Howto Compliance
149 articles
CADA Aggregated Baseline Permit: What It Is and How to Rely on It
As proposed in the Cloud and AI Development Act (CADA), the aggregated baseline permit is a zone-wide administrative authorization that covers the standard
CADA Application Date: What Organisations Must Do Before Compliance Kicks In
The proposed Cloud and AI Development Act (CADA) would apply one year after its entry into force, as explicitly set out in Article 48.
CADA Compliance Checklist for Cloud Providers: Steps to Recognition
Under the proposed Cloud and AI Development Act (CADA), cloud service providers (CSPs) aiming to serve EU public sector bodies must secure formal recogniti
CADA Compliance Checklist: Roles, Deadlines & Assurance Levels
There is no single "CADA compliance checklist" for every organisation because the Cloud and AI Development Act (CADA), as proposed in COM(2026) 502 final,
CADA Compliance: Self-Assessment vs. Independent Audit Explained
Under the proposed Cloud and AI Development Act (CADA), the pathway to recognition is strictly determined by the Union assurance level you target.
CADA Data Centres: How to claim 'highest national significance' status?
You cannot directly "claim" a "highest national significance" status for a data centre project under the proposed Cloud and AI Development Act (CADA).
CADA Data Residency: How to Handle Buyer Exceptions for Cloud Services
Under the proposed Cloud and AI Development Act (CADA), cloud computing services seeking Union assurance levels 1 through 4 must keep customer data, includ
CADA Entry into Force and Application: Key Dates Explained
As proposed in COM(2026) 502 final, the Cloud and AI Development Act (CADA) follows a standard EU legislative timeline with a critical distinction between
CADA: How to handle the third-country vulnerability-reporting criterion?
Under the proposed Cloud and AI Development Act (CADA), cloud service providers controlled by a third country or a legal entity established in a third coun
CADA Key Dates & Deadlines: A Chronological Compliance Timeline
The proposed Cloud and AI Development Act (CADA) establishes a rigid, chronological compliance timeline that begins immediately upon publication.
CADA Member State obligations: strategies, zones, NCAs and penalties
Before the proposed Cloud and AI Development Act (CADA) becomes applicable, Member States must execute a series of critical preparatory actions within a st
CADA penalties for cloud providers: Article 24 fines, mitigation & compensation
Under the proposed Cloud and AI Development Act (CADA), Article 24 requires Member States to establish penalties for cloud computing service providers that
CADA Procurement Fees: How Article 40 Determines Costs for Public Buyers
Under the proposed Cloud and AI Development Act (CADA), the European Commission would act as a central purchasing body for public entities, with costs reco
CADA Public Procurement Checklist: Risk Assessments, Assurance Levels & Added Value
As proposed in the Cloud and AI Development Act (CADA), public buyers must follow a strict, four-step procurement checklist to safeguard public order and r
CADA Recognition Refused: Your 30-Day Right to Comment & Re-application Guide
If your application for recognition under the proposed Cloud and AI Development Act (CADA) is refused, you are not permanently barred from the EU cloud mar
CADA Recognition Revocation: Causes, Consequences, and How to Avoid It
As proposed, the Cloud and AI Development Act (CADA) allows for the revocation of Union assurance recognition if a cloud provider intentionally or negligen
CADA Recognition Validity: How Long It Lasts and How to Renew
Under the proposed Cloud and AI Development Act (CADA), recognition of a cloud computing service as offering a specific Union assurance level (Levels 1–4)
CADA SME Target: How Member States Must Reach the 25% Innovation Goal
Under the proposed Cloud and AI Development Act (CADA), Member States are required to pursue a specific objective: awarding at least 25% of their public pr
CADA Transparency Obligations: How to Notify on Material Changes
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers (CSPs) recognised at Union assurance levels 1–4 face a strict, co
CADA vs GDPR: How to Align Cloud Sovereignty with Data Localisation
As proposed, the Cloud and AI Development Act (CADA) does not replace the General Data Protection Regulation (GDPR) but layers strict, operational data-res
How a data centre project becomes a CADA strategic project
As proposed in the Cloud and AI Development Act (CADA), the Commission may designate a data centre project as a "strategic project" by decision, selecting
How are EuroCloud Federation fees calculated and paid under CADA?
