What a SaaS or IT company must file in the EU in 2026
This profile assumes a small software or IT company that relies on cloud infrastructure, so it adds obligations aimed at digital and cloud-dependent businesses - the AI Act's transparency duties, NIS2 for critical digital infrastructure, cybersecurity requirements for software products - alongside the standard tax and reporting calendar. Your actual exposure depends on whether you build AI systems, handle personal data at scale, or count as an essential or important entity under NIS2, so treat this as a starting shortlist rather than a final answer.
This page assumes a specific starting profile: SaaS or IT company, in the EU. It's a starting point, not tailored advice - your actual obligations depend on your exact sector, turnover and how you operate.
From this date cloud and data-processing providers may no longer charge customers for switching to another provider or for exporting their data (egress). Contracts must already allow termination and migration within 30 days, and providers must offer export in machine-readable formats.