| NIS2 | Resilience, incident handling, supply-chain security | Durable execution and recovery, tamper-evident logs, immediate supplier revocation |
| DORA | Digital operational resilience in financial services | Deterministic, reconstructable execution history and third-party containment |
| GDPR | Data minimisation, erasure rights, purpose limitation | Personal data stays local; only proofs and signals are federated |
| EU AI Act | Traceability, logging and human oversight for AI | Bounded AI actors, human approval gates, decision evidence |
| ESPR / Digital Product Passport | Product data, traceability and lifecycle transparency | Versioned, verifiable digital assets with lineage and proof |
| eIDAS 2.0 | Qualified trust services and legal evidence | Nitrotick Qualified Anchor with external qualified trust anchoring |
| ISO 27001 / ISO 22301 | Information security and business continuity | Audit-ready evidence and durable recovery of critical processes |