Under the proposed Cloud and AI Development Act (CADA), the EuroCloud Federation operates on a strict cost-recovery model.
How banks and financial entities prepare for CADA alongside DORA
As proposed, the Cloud and AI Development Act (CADA) does not impose mandatory sovereignty risk assessments on banks and other financial entities.
How can a Member State buyer use the Commission's central procurement under CADA?
Under the proposed Cloud and AI Development Act (CADA), Member State buyers can access a streamlined central procurement framework where the European Commi
How can an AI industrial or public-sector project access compute under CADA?
Under the proposed Cloud and AI Development Act (CADA), AI industrial innovation, physical AI, and public sector AI projects can access EU high-performance
How can an SME win public cloud and AI contracts under CADA?
Under the proposed Cloud and AI Development Act (CADA), public contracting authorities would be required to actively design procurement processes to help s
How can a region get itself flagged as a compute capacity gap area under CADA?
A region cannot unilaterally "flag" or self-declare itself as a compute capacity gap area under the proposed Cloud and AI Development Act (CADA).
How does a cloud provider check whether CADA's sovereignty rules apply to it?
The trigger is your customer, not your size or origin.
How does a cloud provider get recognised under a CADA sovereignty tier?
As proposed in the Cloud and AI Development Act (CADA), a cloud computing service provider (CSP) gets recognised at a sovereignty tier by applying to the n
How does a compliance officer build a CADA readiness programme?
Under the proposed Cloud and AI Development Act (CADA), compliance officers must construct a readiness programme anchored in the four-tier Union assurance
How does a CTO assess CADA's impact on a hybrid or multi-cloud architecture?
As proposed in COM(2026) 502 final, the Cloud and AI Development Act (CADA) fundamentally shifts cloud strategy from a cost-performance model to a sovereig
How does a data centre operator request single-information-point assistance as an SME?
Under the proposed Cloud and AI Development Act (CADA), data centre operators, including small and medium-sized enterprises (SMEs), possess a statutory rig
How does a data centre project become a CADA strategic project, and what does it gain?
Under the proposed Cloud and AI Development Act (CADA), a data centre project becomes a "strategic project" only through a formal designation by the Europe
How does a defence or law-enforcement body comply with CADA cloud rules?
Under the proposed Cloud and AI Development Act (CADA), defence and law-enforcement bodies are legally required to procure cloud computing services recogni
How does a foreign-owned EU subsidiary get CADA recognition?
As proposed in the Cloud and AI Development Act (CADA), a foreign-owned EU subsidiary can achieve recognition for Union assurance levels 1, 2, and potentia
How does a healthcare provider apply CADA when procuring cloud services?
As proposed, the Cloud and AI Development Act (CADA) requires healthcare providers acting as public-sector contracting authorities to conduct mandatory ris
How does a managed service reseller position itself under CADA recognition rules?
Under the proposed Cloud and AI Development Act (CADA), a managed service reseller cannot independently obtain a "Union assurance level" recognition for a
How does a Member State accede to a Commission CADA procurement agreement?
Under the proposed Cloud and AI Development Act (CADA), a Member State does not simply "sign up" to a procurement list.
How does a Member State combine environmental assessments for a CADA zone?
Under the proposed Cloud and AI Development Act (CADA), Member States must consolidate environmental due diligence for data centre projects located within
How does a Member State designate a data centre acceleration zone under CADA?
Under the proposed Cloud and AI Development Act (CADA), Member States where data centre capacity is being deployed must designate at least one data centre
How does a Member State designate a national competent authority under CADA?
Under the proposed Cloud and AI Development Act (CADA), Member States must designate one or more national competent authorities to enforce the Union cloud
How does a Member State include cloud and AI procurement in its CADA national strategy?
