The EU point where Europe can reach you.

The legal obligation

Non-EU controllers and processors caught by GDPR Article 3(2) must designate an EU representative — unless an exemption applies (Art 27(2): occasional processing, no large-scale, no special categories). Non-EU online platforms and marketplaces under the DSA (Art 2(3), 13) and non-EU AI providers and deployers under the EU AI Act (Art 22) similarly need a reachable person or entity inside the Union. The test is factual and open; during onboarding we tell you plainly which regime applies to your operations.

How we solve it

We are the designated point: a name and address in the EU, with a documented procedure behind every letter, per EDPB Guidelines 3/2018. Specifically:

• Written appointment under the signed mandate (Art 27(1); Recital 80 GDPR).
• Registered correspondence with supervisory authorities and data subjects, logged and forwarded to you on your chosen response SLA.
• Response handling — we respond only as you direct, with escalation on anything urgent.
• Records of Processing Activities held and made available on request (Art 30(4)) — in both engagement modes.
• Active cooperation with supervisory authorities on request (Art 31 GDPR; Art 58(1)(a)).
• Annual confirmation — review of contact details, mandate, and records currency, in writing.

What you provide

• Signed mandate / appointment form.
• Legal name + registration number + registered address.
• The EU point of contact you designate.
• Scope of EU operations (audience, volume, categories).
• Your contact staff (DPO or responsible person).
• Any existing compliance posture and prior regulator contact.

Pricing

Representation is provided through our established EU partner network — real point of contact, productized cost. Talk to us for a sizing call.