FAQ item index

Search every question across sub-FAQs

Find the exact question, open the source answer card, and copy a direct link to the anchored sub-FAQ response.

Indexed coverage
19of19items
Across 5 modules • Updated Jul 26, 2026
Author
Sorena AI
Published
May 9, 2026
Updated
Jul 26, 2026
DMA Article 11 Compliance Report Template

What is the DMA Article 11 compliance report template for?

The template structures the Article 11 report as an evidence file. For each designated core platform service and each applicable Articles 5 to 7 obligation, the gatekeeper is expected to confirm compliance as of a stated date and explain exhaustively how it complies. A request for specification under Article 8(3), or related specification discussions, does not remove the duty to report on that obligation.

For each measure, identify the obligation, service, pre-designation or post-designation measure, implementation date, product and geographic scope, technical or engineering changes, customer-experience changes, effects on fees or terms, user consultation, testing, indicators, monitoring systems, and any data-access procedure that third parties use.

  • Create separate standalone annexes for each designated core platform service.
  • For each applicable Articles 5 to 7 obligation, keep a compliance statement, a plain-English measure description, supporting data, and internal documents.
  • Explain why an obligation cannot apply to a core platform service only when that conclusion follows from the obligation's nature, and keep the reasoning separate from Article 9 suspension or Article 10 exemption issues.
  • Keep underlying raw data ready for Commission requests and define metrics clearly enough that a reviewer can reproduce calculations.
  • The template says the report materials should be searchable and machine-readable. It also says the submission and each annex should end with a declaration signed by the head of the compliance function.

What is the DMA Article 11 compliance report template for?

It is the Commission's template for the gatekeeper report required by DMA Article 11. The report describes, in a detailed and transparent way, the measures implemented to comply with Articles 5 to 7 for each designated core platform service, and it is paired with a non-confidential summary for publication.

Citations
DMA Article 11 Compliance Report Template

When should the report be filed and updated?

Article 11 sets the cadence: the first report is due within six months after designation under Article 3, and the report and non-confidential summary must be updated at least annually.

The Commission template also expects change tracking. If a gatekeeper previously submitted a compliance report, the latest report and non-confidential summary should highlight differences from the previous versions, including relevant annexes.

  • Maintain the six-month Article 11 reporting clock for every newly designated gatekeeper and the separate Article 3(10) compliance clock for every newly listed core platform service.
  • Schedule an annual refresh of the full report, annexes, and non-confidential summary.
  • As an internal control, review the evidence when a compliance measure, interface, API, ranking parameter, data flow, consent design, term, fee structure, or Commission dialogue changes; the statutory update floor remains at least annual.
  • Keep clean and redline versions so reviewers can see what changed between submissions.

Does asking the Commission for specification pause the Article 11 report?

No. The Commission template states that an Article 8(3) specification request or specification discussions do not free the gatekeeper from submitting a compliance report covering the obligations involved in that request or process.

Citations
DMA Article 11 Compliance Report Template

What should be public, confidential, and kept as records?

The full compliance report, annexes, and underlying data support the Commission's assessment. Article 11 separately requires a non-confidential summary, and the Commission template says that summary should be self-standing, follow the same structure, cover all sections and sub-sections, and enable third parties to provide meaningful input.

Confidential treatment should be handled deliberately. The template says information may be omitted from the non-confidential summary only if it is a business secret or otherwise confidential, and it asks gatekeepers to use meaningful ranges, baselines, or aggregated data for confidential numerical data rather than redacting entirely.

  • Keep a public-summary version that mirrors the full report structure and gives a faithful picture of every section.
  • Keep a confidential register that explains each redaction, the protected interest, and the replacement range, baseline, or aggregation used in the public summary.
  • Retain evidence for the compliance function: head-of-compliance involvement, monitoring role, management-body reports, risk-of-non-compliance reports, management replies, and approved compliance policies.
  • Keep feedback records from EU business users and end users, grouped by topic when there are more than ten instances, with actions taken and any anonymity or confidentiality request respected in the non-confidential description.

What practical records should sit behind each DMA Article 11 template answer?

Each answer should have an owner, service, obligation, implementation date, measure description, technical and customer-experience evidence, supporting data and methodology, testing or survey outputs, monitoring-system outputs, business-user or end-user feedback, compliance-function review, and a public-summary treatment that shows what was omitted or aggregated for confidentiality.

Citations
DMA core platform services

What counts as a core platform service under the DMA?