Under the proposed Cloud and AI Development Act (CADA), Member States are legally required to embed specific procurement measures within their national clo
How does a Member State set CADA penalties for cloud providers?
Under the proposed Cloud and AI Development Act (CADA), Member States are required to establish national rules for penalties applicable to infringements by
How does a non-EU cloud provider qualify under CADA assurance level 3?
A non-EU cloud provider cannot automatically qualify for Union assurance level 3 under the proposed Cloud and AI Development Act (CADA).
How does an SME cloud provider comply with CADA most cheaply?
As proposed, the Cloud and AI Development Act (CADA) establishes a specific, low-cost compliance pathway for small and medium-sized enterprises (SMEs) seek
How does an SME rely on EU-wide CADA level 1 recognition across Member States?
Under the proposed Cloud and AI Development Act (CADA), small and medium-sized enterprises (SMEs) benefit from a streamlined, "fast-track" pathway to EU-wi
How does a provider already certified under EUCS map across to CADA recognition?
Holding a European Cybersecurity Certification Scheme for Cloud Services (EUCS) certificate provides a significant advantage for Cloud and AI Development A
How does a public body apply CADA's open source first principle?
Under the proposed Cloud and AI Development Act (CADA), public bodies are legally required to encourage and facilitate the use of open standards and compon
How does a public body join the EuroCloud Federation under CADA?
Under the proposed Cloud and AI Development Act (CADA), the EuroCloud Federation is a voluntary mechanism allowing Union entities and public sector bodies
How does a public body share cloud or data centre services in the EuroCloud Federation?
Under the proposed Cloud and AI Development Act (CADA), a public body may share cloud or data centre services within the EuroCloud Federation only if it di
How does a public buyer apply Union added value criteria in a cloud or AI tender under CADA?
Under the proposed Cloud and AI Development Act (CADA), public contracting authorities are mandated to include non-price award criteria in tenders for inno
How does a public buyer justify procuring above the minimum CADA assurance level?
Under the proposed Cloud and AI Development Act (CADA), public buyers cannot arbitrarily choose a higher cloud assurance level.
How does a public buyer procure cloud services correctly under CADA?
Under the proposed Cloud and AI Development Act (CADA), public buyers must strictly align their cloud procurement with a four-tier "Union assurance" framew
How does a public buyer verify a provider's CADA assurance level before awarding?
As proposed in the Cloud and AI Development Act (CADA), a public buyer verifies a cloud provider's assurance level by consulting the central repository est
How does a recognised frontier AI project get computing support under CADA?
As proposed in COM(2026) 502 final, the Cloud and AI Development Act (CADA) establishes a mandatory mechanism to secure computing power for strategic AI de
How does a research institution apply for frontier AI compute under CADA?
Under the proposed Cloud and AI Development Act (CADA), a research institution cannot apply for frontier AI compute as a standalone entity.
How does a small council or municipality comply with CADA cloud procurement?
Under the proposed Cloud and AI Development Act (CADA), a small council or municipality must procure cloud computing services that are formally recognised
How does a startup get its cloud service in front of CADA public buyers?
As proposed, the Cloud and AI Development Act (CADA) creates a streamlined pathway for startups and SMEs to access EU public cloud markets through three sp
How does a Union entity comply with CADA when procuring for its own use?
As proposed, Union entities (EU institutions, bodies, offices, and agencies) must procure cloud computing services that meet at least Union assurance level
How does cross-border review of a CADA recognition work?
Under the proposed Cloud and AI Development Act (CADA), the recognition of a cloud computing service provider (CCSP) as offering a specific Union assurance
How do I apply for CADA recognition step by step?
As proposed in the Cloud and AI Development Act (CADA), cloud computing service providers apply for sovereignty recognition by submitting an application to
How do I apply for recognition as a frontier AI priority project under CADA?
As proposed in the Cloud and AI Development Act (CADA), there is no standing application form for becoming a "frontier AI priority project." Instead, under
How do I apply the total-cost test under CADA's open source first rule?
