6,400 | €690 (micro), €1,290 (small), €2,900 (medium), €6,400 (large) |
| AI Act Article 22 (high-risk systems, from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), Regulation (EU) 2026/1744): quoted individually, from €2,400 / year | |||||
| GDPR Article 27 | €490 | €990 | €2,290 | €5,200 | €490 (micro), €990 (small), €2,290 (medium), €5,200 (large) |
| Data Act Article 37 | €1,480 | €2,400 | €3,900 | On request | €1,480 (micro), €2,400 (small), €3,900 (medium); large enterprises on request |
| NIS2 Article 26 | Engagement terms on request | ||||
| DGA Articles 11 & 19 | On request | ||||
Company size under EU Recommendation 2003/361, confirmed during onboarding. Micro: fewer than 10 employees and up to €2m annual turnover · Small: fewer than 50 and up to €10m · Medium: fewer than 250 and up to €50m · Large: above these thresholds See representative pricing
Terms
Fixed annual fees by company size for the GDPR, DSA, AI Act (Art. 54) and Data Act roles — published upfront (DSA and Data Act: large enterprises on request); NIS2 and DGA quoted individually. A separate contract, not a software plan.
A founder who practices the law his software maps — and a boundary that protects you.
“Every mandate began the same way — re-tracing how five EU regimes interlock for that one client. So I built the software that does the mapping: it classifies, checks and plans. It surfaces the duties your inputs point to; it does not take on their handling. Where the duty is to name an EU representative, Regingada can take on that named operational role under its own contract — service of documents, authority routing and documentation, not legal advice. That remains my firm’s work in the mandate, together with the legal judgment.”
Established outside the EU? Several EU digital laws require you to appoint a representative inside the Union. Regingada UG (haftungsbeschränkt) — a compliance operations company owned by Theo Funk, a German attorney (Rechtsanwalt) — can act as your appointed EU contact and coordination point. Legal advice, where needed, comes separately from the independent law firm Theo Funk, or from counsel of your choice.
Representation: Regingada UG (haftungsbeschränkt)
Legal advice: Law firm Theo Funk, an independent law firm — separate mandate, or counsel of your choice. Whether an appointment is required at all: when you must appoint one, and when not — explained by the law firm
You do not have to brief your representative and your counsel twice — the hand-off is built in, with your consent.
Built as two entities on purpose: dedicated representation and independent legal counsel, each with a clear role.
Regingada UG (haftungsbeschränkt) provides the operational representative function. It does not provide legal advice. Optional legal advice is available from the law firm Theo Funk under a separate mandate, or from counsel of your choice. Both tracks can be onboarded in one coordinated process — two clear roles, two separate contracts. And where a matter requires it, they continue to work together — one under the representation contract, the other under the legal mandate, information shared only with your consent.
When it gets serious, the roles stay clear: Regingada UG (haftungsbeschränkt) holds the appointed representative function — the named EU point of contact that receives authority correspondence and routes it, documented and without delay. Legal judgment stays with the firm, under a separate mandate: it advises on the obligations, accompanies audits and, where needed, proceedings. The software shows the duty; the representative routes the mail; the firm handles the law.
Appointed EU representative & software: Regingada UG (haftungsbeschränkt) — owned by Theo Funk, a German attorney (Rechtsanwalt), no legal advice · Legal advice: independent law firm Theo Funk (RAK Bamberg) — separate mandate.
Prefer to talk? +49 951 16090321 · office@regingada.com
When the written representation contract is signed. Authorities are notified only after that, where the act provides for notification.
Where the controller has designated a representative under Article 27 GDPR, the representative's name and contact details belong in the information under Articles 13(1)(a) and 14(1)(a) GDPR. You receive the contact block during onboarding.
Under Article 27(4) GDPR, the representative is also a point of contact for data subjects. Where Regingada UG (haftungsbeschränkt) is your representative, it receives such requests, logs them and forwards them to you with documentation.
Regingada UG (haftungsbeschränkt) logs incoming authority correspondence and forwards it with documentation: first forwarding within one business day. It answers onboarding questions within one business day (CET/CEST).
Yes, Regingada UG (haftungsbeschränkt) can hold the GDPR, DSA, AI Act, NIS2, Data Act and DGA roles for the same company, where the act allows a representative in Germany. Each role rests on its own written representation contract: one onboarding, several designations.
