Compliance
EU Data Act: what must a software company do, step by step?
The EU Data Act applies since 12 September 2025. Learn who is in scope, the dates that matter, and a step by step plan for software and cloud companies.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
EU Data Act: what evidence and documents should you prepare?
The Data Act has applied since 12 September 2025. A checklist of evidence by chapter for makers of connected products, data holders and cloud providers.
Oct 18, 20264 min read
Compliance
What does the EU Cyber Resilience Act require, and when?
The CRA covers products with digital elements sold in the EU. Reporting duties began 11 September 2026; the main obligations apply from 11 December 2027.
Oct 18, 20264 min read
Compliance
EU AI Act for a startup founder: what applies and when
The EU AI Act sorts AI into four risk levels with staged dates. A founder must decide which tier a product falls in and which role the company plays.
Oct 18, 20264 min read
Compliance
EU AI Act: what does a CTO need to decide and when?
The EU AI Act applies in stages, with high risk rules moved to December 2027 and August 2028. A CTO should decide classification, owners and logging.
Oct 18, 20264 min read
Compliance
EU AI Act for product managers: classify your features first
The EU AI Act sorts AI systems into four risk levels. Product managers should classify each feature, check prohibited uses and confirm current dates.
Oct 18, 20264 min read
Compliance
EU AI Act for DevOps leads: dates, logs and duties
The EU AI Act sets dates by risk class. DevOps leads should track the 2026 and 2027 milestones, plan logging for traceability and ask legal which role applies.
Oct 18, 20264 min read
Compliance
EU AI Act: what should a first security hire know?
The EU AI Act sorts AI by risk and applies in stages through 2028. Learn the tiers, the dates the Commission lists, and the first questions to ask at work.
Oct 18, 20264 min read
Compliance
How do you set up cross-border data transfers that protect privacy?
Under GDPR, move personal data abroad only on an adequacy decision or an Article 46 tool such as SCCs. Map your flows, pick a tool, assess the destination.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.