Article 2(2) lists ten core platform service categories: online intermediation services, online search engines, online social networking services, video-sharing platform services, number-independent interpersonal communications services, operating systems, web browsers, virtual assistants, cloud computing services, and online advertising services provided by an undertaking that also provides another listed core platform service. Software application stores are included within online intermediation services; they are not an eleventh category.

A service-scope answer should name the category, explain the product boundary, and identify whether the Commission has listed that service in a gatekeeper designation decision. The label used in a product roadmap is not enough; the DMA analysis turns on the Article 2 category and the service that is an important gateway for business users to reach end users.

  • Map the product to one Article 2 category before applying Articles 5 to 7 obligations.
  • Treat advertising separately only where the DMA online-advertising category is supported by the undertaking's other core platform services.
  • Do not collapse integrated products automatically; the Annex says services may be distinct where they are in different categories or used for different purposes.
  • Do not split a service mainly by country-code domain, generic domain, or geographic attribute when calculating active users.

Is every platform feature a DMA core platform service?

No. A feature is relevant to core platform service analysis only if it falls within an Article 2(2) category and forms part of the service boundary being assessed. Articles 5 to 7 apply only after the Commission designates the undertaking and lists the service. Record the category, product boundary, user purpose, active-user method, and designation decision instead of treating every feature or product of a gatekeeper as covered.

Citations
DMA core platform services

Which evidence supports a DMA gatekeeper designation assessment?

Article 3 designates an undertaking as a gatekeeper when it has significant impact on the internal market, provides a core platform service that is an important gateway for business users to reach end users, and has an entrenched and durable position or is expected to have one soon. The quantitative presumption uses business-size evidence plus service-level user evidence.

For the user-gateway presumption, the DMA threshold is at least 45 million monthly active end users established or located in the Union and at least 10,000 yearly active business users established in the Union for the core platform service in the last financial year. The same user thresholds must have been met in each of the last three financial years for the entrenched-and-durable-position presumption. The Annex requires unique users to be counted once for the relevant service and period: monthly for active end users and yearly for active business users.

  • Keep the undertaking-level evidence for Union turnover, market capitalisation, or equivalent fair market value and the Member States where the same service is provided.
  • Keep service-level active end-user and active business-user counts with the Annex methodology used for that category.
  • Document duplicate-risk controls for users across devices, platforms, accounts, logged-in and non-logged-in environments.
  • Preserve the notification or designation record for each core platform service that meets the Article 3 thresholds.
  • If a service meets the thresholds but the undertaking argues the presumption should not apply, keep the substantiated rebuttal arguments and Commission response.

What thresholds matter for DMA core platform service scoping?

The service-level gateway threshold is at least 45 million monthly active end users established or located in the Union and 10,000 yearly active business users established in the Union in the last financial year. The same user thresholds must be met in each of the last three financial years for the durability presumption. The undertaking-level financial and three-Member-State test also matters, and the Commission can designate an undertaking under the qualitative Article 3 process even when every quantitative threshold is not met.

Citations
DMA core platform services

How should teams scope one core platform service versus another?

The DMA Annex is the most useful scoping control because it explains how active end users and active business users are identified for each category. It also gives boundary rules: services in the same category should not be split mainly by domain name or geography, while services used for different purposes can be treated as distinct even when users overlap.

A good scoping file therefore separates category, user purpose, business-user route to end users, metrics, and designation status. It should also name category-specific counting logic: for example, search uses queries and indexed business websites, operating systems use activated or used devices and developers, and online advertising uses advertisement-impression and advertiser or intermediary interactions.

  • State whether the service is online intermediation, search, social networking, video sharing, messaging, operating system, browser, virtual assistant, cloud computing, or online advertising.
  • Describe end-user activity used for the count, such as login, query, content play, communication, device use, browser address entry, assistant activation, cloud use, or ad impression.
  • Describe business-user activity used for the count, such as listings, transactions, indexed business websites, business accounts, uploaded content, business communications, developer activity, hosted cloud services, or advertiser and publisher interactions.
  • Explain why overlapping users do or do not create one service boundary.
  • Record any renamed, bundled, split, or newly launched service because Article 4 allows designation decisions to be reconsidered, amended, or repealed when facts substantially change.

Can a bundled product contain more than one DMA core platform service?

Yes. The Annex says integrated services can still be distinct when they are in different Article 2 categories or are used for different purposes by end users or business users. A bundle may therefore require separate service boundaries, active-user counts, obligation mapping, and Article 11 annexes.

Citations
DMA core platform services

What are the Article 11 reporting implications?

