DSAEU Platform Regulation
EU Digital Services Act Scope, Platform Duties, and VLOP Readiness
This DSA hub helps decide whether a particular service is in scope, classify its intermediary tier, and find the duties that follow for hosting, platform, marketplace, search, and designated very-large-service features.
By Sorena AIUpdated 2026-05No signup required
DSA quick scan
Regulation 2022/2065Scope and service boundary
The DSA covers intermediary functions that transmit, temporarily store, or host recipient-provided information when offered to recipients in the EU. A non-EU provider needs a substantial EU connection, such as establishment, significant recipient use, or targeting. Mere technical accessibility is insufficient. Classify each service surface separately; the same product can contain several DSA tiers, and voluntary good-faith moderation does not by itself remove an Article 4-6 liability exemption.
Core operating duties
Hosting and platform teams need operational records for Article 16 notices, Article 17 statements of reasons, Article 15 transparency reports, Article 24 user numbers, Article 26 ads, Article 27 recommenders, and Article 30 trader traceability where relevant.
Enhanced VLOP/VLOSE layer
Designated services at or above 45 million average monthly active EU recipients must handle systemic-risk assessment and mitigation, annual independent audits, researcher and regulator data access, non-profiling recommender options, and searchable ad repositories.
Follow the grouped guides in order: establish EU scope and service tier, assign the matching operating duties, then add reporting, marketplace, , and enforcement evidence only where the classification supports it.
Key dates
2022/2065
Regulation
Art. 16-17
Moderation
45M
VLOP/VLOSE
6%
Fine cap
DSA questions this hub helps answer
Which service tier applies?
Start with the function performed for recipients: mere conduit, caching, or hosting. Then test whether the service is an through public dissemination, whether it supports marketplace distance-contract flows or online search, and whether enterprise-size exclusions, EU recipient counts, or Commission designation change the obligation set. Keep the conditional liability exemptions in Articles 4-6 separate from the due-diligence duties that apply to the classified service.
Which trust-and-safety controls are required?
Map notice and action, trusted-flagger priority, each , internal complaints, out-of-court dispute links, repeat-abuse suspension, and transparency reporting.
Is the service in VLOP or VLOSE territory?
Publishing at least 45 million average monthly active EU recipients does not itself complete designation. Track the Commission decision and notification date because the enhanced duties attach to the designated service on its four-month application clock.
Service classification
Notice and action
Transparency reports
Publication details
Editorial metadata for this artifact
Author
Sorena AI
Published
Feb 23, 2026
Updated
Jul 24, 2026
The DSA has applied generally since 17 February 2024. It applies service by service to offered to recipients in the EU, regardless of where the provider is established. Mere technical accessibility from the EU is not enough by itself: document establishment, targeting, or significant EU use before assigning duties. supervise providers established in their Member State, while the Commission has the DSA's specified powers for VLOPs and VLOSEs.
DSA Milestones
Track cited-source DSA applicability and reporting events
Use the DSA milestones for regulation application, designation effects, average monthly active recipient publication, transparency-reporting templates, audit outputs, and enforcement events only where the source material supports the date and affected service category.
Loading timeline...
Recommended reading path
Choose the next DSA decision
New to the DSA? Start by classifying one service and its EU connection. If that record already exists, jump to the operating duty, disclosure, very-large-service control, enforcement question, or comparison you need.
1
Start here: scope and service tier
Decide whether the DSA applies to the service, then separate mere conduit, caching, hosting, platform, marketplace, search, and Commission-designated VLOP/VLOSE layers.
DSA Applicability Test: classify intermediary services, platforms, marketplaces, VLOPs and VLOSEs
A cited EU Digital Services Act applicability test for classifying intermediary services, hosting services, online platforms, marketplaces, VLOPs and VLOSEs.
Read guide
EU Digital Services Act service types and scope
Classify DSA service scope across mere conduit, caching, hosting, online platforms, marketplaces, online search engines, and VLOP/VLOSE threshold duties.
Read guide
DSA service tier classifier for platforms, marketplaces, VLOPs and VLOSEs
Classify a digital service under the EU Digital Services Act as intermediary, hosting, online platform, marketplace, VLOP or VLOSE, with EU recipient-count evidence and obligation outputs.
Read guide
2
Moderation, reasons, and redress
Map the tier result into notice handling, moderation decisions, statements of reasons, internal complaints, dispute routes, operating controls, and retained evidence.
