NIS2, GDPR and the AI Act in one plan
Three overlapping regulations: an integrated compliance plan, designed in upfront, becomes a service the firm can replicate for every client.
Professional Firms & Consultants
NIS2, AI Act and GDPR compliance for firms and consultants.
Law firms, accountants, consultants and advisory firms that must govern security, privacy and AI under the pressure of NIS2, GDPR and the EU AI Act on behalf of their clients. The challenge: turning regulation into a scalable service and a competitive advantage.
Your challenges
Compliance services to deliver
Professional firms and consultants need tools to industrialise GDPR audits, NIS2 gap analysis and AI Act classification for their clients.
Measurable posture
Real visibility into assets, risks and exceptions, no more partial dashboards stitched together by hand.
Board-ready reports
You need metrics the board, management and clients can actually understand, without resorting to technical tool screenshots.
How we can help
Product
Product
Product
Solution
Solution
Solution
Solution
ProductDataGovern
GDPR + NIS2 + EU AI Act in one on-premise platform. Cross-Regulation Gap, AI Risk Classification, board-ready dashboard.
ProductCyberAgent
Asset discovery, automated pentest, AI risk prioritization and NIS2 compliance manager.
ProductAdmina Enterprise
Open framework to govern AI applications in production: PII redaction, audit trail, bidirectional policies.
SolutionCybersecurity
CISO-as-a-service consulting and ongoing support on posture and remediation.
SolutionArtificial Intelligence
EU AI Act consulting, policy and AI governance for the firm and its clients.
SolutionCloud & Web Apps
Web applications and cloud architectures to digitise the firm's services.
SolutionLinux Services & Systems
Domains, hosting, PEC and email infrastructure for the firm and its clients.
Insights
Decree 179/2026: AI authorities, fines, work and training
The Italian Official Gazette of 8 October publishes Legislative Decree no. 179 of 7 October 2026 on the powers of the national AI authorities and on training. AgID is the notifying authority, ACN handles market surveillance and is the single point of contact, Banca d'Italia, CONSOB and IVASS cover high-risk systems in their sectors. Penalties up to €35 million or 7% of turnover, a regulatory sandbox, employment decisions reserved to a person. In force from 23 October.
Cyber Resilience Act: Italian decree, ACN and penalties
On 2 October the Italian Council of Ministers gave preliminary approval to the legislative decree adapting national law to Regulation (EU) 2024/2847. ACN is the notifying authority and the market surveillance authority and may rely on the Guardia di finanza; the AI authorities, Banca d'Italia, CONSOB, IVASS and the data protection authority supervise in their own areas. Consumer complaints go to CSIRT Italia, with an SME channel, proportionate fees and a regulatory sandbox, the Sandbox-CRA.
AI Act: the police and biometrics decree is published
Legislative decree 160 of 9 September 2026 appeared in the Italian Official Gazette on 15 September and takes effect on the 30th. It adds the new Article 437-bis of the criminal code, which also reaches the professional deployer who omits human oversight, and a civil chapter that makes four AI Act artefacts disclosable in court while presuming the causal link. One of the two decrees approved in August is out; the other is not.
Frequently asked questions
How can a firm handle NIS2, GDPR and the AI Act in one plan?
DataGovern brings GDPR, NIS2 and the EU AI Act into one on-premise platform, with Cross-Regulation Gap and AI Risk Classification. The compliance plan is designed upfront and becomes replicable for every client, instead of being rebuilt case by case.
How do you industrialise GDPR audits and NIS2 gap analysis for clients?
You need tooling that delivers the service at scale: asset discovery and automated pentest from CyberAgent, plus the NIS2 compliance manager and AI Act classification on DataGovern. Audits and gap analysis then become a recurring service rather than a one-off project.
How do you govern the AI tools used by the firm and its clients?
Admina is an open framework to govern AI applications in production, with PII redaction, audit trail and bidirectional policies. EU AI Act consulting adds AI policy and governance for the firm and its clients.