Article 11 reporting is organised by designated core platform service and applicable obligation. The Commission template says each designated gatekeeper must provide a compliance report within 6 months after designation, update it at least annually, and provide separate standalone annexes for each core platform service for which it has been designated.

For each core platform service and each applicable Articles 5 to 7 obligation, the template asks for a compliance statement, an exhaustive explanation of measures, supporting data and internal documents, implementation timing, product and geographic scope, technical and engineering changes, customer-experience changes, remuneration and terms changes, consultation with users or interested parties, testing and indicators, monitoring systems, and feedback from business users or end users.

  • Build one evidence bundle per designated core platform service, not one generic DMA bundle for the undertaking.
  • Map each Articles 5 to 7 obligation to the service and explain any obligation that cannot by nature apply to that service.
  • Keep raw data and calculation explanations ready for Commission requests.
  • Preserve redlines or change summaries for annual report updates.
  • Track the top business-user information requested by the template for each core platform service.

Why does core platform service scoping matter for Article 11?

The Commission's Article 11 template expects a separate standalone annex for each designated core platform service and information for each applicable Articles 5 to 7 obligation. A wrong service boundary can therefore produce missing evidence, overbroad claims, or obligations mapped to the wrong product.

Citations
DMA gatekeeper thresholds: what counts and when to notify

What are the DMA gatekeeper thresholds?

Article 3 creates three cumulative gatekeeper requirements and then sets quantitative presumptions for them. For significant internal-market impact, the undertaking is presumed to qualify if it has annual Union turnover of at least EUR 7.5 billion in each of the last three financial years, or average market capitalisation or equivalent fair market value of at least EUR 75 billion in the last financial year, and provides the same core platform service in at least three Member States.

For the gateway requirement, the relevant core platform service must have had, in the last financial year, at least 45 million monthly active end users established or located in the Union and at least 10,000 yearly active business users established in the Union. For the entrenched-and-durable-position presumption, those user thresholds must have been met in each of the last three financial years.

  • Do not aggregate all products together unless the DMA core platform service delineation supports doing so.
  • Check the undertaking-level financial threshold separately from the service-level EU user thresholds.
  • Use the Annex methodology for active end users and active business users before deciding whether Article 3(2)(b) is met.
  • Treat the threshold result as a notification and designation question; only the Commission designates a gatekeeper.
  • If the service meets the last-financial-year user thresholds but not the three-year durability test, the Article 3(2) quantitative presumptions are not all met. The Commission can still assess designation under the qualitative Article 3 process.

How should teams handle gatekeeper thresholds under the EU Digital Markets Act?

Handle DMA gatekeeper thresholds as an Article 3 evidence test for each core platform service. First identify the undertaking and the exact core platform service. Then test the undertaking's Union turnover or market-capitalisation threshold, whether the service is offered in at least three Member States, whether the service reaches at least 45 million monthly active EU end users and 10,000 yearly active EU business users, and whether the user thresholds were met for each of the last three financial years. If all Article 3(2) thresholds are met, the undertaking must notify the Commission without delay and in any event within two months after the thresholds are met.

Can the Commission designate an undertaking that is below one or more DMA thresholds?

Yes. The Article 3(2) figures create presumptions; they are not the only designation route. Under Article 3(8), the Commission may conduct a market investigation and designate an undertaking that meets the three qualitative Article 3(1) requirements even though it does not meet every quantitative threshold. The assessment can consider size, user reach, network effects, data advantages, scale and scope effects, lock-in, switching costs, conglomerate structure, vertical integration, and other structural characteristics.

Citations
DMA gatekeeper thresholds: what counts and when to notify

What happens after the thresholds are met?

If an undertaking providing core platform services meets all Article 3(2) thresholds, Article 3(3) requires notification to the Commission without delay and within two months after the thresholds are met. The notification must include the relevant threshold information for each core platform service that meets the user threshold.

After receiving complete information, the Commission must designate the undertaking as a gatekeeper without undue delay and at the latest within 45 working days if the thresholds are met. A previously designated gatekeeper must also notify when another core platform service later meets the relevant user and durability thresholds.

  • Prepare one threshold file per relevant core platform service, including any plausible alternative service delineations.
  • Track the two-month notification trigger from the point the Article 3(2) thresholds are met.
  • Keep the completeness review visible. Under the implementing regulation, a materially incomplete notification becomes effective only when the Commission receives the complete information or says the missing information is no longer necessary. Material later changes can also move the effective date.
  • Escalate when an already designated gatekeeper launches or grows another service that may newly meet Article 3(2)(b) and (c).
Citations
DMA gatekeeper thresholds: what counts and when to notify

What evidence belongs in Form GD?