Regingada UG (haftungsbeschränkt) is established in Bamberg, Germany. The Article 13(4) DSA notification therefore goes to the Digital Services Coordinator at the Bundesnetzagentur (§§ 12, 14 DDG), and for NIS2 a representative in Germany makes the BSI competent (§ 60(3), third sentence, BSIG).
For the DSA, no: Article 13(5) DSA rules it out expressly. The GDPR has no such sentence; under recital 80, the representative acts on behalf of the controller or processor.
For the GDPR and the Data Act, Regingada UG (haftungsbeschränkt) can take over existing designations through a structured handover and provides the same handover if you later switch representatives. The audit trail is yours.
No: every engagement is subject to onboarding and vetting and may be declined without stating reasons. Representation is offered only to entrepreneurs within the meaning of § 14 BGB, legal persons under public law and public-law special funds.
Not offered: representation in the United Kingdom, the responsible economic operator role under the General Product Safety Regulation (GPSR), and the data protection officer function.
Europe's digital market is open to providers from around the world. We want providers from outside the Union to enter it with a named point of contact and clear responsibilities.
Where EU digital laws require a representative in the Union, Regingada UG (haftungsbeschränkt) can take on that role: under the GDPR, DSA, AI Act (Art. 54), NIS2, Data Act and DGA.
We treat representation as ongoing work for the full term of your representation contract. An appointment proves its value when an authority needs to reach you.
The Digital Twin makes EU digital law readable, role by role and date by date. Legal questions on the individual case are handled by the independent law firm Theo Funk, under a separate mandate.
Regingada is developed in Germany. Regingada UG provides software and orientation; the independent law firm Theo Funk (Bamberg Bar) provides legal assessment under a separate engagement. Your twin data stays in your browser; wherever data leaves the device (AI queries, document uploads), every flow is disclosed. No hosting sticker. Traceable data paths instead.
Free, no account needed: see which duties your inputs point to, including across several acts at once.
Not six separate tools — one model of EU digital duties. A short self-check about your case; the Legal Map then marks the nodes your answers point to. That marked map is your twin: it shows where your inputs point and what changes when an answer changes.
The Legal Map is the engine of your Digital Twin — a source-grounded model of EU digital law that turns your profile into orientation: which provisions your inputs point to, and from when.
Explainer video, 1:54, with sound (AI-generated voice); the spoken text is also shown in the picture. What is your Digital Twin? Demo profiles: one AI provider, one changed answer. The suite has twins for the DSA, AI Act, GDPR, DMA, NIS2 and the Data Act, plus a cross-regulation view. A demo AI provider established in the EU starts with a self-check: free, no account needed. The Legal Map marks the nodes these answers point to. The marking describes; it decides nothing. With “Edit answers”, one answer changes: established outside the EU. The map now adds AI Act Article 22, relevant from 2 December 2027 for Annex III systems, and Article 54. [On screen: AI Act Art. 22 from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), Regulation (EU) 2026/1744; Art. 54 since 2 August 2025.] The horizon view highlights upcoming dates that relate to the profile. The AI Act obligations cockpit adds a card for Articles 22 and 54, with effort and tasks. The DSA dashboard, here with a preset example company outside the EU: open obligations by phase and effort, and the twin’s status. The VLOP cockpit groups duties of designated very large platforms, such as the risk assessment under Article 34. The NIS2 twin shows the reporting steps of a sample incident; the GDPR twin, a DPIA trigger. In the DSA twin: established in the EU, no hint of a representative; outside, the cockpit points to Article 13. With or without a twin, Regingada can take on EU representation, also for NIS2, the Data Act and the Data Governance Act. Regingada Compliance Suite. Orientation, not legal advice. Demo profiles, sample data. AI-generated voice.
A short self-check about your case, rule-based and reproducible, with no account required.
The Legal Map marks the nodes your answers point to, for the DSA, AI Act and GDPR, each grounded to its legal source.
This marked map is your twin: it shows where your inputs point. Change one answer and the marking moves with it.
If your twin points to a representative role, you can request the appointment of Regingada UG directly.
Go to the request form →The twin mirrors and orients — it does not advise. It shows which duties your inputs point to; it does not decide them, guarantee anything or take them on. Legal advice is not part of the twin and is not provided by Regingada UG (haftungsbeschränkt); it would require a separate engagement with a person authorised to provide it.
No customer counts — this is the corpus your twin runs on, rendered live in the suite: open the product and reconcile.
92 curated cross-regulation links 12 L9 demo alerts (sample data) 0 external loads by default
92 = the curated cross-regulation layer of the heatmap, DMA and NIS2 included; the legal map itself holds 119 cross-regime links (KPI band below).