Under the proposed Cloud and AI Development Act (CADA), public sector bodies must encourage the use of open-source solutions by applying an "open source fi
How do I check if my public-sector activity contributes to public order under CADA?
Under the proposed Cloud and AI Development Act (CADA), determining whether a public-sector activity contributes to "public order" is a mandatory legal tes
How do I choose a CADA auditing organisation?
Under the proposed Cloud and AI Development Act (CADA), cloud service providers seeking Union assurance levels 2, 3, or 4 must undergo independent third-pa
How do I decide which CADA assurance level to target as a cloud provider?
To decide which Cloud and AI Development Act (CADA) assurance level to target, you must align your service's technical and legal capabilities with the cumu
How do I document operational autonomy to satisfy CADA criteria?
Under the proposed Cloud and AI Development Act (CADA), "operational autonomy" is the ability of a cloud provider to control its service without third-coun
How do I escalate a stalled CADA recognition to the Commission?
If a national competent authority (NCA) intends to maintain a draft decision to recognise a cloud service despite a reasoned objection from another Member
How do I get recognised at CADA Union assurance level 4?
To achieve recognition at CADA Union assurance level 4, a cloud computing service provider must undergo a rigorous independent third-party audit and submit
How do I issue an EU statement of conformity under CADA?
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers seeking Union assurance level 1 must conduct a conformity self-as
How do I keep CADA recognition valid year after year?
To maintain your Cloud and AI Development Act (CADA) recognition annually for Union assurance levels 2, 3, or 4, you must submit your existing audit report
How do I know if the Cloud and AI Development Act (CADA) applies to my organisation?
As proposed, the Cloud and AI Development Act (CADA) would reach a wide range of actors in the EU cloud and AI ecosystem, not only large technology compani
How do I license public-sector software for reuse under CADA?
Under the proposed Cloud and AI Development Act (CADA), Union entities and public sector bodies that hold intellectual property rights to software and choo
How do I list public-sector software on the EU Open Source Solutions Catalogue?
To list public-sector software on the EU Open Source Solutions Catalogue (EU OSS Catalogue), your entity must first make the software available for reuse u
How do I meet personnel screening and EU citizenship requirements under CADA?
Under the proposed Cloud and AI Development Act (CADA), cloud service providers seeking Union assurance levels 2, 3, or 4 must navigate a tiered personnel
How do I meet sustainability requirements for a data centre in a CADA acceleration zone?
Under the proposed Cloud and AI Development Act (CADA), data centre operators deploying within designated acceleration zones face a harmonised, non-negotia
How do I move my cloud service up a CADA sovereignty tier?
To move your cloud service to a higher CADA sovereignty tier, you must satisfy all cumulative criteria of your current level and the target level simultane
How do I obtain the cybersecurity certification CADA assurance levels require?
To obtain the cybersecurity certification required for CADA assurance levels, cloud providers must align with the European Cybersecurity Certification Sche
How do I phase a multi-year CADA compliance roadmap?
Phasing a multi-year compliance roadmap for the proposed Cloud and AI Development Act (CADA) requires anchoring your strategy to the staggered timeline in
How do I plan a cloud migration required by a CADA risk assessment?
If a CADA risk assessment determines that your public sector activities require a higher Union assurance level, you must migrate to a compliant cloud servi
How do I prepare audit evidence that meets CADA Annex III standards?
Under the proposed Cloud and AI Development Act (CADA), cloud service providers seeking Union assurance levels 2, 3, or 4 must undergo independent third-pa
How do I prepare for a CADA independent third-party audit?
As proposed in the Cloud and AI Development Act (CADA), a cloud computing service provider seeking Union assurance level 2, 3 or 4 must obtain a "positive"
How do I prepare for CADA's first periodic review under Article 47?
Under the proposed Cloud and AI Development Act (CADA), the European Commission is legally required to evaluate the Regulation's functioning four years aft
How do I price and charge a sharing fee in the EuroCloud Federation?
