The EAA has applied since June 2025 with no warning email. If your app handles money or a covered service in the EU, you are likely in scope. Here is how to audit.
Read more
Most of your app is code you did not write. Each SDK runs with your permissions and your users' trust. Here is how to inventory them and make the audit repeatable.
Read more
iOS 27 ships into a 2026 of age-verification laws, the DSA, the DMA, and the EAA. Here are the five compliance areas to watch at WWDC, and what you can audit today.
Read more
From August 31, 2026, new apps and updates must target Android 16. Miss it and your app goes invisible to new users. Here is a practical pre-submission audit.
Read more
The CRA covers almost any commercial software on the EU market. From September 2026 you must report exploited vulnerabilities within 24 hours. Here is the full timeline.
Read more
The Digital Markets Act reshapes how Apple and Google operate in Europe. Alternative payments, distribution, and browser engines are now available. Here is what matters.
Read more
All Google Play apps must target API 35 by August 31, 2025. Edge-to-edge rendering, foreground service timeouts, and TLS changes will break unprepared apps.
Read more
Desktop and web font licenses do not cover app embedding. Foundries actively audit published apps. Here is how to identify risk and build a repeatable audit process.
Read more
Source-level dependency files miss transitive SDKs and statically linked libraries. Binary-level SBOM generation is required for regulatory compliance and real supply chain visibility.
Read moreGet early access and be first to run all 137 checks on your own build when the doors open.
Your build is deleted the moment the scan finishes. Findings stay for your retention window. EU infrastructure, EU vendors, no AI training on your code.