Form GD is the notification form for Article 3(3) gatekeeper designation. It asks for information about the notifying undertaking, its corporate structure, the entities operating each core platform service, contact details, and whether the undertaking has already been designated for any core platform services.

For threshold evidence, Form GD requires an exhaustive list of core platform services and plausible alternative delineations, explanations of the boundaries between distinct services, Union turnover for each of the last three financial years, average market capitalisation or equivalent fair market value for the last financial year, Member States where each service is provided, monthly active end users in the Union, yearly active business users in the Union, methodology explanations, and external reports or internal documents relied on for the user figures.

  • Map each product to a DMA core platform service category before calculating users.
  • Document broader and narrower plausible service delineations where the boundary is contestable.
  • Separate undertaking-level financial data from service-level user counts.
  • Attach methodology notes and source documents for Sections 4.1 and 4.2 instead of relying on a spreadsheet total alone.
  • If rebutting the presumption, prepare a separate annex for each distinct core platform service.
  • Observe the implementing regulation's page limits: 50 pages for the relevant Form GD Sections 2 and 4 information per distinct core platform service meeting all thresholds, and 30 pages for each service-specific Article 3(5) rebuttal annex.
Citations
DMA gatekeeper thresholds: what counts and when to notify

How should CPS user counts be calculated?

The DMA Annex uses unique users for each core platform service. Active end users are counted once for the relevant service over a month, and active business users are counted once over a year, even if they engage many times during that period. The same person or entity can still be an active user for different core platform services.

Monthly active end users are based on the average number of monthly active end users throughout the largest part of the financial year. Signed-in or logged-in data is treated as the lowest duplication-risk source where it exists; where services are also used outside signed-in environments, the undertaking must also submit aggregate anonymized data based on an alternate metric if those identifiers are objectively necessary for providing the service. Business users are counted at business-account level where that concept applies.

  • Use aggregate anonymized signed-in or logged-in unique-user data where available.
  • Explain how the count avoids under-counting and over-counting across devices and platforms.
  • Identify estimates as estimates and document the best available approximation method.
  • Keep annually recurring events separate from outliers; recurring promotions are not treated as outliers under the Annex explanation.
  • Do not use the Annex as a reason to create new user tracking; the Annex says it is not a legal basis for tracking users.
Citations
DMA gatekeeper thresholds: what counts and when to notify

Can a company rebut the gatekeeper presumption?

Yes, but the rebuttal is narrow and evidence-heavy. Article 3(5) allows the undertaking to present sufficiently substantiated arguments showing that, exceptionally, although it meets all Article 3(2) thresholds, the circumstances of the relevant core platform service mean it does not satisfy the Article 3(1) requirements.

The implementing regulation requires those arguments to be filed with the notification in an annex. There must be a separate annex for each distinct core platform service, and the undertaking must identify which Article 3(1) requirement the argument addresses and explain why the corresponding threshold presumption is not satisfied for that service.

  • Do not treat a rebuttal memo as a reason to skip notification when all Article 3(2) thresholds are met.
  • Tie each rebuttal argument to significant impact, gateway function, or entrenched and durable position.
  • Keep rebuttal evidence service-specific rather than relying on group-level narratives.
  • Remember that the Commission may reject insufficiently substantiated arguments that do not manifestly call the presumptions into question.
Citations
Regulation (EU) 2022/1925 - Article 3(5)

Article 3(5) grounds the ability to present sufficiently substantiated arguments against the Article 3(2) presumptions and the Commission's ability to reject weak arguments.

DMA interoperability requests: Article 7 and Commission guidance

How should teams handle DMA Article 7 interoperability requests?

First confirm that the gatekeeper provides a number-independent interpersonal communications service listed in its DMA designation decision and that the requester offers or intends to offer such a service in the Union. A commercial integration request outside that scope is not an Article 7 request.

Article 7 requires the gatekeeper to provide the technical interfaces or similar solutions needed for interoperability, upon request and free of charge. A request may cover some or all functions that the gatekeeper itself provides and that have reached their statutory phase: one-to-one text and attached-file sharing following listing, subject to the general six-month compliance period; group messaging and group file sharing within two years after designation; and listed one-to-one or group voice and video calls within four years.

After the reference offer is published, the gatekeeper must render a reasonable request operational within three months after receipt. On a reasoned gatekeeper request, the Commission may exceptionally extend the phase-in or three-month deadline where needed for effective interoperability and the required security level.

