Compliance Check: Which obligations apply to your company?
Seven short questions about size, industry and activities. Then you see which regulations apply to you and why, with deadlines, measures and penalties.
The Compliance Check matches your answers against the PathHub compliance library: over 100 regulations from the EU, Germany, Austria and Switzerland, including NIS2, the EU AI Act, whistleblower protection, the European Accessibility Act, e-invoicing and working time recording. For each obligation you see why it applies, which deadlines run and what to do next.
How it works
- Answer the questionsCountry, employees, revenue, industry, NIS2 sector and what applies to you.
- Read the resultObligations that need action, points to check and what does not apply, each with the reason.
- Check deadlinesKey dates are shown for NIS2, the AI Act, e-invoicing and other obligations.
- Create a planOne click turns any obligation into an implementation plan, free and without sign-up.
What the check covers
A selection of regulations and when they apply. The check also covers industry rules and basic employer obligations.
| Regulation | Applies if | Key date |
|---|---|---|
| NIS2 (German BSI Act) | from 50 employees or €10m revenue and activity in a NIS2 sector | since 6 Dec 2025 |
| EU AI Act | as soon as AI tools are used (AI literacy duty) | since 2 Feb 2025 |
| Whistleblower protection | from 50 employees | since 17 Dec 2023 |
| Accessibility (EAA, BFSG) | when selling online to consumers | since 28 Jun 2025 |
| E-invoicing (Germany) | receiving for everyone; issuing depending on prior-year revenue | 2025, 2027, 2028 |
| Data protection officer (Germany) | from 20 people regularly processing personal data | applies |
| Working time recording | for all employers | since 13 Sep 2022 |
| Cyber Resilience Act | for products with software or connectivity | 11 Sep 2026, 11 Dec 2027 |
| Supply Chain Act (Germany) | from 1,000 employees | applies |
Frequently asked questions
Is the check legal advice?
No. The check gives well-founded guidance based on the PathHub compliance library. Whether a regulation applies in a specific case often depends on details. The check lists those under "Please check". For a binding assessment, talk to your legal or data protection adviser.
What happens to my answers?
For the evaluation, the answers are sent to our server at Hetzner in Germany and are not stored there. They only cover size, industry and activities, no names or contact details. Your browser keeps your answers so they are still there on your next visit.
What if I do not know whether we are in a NIS2 sector?
Choose "Not sure". NIS2 then appears under "Please check". For Germany, the BSI offers its own assessment that asks about the sectors in detail.
How current are the regulations?
The compliance library is maintained continuously. The date of the latest update is shown below every result.
Is the check free?
Yes, without sign-up and at no cost. Implementation plans for single obligations can also be created for free without an account.
What does a PathHub account add?
With a free account the result becomes a compliance roadmap with measures, owners and evidence. From the Team plan you also get the compliance calendar with reminders and approvals with history.
Obligations identified, now implement them
Describe an initiative in one sentence, for example "Implement NIS2 in our company". PathHub AI creates the complete plan with phases, owners, budget, risks and the matching obligations, free and without sign-up.
Create a plan for free →