Under the proposed Cloud and AI Development Act (CADA), fees charged for sharing services within the EuroCloud Federation are strictly limited to cost reco
How do I qualify a project as a frontier AI priority project under CADA?
To qualify as a frontier AI priority project under the proposed Cloud and AI Development Act (CADA), your initiative must be selected through an open call
How do I report CADA cloud and AI procurement-of-innovation data to the Commission?
As proposed in the Cloud and AI Development Act (CADA), Member States are legally required to monitor and report annually to the European Commission on the
How do I respond to a CADA open call for expressions of interest?
To respond to a Cloud and AI Development Act (CADA) open call for expressions of interest, you must submit a comprehensive proposal demonstrating that your
How do I respond to a CADA request for further information during recognition?
If a national competent authority requests further information during your CADA recognition application, you must submit the requested evidence within the
How do I self-assess for CADA Union assurance level 1?
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers seeking recognition at Union assurance level 1 must carry out a c
How do I share and reuse public-sector software under CADA?
Under the proposed Cloud and AI Development Act (CADA), if a Union entity or public sector body holds the intellectual property rights to software and volu
How do Member States and Union entities carry out a joint CADA risk assessment?
Under the proposed Cloud and AI Development Act (CADA), Member States and Union entities may conduct joint risk assessments when they share responsibilitie
How do national competent authorities use mutual assistance under CADA?
Under the proposed Cloud and AI Development Act (CADA), national competent authorities (NCAs) rely on a strict mutual assistance framework to enforce the U
How do public buyers find recognised cloud services on the CADA central repository?
As proposed under the Cloud and AI Development Act (CADA), public buyers identify compliant sovereign cloud services by accessing a dedicated central repos
How much does CADA compliance cost a cloud provider?
Under the proposed Cloud and AI Development Act (CADA), compliance costs are not uniform but depend entirely on the targeted Union assurance level and the
How private critical entities can carry out a CADA-style impact assessment
Under the proposed Cloud and AI Development Act (CADA), private-sector entities classified as critical under the NIS2 Directive are not automatically requi
How should a non-EU provider weigh whether to pursue CADA recognition at all?
Under the proposed Cloud and AI Development Act (CADA), non-EU cloud providers face a binary strategic choice: adapt to the EU's sovereignty framework or e
How telecom and energy operators engage with CADA acceleration zones
Under the proposed Cloud and AI Development Act (CADA), telecom and energy operators are critical stakeholders in the creation of "data centre acceleration
How to align CADA recognition with Data Act switching and portability duties
As proposed, the Cloud and AI Development Act (CADA) does not override the Data Act's switching and portability obligations; instead, it layers sovereignty
How to apply for a data centre permit in a CADA acceleration zone: Article 12 & 13 guide
Under the proposed Cloud and AI Development Act (CADA), data centre operators do not apply to create an acceleration zone; they apply for construction perm
How to build a CADA evidence pack for national recognition
To secure recognition under the proposed Cloud and AI Development Act (CADA), providers must submit a comprehensive evidence pack to their national compete
How to build a consortium for a CADA frontier AI priority project
To establish a consortium eligible for recognition as a frontier AI priority project under the proposed Cloud and AI Development Act (CADA), you must organ
How to check if your country is a CADA 'associated third country' for Level 3
Under the proposed Cloud and AI Development Act (CADA), there is no self-service portal for providers to verify their country's status.
