All 27 EU member states · live coverage
Article 27 explained Backed by Cloudkasten GmbH · Erftstadt, DE
Digital Governance

EU NIS 2 Representative

Digital infrastructure and digital service providers outside the EU that offer services in the Union must designate a representative there under Article 26(3) NIS 2. We take that role from Germany.

Request a quote Do we need one?
Scope

Who needs one?

Providers established outside the EU that offer these services in the Union:

  • DNS service providers, top-level domain name registries and domain name registration services
  • Cloud computing, data centre and content delivery network providers
  • Managed service providers and managed security service providers
  • Online marketplaces, online search engines and social networking platforms

NIS 2 is a directive, so the rules come from each member state’s implementing law. With a representative in Germany, the German implementation applies to you.

The role

What the representative is for

Under Art. 26(3) NIS 2 Directive, Directive (EU) 2022/2555, the representative:

  1. 01

    Is established in one of the member states where the services are offered

  2. 02

    Places the provider under the jurisdiction of that member state

  3. 03

    Is the contact for the competent authority and the CSIRT, and is named in the information the provider registers with ENISA

What you receive

What we do as your representative

Written mandate

A signed appointment you can show to authorities and partners, naming Cloudkasten GmbH in Germany as your representative.

Receipt and forwarding

Correspondence from authorities is received at our registered office, logged and forwarded to your named contacts without delay.

Registration support

We help you file the provider and representative details with the German authority for the ENISA registry.

A real German company

Cloudkasten GmbH, registered in Germany, with German-admitted lawyers involved in running the service. Not a mailbox.

Your own obligations under the law stay with you; the representative does not take them over. Substantive legal advice is available as a separate engagement.

Get started

Request a quote

Tell us about your service. We check that the mandate fits, then send you a fixed annual quote and the mandate to sign.

  1. Send the form
  2. Short review call or email
  3. Quote and mandate
  4. Designation letter once signed

Need a GDPR Article 27 representative too? That one you can book online.

We usually reply within one business day with the questions we need answered and a fixed quote. No payment is taken online for this service.

FAQ

Common questions

No. Incident reporting and the risk management measures stay with you. The representative is the EU contact the authorities can address, and we pass their correspondence on without delay.
No. Article 26(3) asks for one representative, established in one of the member states where you offer your services.
Sources

Legal text and related services

Legal text

Directive (EU) 2022/2555, NIS 2 (EUR-Lex)

Other representations

EU GDPR Article 27 Representative EU e-Evidence Legal Representative EU Data Act Legal Representative EU DSA Legal Representative EU AI Act Authorised Representative

This page is general information about the designation duty, not legal advice. Questions? Contact us.