  • Record the designated gatekeeper service and confirm that it is a number-independent interpersonal communications service.
  • Identify the requester as a provider that offers, or intends to offer, number-independent interpersonal communications services in the Union.
  • Map the requested functionality to Article 7's basic functionality categories: one-to-one text and media sharing, group text and media sharing, or voice and video call functionality where the relevant Article 7 timing applies.
  • Check the gatekeeper's published reference offer for technical details, general terms, security details, and end-to-end encryption information. Article 7 ties publication to the six-month compliance period in Article 3(10).
  • Do not treat an online social networking service as covered by Article 7. In its first DMA review, published in April 2026, the Commission said it was premature to extend Article 7 to online social networks and would continue monitoring the issue.
  • Keep the requester choice and end-user choice separate: Article 7 preserves end users' freedom to decide whether to use interoperable functionality.

What is a DMA Article 7 interoperability request?

It is a request by a provider offering or intending to offer number-independent interpersonal communications services in the Union for interoperability with a designated gatekeeper's listed service. The request may cover functions that the gatekeeper provides and that are within the applicable Article 7 phase. The gatekeeper must provide the necessary technical interfaces or similar solutions free of charge and render a reasonable request operational within three months, unless the Commission grants an exceptional extension.

Citations
Regulation (EU) 2022/1925 (Digital Markets Act)

Article 7 defines the messaging-service interoperability obligation, requester category, reference-offer requirement, three-month response rule for reasonable requests, end-user choice, and privacy/security safeguards.

DMA interoperability requests: Article 7 and Commission guidance

What evidence should requesters and gatekeepers keep?

The request file should prove the Article 7 scope, the requested functionality, and the security and privacy handling. A requester should be able to show that it offers or intends to offer a number-independent interpersonal communications service in the Union and that the request maps to a function in the applicable Article 7 phase. A gatekeeper should show how it assessed the request against its reference offer and why any condition, limitation, sequencing decision, or refusal follows the DMA standard.

Gatekeeper compliance evidence should also align with the Commission's Article 11 compliance-report template: for obligations under Articles 5 to 7, gatekeepers are expected to explain measures, scope, technical or engineering changes, security aspects, alternatives considered, and actions taken to protect integrity, security, or privacy.

  • Requester evidence: service description, Union offering or launch intent, requested Article 7 functionality, contact details, and any information needed to assess compatibility with the reference offer.
  • Gatekeeper evidence: designation decision service, current reference offer, receipt date, functionality mapping, reasonableness assessment, implementation status, and whether the three-month operational deadline applies.
  • Security and privacy evidence: the security level offered to the gatekeeper's own users, end-to-end encryption treatment where applicable, strictly necessary personal-data exchange, and any duly justified integrity, security, or privacy measures.
  • Decision evidence: rejection reasons, unmet criteria, extension requests to the Commission if any, and the distinction between Article 7 messaging interoperability and non-DMA commercial integrations.
Citations
Regulation (EU) 2022/1925 (Digital Markets Act)

Article 7 supports the requester/gatekeeper evidence fields because it specifies who may request, what must be published in the reference offer, what data may be exchanged, and what safeguards may be justified.

DMA interoperability requests: Article 7 and Commission guidance

Can an Article 6(7) specification decision be used for an Article 7 request?

No. A Commission specification decision under Article 6(7) binds the named gatekeeper and the operating-system or virtual-assistant features covered by that decision. It does not replace Article 7's requester test, phased functions, reference offer, three-month rule, or safeguards for messaging interoperability.

The Commission's March 2025 Apple decisions illustrate this boundary. They specify iOS and iPadOS connected-device features and Apple's developer request process, including submission guidance, assessment stages, feedback, review routes, tracking, information separation, and reporting. Those details apply to Apple under the decisions. For another gatekeeper or an Article 7 request, use the DMA text and the relevant designation or specification decision.

  • Article 6(7) operating-system or virtual-assistant requests involve access to hardware or software features available to the gatekeeper's own services or hardware.
  • Article 7 requests involve interoperability between number-independent interpersonal communications services and are tied to the gatekeeper's published reference offer.
  • Apple's March 2025 process decision includes clear submission guidance, defined assessment stages, feedback before final solutions, review and dispute routes, request tracking, separation of non-public requester information, and public reporting. Do not treat those decision-specific procedures as Article 7 deadlines.
  • Security and integrity safeguards must be tied to the relevant article: Article 6(7) allows strictly necessary and proportionate integrity measures for the operating system, virtual assistant, hardware, or software features; Article 7 allows strictly necessary, proportionate, and duly justified measures for integrity, security, and privacy of messaging services.
Citations
Page 1 of 2
Previous12Next