EU exposure estimate — Regingada UG (haftungsbeschränkt)

Your profile

Registered seat In the EU/EEA Outside the EU/EEA

Size Under 10 employees 10-49 employees 50-249 employees 250+ employees

What applies (multiple answers) Processes personal data of EU data subjects Offers an AI system (provider) Deploys AI systems (deployer) Operates a platform, marketplace or hosting service with user content Connected products / IoT or data services Sector under NIS2 (energy, transport, health, digital infrastructure and others)

Which regimes the estimate covers

Pre-selected from your answers. Every card can be overridden — the pre-selection is a derivation, not a legal assessment.

Regime scope

GDPR DSA AI Act Data Act NIS2

DMA is deliberately absent: it binds designated gatekeepers only — a calculator row would be theatre for almost everyone.

How much structure exists already

Documented compliance structure No documented compliance structure yet Some policies and records exist Structure is documented and kept current

The factor applies to all ranges; the assignment is a self-assessment.

What an internal hour is worth to you

Internal hourly rate in EUR

Default 90 EUR/h as a neutral placeholder for internal full costs — please adjust it to your reality.

No other cost parameters enter the model.

Your estimated coordination range

Build your twin Visit the law firm

Read the eight seams behind the collision flags →
Non-EU seat? The five appointment duties, side by side →

The model, in the open

These are the numbers the calculator uses. They are editorial model assumptions, not measured data and not a quote.

Hours per year, internal coordination, per regime and company size

Regime	Under 10	10-49	50-249	250+
GDPR	20–60	50–140	140–350	350–900
DSA	30–80	60–160	160–400	400–1000
AI Act · provider	60–150	120–300	250–600	500–1200
AI Act · deployer	15–40	30–90	80–200	180–450
Data Act	20–50	40–110	100–250	220–550
NIS2	30–90	70–180	180–450	400–1000

The rules on top of the table

Provider and deployer together: the provider row plus 50 % of the deployer row.
AI Act switched on without a role: the deployer row as the conservative basis.
Maturity factor 1.25 / 1.0 / 0.7 multiplies minimum and maximum alike.
Rounding to the nearest 10 hours per regime, minimum 10; the total is the sum of the rounded rows.
Seat outside the EU: 10 to 30 additional coordination hours for each regime carrying an appointment duty (GDPR, DSA, AI Act as provider, NIS2). The surcharge is added before the maturity factor applies, so it scales with it. Data Act Art. 37 is named but not added.
EUR = hours times your internal hourly rate. External legal fees are not part of the model.

Model calculation for orientation — not legal advice, not a quote, not a commitment on effort or cost. Editorial model assumptions of Regingada UG, status 2026-08. DRAFT, wording subject to attorney review.

regingada.com/tools/exposure-rechner

EU exposure estimate — how much coordination does your footprint cost?