EU Digital Services Act requirements by service tier
Overview of DSA obligations for intermediary services, hosting providers, online platforms, marketplaces, VLOPs and VLOSEs, including notices, complaints, ads, transparency reports, audits, data access and enforcement.
Read guide
EU Digital Services Act checklist for platforms and hosting services
An official source DSA checklist for classifying service tiers, notice-and-action, statements of reasons, complaints, transparency reports, ads, recommenders, trader traceability, VLOP/VLOSE duties, and evidence records.
Read guide
EU Digital Services Act Compliance Guide
DSA compliance guide for intermediary services, hosting providers, online platforms, marketplaces, and VLOP/VLOSE teams: obligations, controls, and evidence to keep.
Read guide
DSA notice and action plus statements of reasons guide
A source-cited Digital Services Act guide for notice intake, moderation decisions, statements of reasons, DSA Transparency Database submission, complaints, appeals, trusted flaggers, and records.
Read guide
DSA Notice and Action Workflow for Hosting Services and Online Platforms
A source-cited DSA notice-and-action workflow covering notice intake, completeness checks, trusted flaggers, decisions, user communications, statements of reasons, appeals, and records.
Read guide
DSA statement of reasons log workflow for online platforms
Build a DSA statement of reasons log for moderation decisions, Transparency Database submission, complaint links, retention, and QA controls.
Read guide
DSA Complaint and Dispute Workflows for Online Platforms
Build DSA complaint, appeal, statement-of-reasons, and out-of-court dispute workflows for online platform moderation decisions.
Read guide
3
Product, advertising, and marketplace duties
Review user-facing design and data flows for ads, recommenders, minors, manipulative interfaces, and trader or product traceability where the relevant platform layer applies.
DSA Ads and Recommender Systems: transparency duties, user choice, and evidence
An official source DSA guide to ad labels, targeting restrictions, recommender parameter disclosure, non-profiling options for VLOPs and VLOSEs, ad repositories, and compliance evidence.
Read guide
DSA Article 28 minors protection guide for online platforms
EU Digital Services Act guide to Article 28 minors protection: platform scope, child-safety measures, targeted ads limits, recommender controls, and official source evidence.
Read guide
DSA Dark Patterns: interface design checks for online platforms
Article 25 DSA guidance for reviewing online platform interfaces for deceptive, manipulative, or choice-distorting design patterns.
Read guide
DSA Marketplace Trader Traceability Guide
EU Digital Services Act guide for online marketplaces collecting, checking, displaying, storing, and evidencing trader traceability information.
Read guide
4
Transparency and recurring deadlines
Separate fixed application dates, event-driven statement submissions, six-month user-number updates, annual or VLOP/VLOSE reporting cycles, and template transition rules.
DSA Transparency Reporting Obligations by Provider Tier
A source-cited guide to EU Digital Services Act transparency reports, active-recipient publication, statements-of-reasons submissions, VLOP/VLOSE reports, templates, cadence, and evidence.
Read guide
DSA transparency report template fields and cadence
A source-cited template outline for Digital Services Act transparency reports, covering applicable service tiers, reporting periods, CSV/XLSX format, retention, statement-of-reasons links, and required evidence tables.
Read guide
EU DSA Transparency Calendar: reporting, SoR database, AMAR updates
Build a DSA transparency calendar for annual reports, statement-of-reasons database submissions, active-recipient updates, and VLOP/VLOSE audit touchpoints.
Read guide
EU DSA deadlines and compliance calendar: application dates, reporting cycles, and VLOP clocks
Calendar view of cited EU Digital Services Act dates: full application, user-number publication, VLOP/VLOSE designation clocks, statements of reasons, and transparency reporting cycles.
Read guide
5
VLOP and VLOSE assurance
For a Commission-designated service, connect systemic-risk work to mitigation, independent audit, data access, governance, and crisis-response evidence.
DSA VLOP and VLOSE Risk Assessments and Mitigation Guide
A source-cited guide to Digital Services Act systemic risk assessments, mitigation measures, audits, transparency reports, data access, and governance evidence for VLOPs and VLOSEs.
Read guide
DSA VLOP Audit Pack Workflow: Risk, Mitigation, Audit, and Transparency Records
Build a DSA VLOP or VLOSE audit pack covering Article 34 risk assessments, Article 35 mitigations, independent-audit evidence, transparency reports, data access, and compliance governance.
Read guide
DSA researcher data access for VLOPs and VLOSEs
Article 40 DSA guide to vetted researcher access for VLOPs and VLOSEs under Regulation (EU) 2025/2050: requests, data catalogues, security, deadlines, and records.