How to conduct a CADA risk assessment for public-sector cloud use
Under the proposed Cloud and AI Development Act (CADA), public-sector bodies and Union entities must conduct a mandatory risk assessment to determine the r
How to demonstrate EuroCloud sharing conditions to the Commission under CADA
Under the proposed Cloud and AI Development Act (CADA), public-sector bodies wishing to share data centre or cloud computing services within the EuroCloud
How to design a data centre for waste-heat reuse under CADA
Under the proposed Cloud and AI Development Act (CADA), designing a data centre for waste-heat reuse is no longer a voluntary sustainability choice but a s
How to determine the required CADA Union assurance level for public workloads
To determine the required Cloud and AI Development Act (CADA) assurance level for your public-sector workload, you must conduct a risk assessment under Art
How to document a CADA procurement derogation for non-recognised cloud
Under the proposed Cloud and AI Development Act (CADA), public-sector contracting authorities are generally required to procure cloud computing services re
How to evaluate Union added value in CADA cloud and AI tenders
Under the proposed Cloud and AI Development Act (CADA), contracting authorities must include specific non-price award criteria in public procurement for in
How to gap-analyse your cloud service against CADA Annex II criteria
To gap-analyse your cloud service against the proposed Cloud and AI Development Act (CADA), you must map your current technical, legal, and organisational
How to get CADA Union assurance level 2 recognition: Audit, criteria & process
To obtain recognition at CADA Union assurance level 2, a cloud computing service provider must undergo a mandatory independent third-party audit and secure
How to get recognised at CADA Union assurance level 3: Audit, criteria & third-country rules
To achieve recognition at CADA Union assurance level 3, a cloud computing service provider must undergo a mandatory independent third-party audit and submi
How to get your cloud service listed on the CADA central repository
You do not list your service yourself.
How to handle a Commission information request during CADA recognition
As proposed in the Cloud and AI Development Act (CADA), if national competent authorities cannot resolve a disagreement over a cloud service's Union assura
How to handle environmental and water permits for a CADA data centre zone
Under the proposed Cloud and AI Development Act (CADA), obtaining environmental and water permits for data centres in acceleration zones is streamlined thr
How to handle multi-vendor cloud strategies under CADA risk assessments
Under the proposed Cloud and AI Development Act (CADA), contracting authorities must explicitly evaluate whether a multi-vendor or multi-cloud strategy is
How to handle subcontractors under CADA: Level 1 to Level 4 criteria
Under the proposed Cloud and AI Development Act (CADA), cloud service providers cannot outsource their sovereignty obligations.
How to join the OSPO Network under CADA: A guide for public bodies
Under the proposed Cloud and AI Development Act (CADA), Open Source Programme Offices (OSPOs) established by public-sector bodies at local, regional, or na
How to keep CADA audit evidence ready for inspection by competent authorities
Under the proposed Cloud and AI Development Act (CADA), cloud service providers must maintain all audit evidence and documentation required for their Union
How to meet EU establishment and data localisation for CADA Level 1
As proposed in the Cloud and AI Development Act (CADA), meeting Union Assurance Level 1 requires a cloud computing service provider to be established in th
How to monitor CADA delegated and implementing acts changing obligations
Under the proposed Cloud and AI Development Act (CADA), the regulatory baseline is not fixed.
How to notify material changes affecting CADA recognition: A provider's guide
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers holding Union assurance level recognition (Levels 1–4) must notif
How to prepare a CADA self-assessment report for Union assurance level 1
To obtain recognition for Union assurance level 1 under the proposed Cloud and AI Development Act (CADA), cloud computing service providers must conduct a
How to prepare a frontier AI compute pooling commitment for a CADA project?
To secure recognition as a "frontier AI priority project" under the proposed Cloud and AI Development Act (CADA), your consortium must formally commit to p
How to prepare for the annual CADA audit review: Article 20(8) explained
Under the proposed Cloud and AI Development Act (CADA), cloud service providers seeking Union assurance levels 2, 3, or 4 must undergo a mandatory annual r
How to prioritise brownfield sites for CADA data centre acceleration zones
As proposed in the Cloud and AI Development Act (CADA), Member States must explicitly consider a preference for reusing brownfield sites over using greenfi
How to prove immunity from third-country law for CADA Level 3 & 4
Under the proposed Cloud and AI Development Act (CADA), demonstrating immunity from third-country law for Union assurance levels 3 and 4 requires proving t
How to prove state-of-the-art cybersecurity for CADA Level 1
To prove state-of-the-art cybersecurity for the proposed Cloud and AI Development Act (CADA) Union Assurance Level 1, providers must conduct a rigorous con
How to respond to a CADA investigation by a national competent authority
If a national competent authority (NCA) initiates an investigation into your cloud computing service under the proposed Cloud and AI Development Act (CADA)
How to scope workloads under CADA's sovereignty rules: A guide for CTOs
Under the proposed Cloud and AI Development Act (CADA), scoping workloads is a mandatory two-step legal and technical process.