Six modules build and feed one living twin — the Legal Map is the engine, the others are how the twin classifies, checks and plans. Every module reads from the same corpus above.
963 nodes (DSA, AI Act, GDPR and more) as one interactive, source-grounded graph. Filter by regime, concept or case law; nearly every node carries its legal source.
Where DSA, AI Act, GDPR, DMA and NIS2 overlap — curated links, not statistical guesses. One measure can bear on several duties, and the duties stay cumulative; the heatmap shows exactly where.
VLOP, Annex IV, DPIA, gatekeeper and cyber duties as working checklists. Every obligation grounded to its legal source, with phase and concrete tasks.
Full-text and concept search across the entire corpus — completely offline. One shortcut from any question to article, case law or concept.
Optional Claude-powered explanations via a Cloudflare Worker, strictly opt-in and only with an access code, which Regingada UG can issue to customers with a representation contract or a paid plan. The suite never requires it, and no request leaves your browser without your explicit action.
From anonymous self-check to a mandate-ready DRAFT artifact. The handoff to the firm is a deliberate, documented act — never automatic.
All five are demo scenarios with synthetic data — clearly labeled in the product. No real client data, ever.
We certify nothing and badge nothing — we map. Each cockpit lists its duties down to the article.
From notice to VLOP.
Your DSA twin: shows which platform duties apply — service-by-service, intermediary up to VLOP.
Art. 34/35 systemic-risk cockpit · notice-and-action, transparency and audit duties mapped.
Annex IV, operational.
Your AI Act twin: shows the classification of each AI system — prohibited, high-risk, transparency duties — with provider and deployer duties apart, and, separately, of each GPAI model (with or without systemic risk).
GPAI gating (Art. 51–56) · applicability timeline · technical-documentation cockpit.
DPIA, mapped.
Your GDPR twin: shows which duties your processing profile triggers — DPIA, transfers, DPO, employee data.
Art. 35/36 triggers with DSK lists · EDPB WP248 risk assessment · Art. 30 records.
Gatekeeper duties.
Your DMA twin: shows your CPS portfolio and threshold status in one run — through to the Art. 15 report.
Art. 5/6/7 obligations · interoperability and self-preferencing rules in one cockpit.
Cyber baseline.
Your NIS2 twin: shows whether your entity is essential or important — with 24 h / 72 h / 1-month reporting clocks.
Directive (EU) 2022/2555 · risk-management measures and reporting duties.
Seven regimes, one suite: the graph links the DSA, AI Act, GDPR and more down to article level; DMA, NIS2 and Data Act plug in as cockpits and search.
Open the full map →This is the map your twin reads. Nearly every node carries its legal source, every edge says why it exists; the corpus is curated and source-checked down to CELEX — and the product shows its work. You place yourself on the map, and the twin lights up the duties that apply.
Silent screen recording: first, a diagram groups AI Act Article 54, DSA Article 13 and GDPR Article 27 as provisions concerning representatives. The view then switches to a graph with colored regime clusters and cross-regulation links.
92 curated cross-regulation links
as rendered live in the suite — the curated heatmap layer, DMA and NIS2 included; the legal map itself holds 119 cross-regime links
Groundwork from one assessment can feed the next — DSA risk assessment, DPIA, AI Act FRIA (from Dec 2027) — but the duties stay cumulative: no assessment replaces the others. The suite shows exactly where they overlap — what a flat checklist misses.
Your twin doesn't stop at cartography. Five moves from first orientation to a documented handoff — four in the software, the fifth in the mandate.
A short quick check for the DSA, AI Act and GDPR feeds a deterministic engine — DSA tier up to VLOP, AI-Act risk class; the DMA and NIS2 cockpits add gatekeeper threshold status and the essential-or-important classification. Rule-based and reproducible.
Your profile triggers the duties indicated by your inputs — each with its article anchor, phase and concrete tasks.
Applicability timelines per regime, what-if scenarios and a horizon scanner of curated milestones that looks beyond the seven regimes.
Map each document to the duty it covers, then export working files (HTML, CSV, JSON). Your files stay in the browser.
Everything up to here is software: structured self-assessment, not legal advice. The appointed EU-representative function is available from Regingada UG (haftungsbeschränkt) under a separate representation contract; legal judgment and the legal handling of duties are the firm's work, under a separate mandate.