Read guide
DSA crisis response for VLOPs and VLOSEs
EU Digital Services Act crisis response guide for VLOPs and VLOSEs: Article 36 Commission decisions, Article 48 crisis protocols, mitigation, governance, requests for information, and records.
Read guide
6
Supervision and enforcement
Understand the different roles of Digital Services Coordinators and the Commission, the relevant investigation powers, and the conditions behind penalty caps.
DSA Enforcement and Penalties in the EU
How Digital Services Act enforcement works: Commission and Digital Services Coordinator roles, VLOP and VLOSE investigations, fines, periodic penalty payments, and evidence readiness.
Read guide
EU Digital Services Act penalties and fines: caps and enforcement roles
DSA penalty caps and enforcement roles: Member State fines, Commission fines for VLOPs and VLOSEs, 1% procedural fines, and 5% periodic penalty payments.
Read guide
7
Compare regimes or answer a focused question
Keep the DSA distinct from the DMA, GDPR, P2B Regulation, Terrorist Content Online Regulation, and UK Online Safety Act, or go directly to a concise DSA answer.
DSA vs DMA Platform Rules
Compare the EU Digital Services Act and Digital Markets Act by scope, designation thresholds, obligations, enforcement, evidence, and practical team ownership.
Read guide
DSA vs GDPR: online-platform governance and personal-data obligations
Compare the EU Digital Services Act and EU GDPR by scope, ads, recommenders, minors, transparency, complaints, enforcement, and evidence.
Read guide
DSA vs P2B Regulation: EU platform obligations compared
Compare the EU Digital Services Act with the Platform-to-Business Regulation for platform scope, business-user terms, content moderation, ranking transparency, complaints, enforcement, and evidence.
Read guide
DSA vs Terrorist Content Online Regulation: notice-and-action vs removal orders
Compare DSA content-governance duties with the EU Terrorist Content Online Regulation removal-order workflow for scope, timing, evidence, authorities, and team ownership.
Read guide
EU DSA vs UK Online Safety Act: scope, duties, regulator, and evidence
Compare the EU Digital Services Act and UK Online Safety Act for platform scope, risk assessments, child protection, transparency, regulators, enforcement, and owners.
Read guide
EU Digital Services Act FAQ: DSA scope, platform duties, VLOPs, reports, and penalties
Concise EU Digital Services Act FAQ covering intermediary-service scope, active-recipient thresholds, illegal-content notices, statements of reasons, trader traceability, recommender transparency, systemic-risk duties, reporting, penalties, and complaints.
Read guide
Next step
Turn DSA scope into controls, disclosures, and evidence
This hub is the shared starting point for DSA implementation. Confirm the service tier first, then assign article-level work to trust and safety, policy, legal, marketplace, ads, recommender, data, reporting, and engineering owners who can change the service and maintain the public evidence.
What this unlocks
- Start with one service boundary: EU targeting or establishment, intermediary role, hosting function, online-platform features, marketplace distance-contract flows, online search, average monthly active EU recipients, and any Commission designation status.
- For hosting and online-platform workflows, operationalize intake and user remedies: Article 16 notices, trusted-flagger priority, Article 17 statements of reasons, internal complaint handling, out-of-court dispute signposting, repeat-abuse suspension, and DSA Transparency Database submissions where applicable.
- For ads, recommenders, and marketplace flows, check the user interface: ad labels and sponsor/payment information, recommender main parameters and choice controls, profiling restrictions for minors, trader identity checks, product or service information fields, and consumer notices for illegal offers.
- For VLOPs and VLOSEs, build a standing evidence pack: user-number methodology, systemic-risk assessment, mitigation measures, compliance function governance, independent audit, audit implementation report, regulator and vetted-researcher data access process, non-profiling recommender option, and ad repository.
Recommended route
Open Assessment Autopilot
Turn DSA scope, Article 16-17 moderation, reporting, marketplace, ads, recommender, and VLOP/VLOSE questions into owned tasks and evidence requests.
Supporting route
Open Research Copilot
Answer DSA scope, user-number, notice, statement-of-reasons, transparency, trader, VLOP/VLOSE, audit, and enforcement questions with cited outputs.
Talk to Sorena
Talk through DSA implementation
Review service classification, article-level controls, public disclosures, VLOP/VLOSE readiness, and enforcement evidence.
Discuss your setup
Share it internally
Download the timeline export to align legal, product, engineering, and commercial teams on milestones and deadlines.