In the first hours of an incident?
Speak to counsel — +351 919 497 920 — monitored outside working hours · first steps01The problem
Technology contracts are increasingly the place where regulatory obligations are allocated — or left unallocated. A cloud agreement determines who holds the DORA obligations. A software licence determines whether you are a provider or a deployer under the AI Act. A supplier arrangement determines whether NIS2 supply-chain duties are met or merely assumed.
Most technology contracting is still drafted as though those regimes did not exist.
02How we help
We draft and negotiate technology agreements with the regulatory position in view from the outset: what the counterparty must do, what it must tell you, what happens when a regulator asks, and who carries the consequence when something fails.
We also advise on the products themselves — platforms, applications, digital services, electronic identity and trust services — where the obligations attach to how the service is built rather than to how it is sold.
03Capabilities
04Regulatory framework
Portuguese contract law · GDPR and ePrivacy · DORA for financial entities · NIS2 supply-chain duties · the AI Act where the technology includes AI systems · eIDAS · the Data Act · the DSA for platform services.
Digital regulation applies to systems, not to documents. We work where law, technology and governance actually meet — which is where the obligations bite.