Reading the law is step one. Your twin classifies your profile, surfaces the duties your inputs point to, and puts them on a timeline — checklists, roadmaps and what-if scenarios a compliance team can actually run. Rule-based and reproducible: it indicates the duties, it does not decide them.
Every cockpit obligation grounded to its legal source
Seven seconds, no sound. 1: duty cards for Art. 35 and Art. 36 DSA, each with phase and tasks. 2: the view switches to the catalogue of risk mitigation measures under Art. 35. 3: two measures are ticked.
A 43 KB widget. The Regingada quick check on your own site — one sandboxed iframe, no tracker scripts.
<script src="suite-check.js" defer></script> <suite-check lang="en"></suite-check>
Fail-closed by construction: a missing server-side key set returns 503, a missing or invalid client key 403 — never data.
GET /api/v1/search?regime=dsa X-API-Key: <your-key>
Plug the corpus into your AI assistant as a Model Context Protocol server — grounded answers instead of hallucinated articles.
{ "mcpServers": { "funk-eu-digital-law": {
"command": "python",
"args": ["mcp_server/server.py"] } } }
The boundary is the feature: software output is a DRAFT and says so on every page. FINAL exists only after a lawyer takes the mandate — and responsibility.
Eight seconds, no sound. 1: a self-check question about the features of a service is answered with two ticks. 2: the regime profile shows the DSA as filled. 3: the button “Download orientation pack” is selected. 4: the sheet “Orientation summary (DRAFT)” opens.
In the software. Anonymous, no account — decision support under GDPR and RDG discipline.
The software generates a DRAFT document — expressly not legal advice, and labeled as such.
Optional, as a separate engagement: only the independent law firm Theo Funk turns a DRAFT into FINAL, after its own full legal review. A request for EU representation needs neither the twin nor this engagement.
Seven regimes, one living model of your duties, a hard boundary. The twin shows what applies; the legal work stays with the firm.
And when it gets serious: the appointed EU-representative function (Art. 27 GDPR · Art. 13 DSA · Art. 54 AI Act, since 2 Aug 2025 · Art. 22 AI Act from 2 December 2027 (Annex III) and 2 August 2028 (Annex I), Regulation (EU) 2026/1744) — by Regingada UG (haftungsbeschränkt) under a separate representation contract. Legal strategy, audits and proceedings — by the firm, in the mandate.
The Digital Twin is free to use for every regime, offline and without an account, and Regingada UG can unlock the opt-in AI assistant by access code for customers with a representation contract or a paid plan. Paid plans add tool and data depth (persistence, teams, monitoring, the Corpus API in preparation, white-label); legal advice only from a law firm under a separate engagement.
The Digital Twin — offline, in your browser.
Your twin, saved and synced.
Compliance as a team.
Your twin watches ahead.
White-label for firms & consultancies.
Software plans: indicative launch pricing, net of VAT — the paid plans are not yet open for purchase. The free Twin and the representative service are available today; representative fees are published in the price list.
Every plan is software. The appointed EU-representative function is a separate contract with Regingada UG (haftungsbeschränkt). Legal advice is a separate mandate with the law firm Theo Funk. Three clear lanes, one honest boundary.
Part IV · International
For international companiesFor companies based outside the EU: see which EU digital rules your inputs point to, whether a representative role may be relevant, and how your data is handled. Orientation, not legal advice.
Serving users in the EU can trigger duties under the DSA, AI Act or GDPR; which ones depends on your business. Without an account and without waiting, the Digital Twin lays out which rules your inputs point to and what each requires.
Established outside the EU? Depending on your activity, an EU representative may be required, e.g. under Art. 13 DSA, Art. 27 GDPR or Art. 54 AI Act. Part I sets out the roles, the published fees and the steps to designation.
Roles, fees and process: Part I ↑The Digital Twin runs in your browser; your inputs leave it only when you actively send them (opt-in AI request, submission), and the Trust Center describes these data flows. An EU data region (Frankfurt) for the server-side features is planned, not yet live.
Visit the Trust Center →Tell us where you are established and which EU designations you need. Regingada UG (haftungsbeschränkt) will send you the relevant terms and fees.
See the EU representative services
Questions about representation or the product: contact form · +49 951 16090321 · office@regingada.com
Legal advice is provided solely by the independent law firm Theo Funk under a separate engagement — not by Regingada UG.
Every page of regingada.com in one place — the appointment duties of all five regimes plus the DGA representative, the German-language pages, the sector profiles, the model cases, the open playbooks and the suite module by module.