How to set up an Open Source Programme Office (OSPO) to join the CADA OSPO Network
Under the proposed Cloud and AI Development Act (CADA), public sector bodies at local, regional, or national levels, as well as Union entities, are encoura
How to substantiate a data centre project's predicted lifetime for CADA strategic status
As proposed in the Cloud and AI Development Act (CADA), the duration of a "strategic project" designation is not arbitrary; it is strictly derived from the
How to track revocations and changes on the CADA central repository
Under the proposed Cloud and AI Development Act (CADA), the European Commission will maintain a central repository of cloud computing services recognised f
How to use the Commission's methodology for CADA risk assessments
Under the proposed Cloud and AI Development Act (CADA), public-sector bodies and Union entities must conduct risk assessments to determine the appropriate
How to use the Single Information Point (SIP) for CADA data centre projects
Under the proposed Cloud and AI Development Act (CADA), data centre operators deploying within designated acceleration zones have a statutory right to be a
How to write non-price award criteria for Union added value under CADA
Under the proposed Cloud and AI Development Act (CADA), public authorities must include non-price award criteria for "Union added value" when procuring inn
What evidence do I submit for CADA recognition?
Under the proposed Cloud and AI Development Act (CADA), the evidence required for recognition depends entirely on the Union assurance level you are targeti
What goes into a CADA audit report and audit opinion?
Under the proposed Cloud and AI Development Act (CADA), the audit report and the accompanying audit opinion are the definitive evidentiary outputs for clou
What happens after a negative CADA audit opinion?
If an auditing organisation issues a 'negative' audit opinion under the proposed Cloud and AI Development Act (CADA), your cloud computing service is not r
What happens if a CADA strategic project designation is withdrawn?
If the European Commission withdraws a strategic project designation under the proposed Cloud and AI Development Act (CADA), the data centre project immedi
What happens if another Member State objects to my CADA recognition?
Under the proposed Cloud and AI Development Act (CADA), recognition of cloud services at Union assurance levels is a cross-border process.
What is the data centre permit timeline under CADA?
Under the proposed Cloud and AI Development Act (CADA), data centre projects located within designated "data centre acceleration zones" benefit from a stri
What is the timeline and deadlines for getting CADA recognition?
As proposed in the Cloud and AI Development Act (CADA), the recognition procedure is time-bound to give providers commercial predictability.
What should a cloud provider do before CADA's application date?
Cloud providers aiming to serve the EU public sector under the proposed Cloud and AI Development Act (CADA) must begin preparation immediately, well before
What should a public-sector body do before CADA's application date?
Before the Cloud and AI Development Act (CADA) becomes applicable, public-sector bodies must execute a three-step compliance sprint: prepare the risk asses
When are CADA risk assessments due and how often must they be repeated?
As proposed in the Cloud and AI Development Act (CADA), Member States and Union entities must complete their first sovereignty risk assessments within one
When can a public buyer use a derogation from CADA's assurance-level procurement rules?
Under the proposed Cloud and AI Development Act (CADA), public buyers are generally bound to procure cloud services meeting a specific Union assurance leve
Where do I start with CADA compliance if I am completely new to it?
If you are new to the proposed Cloud and AI Development Act (CADA), your immediate priority is to determine your organisational role under Article 2 (e.g.,
Which National Competent Authority Do I Apply to for CADA Recognition?
Under the proposed Cloud and AI Development Act (CADA), a cloud computing service provider must submit its application for Union assurance recognition to t
Who pays for the independent audit under CADA? Costs for Levels 1–4
Under the proposed Cloud and AI Development Act (CADA), cloud computing service providers seeking recognition for Union assurance levels 2, 3, or 4 must be