The regulations we cover
Every sector has its own, and it’s almost never just one. That is why Atalaya GRC brings the main European and Spanish compliance regulations together in a single platform. It then tells you which ones apply to you based on your services. Many of them also share requirements. For example, one ISO 27001 control often serves NIS2, DORA or the ENS as well. Each guide summarises one of these compliance regulations from its official text. You can also check that text on EUR-Lex or in Spain’s BOE (Official State Gazette). Pick yours and find out what it requires.
Personal data protection: records of processing, rights, impact assessments and breach notification within 72 hours. It also sets fines of up to €20M or 4%.
View regulation →DORADigital operational resilience for the financial sector. Applicable since January 2025 to banks and insurers, and also to their critical technology providers.
View regulation →NIS2Cybersecurity for 18 essential and important sectors. It also sets 24h/72h deadlines, management accountability and maximum fines of at least €10M or 2%.
View regulation →EU AI ActGovernance of artificial intelligence systems. Transparency, training and risk classification, with milestones already in force and high-risk obligations in December 2027 and August 2028.
View regulation →ENS
Spain’s National Security Framework for the public sector and its providers. In addition, it requires categorisation (basic, medium, high) and conformity to work with the public administration.
View regulation →CRACyber Resilience Act for manufacturers of digital products. Security across the whole lifecycle, vulnerability reporting and CE marking.
View regulation →ISO 27001 / 22301Information security and business continuity. Together, they are also the best foundation: one control you reuse across NIS2, DORA and ENS.
View regulation →Data ActData Act for connected products and cloud services. It also guarantees user access to their data, switching provider without obstacles and the end of exit charges.
View regulation →
Not sure which compliance regulations apply to you?
Atalaya GRC tells you based on your services. It also tracks the deadlines of your compliance regulations and warns you before they fall due.
