Regulations
Understand the regulations
that shape your business.
Clear, practical overviews of the regulations driving compliance across European value chains.
More frameworks and requirement areas added continuously.
Sustainability
What it requires
Requires large companies to report on sustainability impacts, risks and opportunities across their value chain.
Why it's hard
Demands structured data from hundreds of suppliers. Year 1 was the easy part — continuous execution is the real challenge.
How Regweaver helps
Structured data collection, automated supplier engagement, and audit-ready traceability.
What it requires
EFRAG's proportionate sustainability reporting standard for unlisted SMEs — a single structured dataset to answer customer ESG requests.
Why it's hard
Every customer asks slightly different questions. Without a reusable dataset, SMEs spend weeks rebuilding the same answers in different formats.
How Regweaver helps
Structured VSME modules, reusable across customers, with audit-ready traceability and built-in mapping to ESRS.
What it requires
The EU classification system that defines which economic activities count as environmentally sustainable.
Why it's hard
Classification works per activity and depends on data from your own operations and your value chain.
How Regweaver helps
Structured requests through your value chain, evidence tied to each requirement, and versioned records.
What it requires
EU disclosure rules for financial market participants — entity-level policies and product-level sustainability disclosures across articles 3–13.
Why it's hard
Article 6/8/9 classification is a legal judgment your firm owns. Evidence has to hold up across PAI, DNSH, Taxonomy alignment and marketing claims — and reform is on the table.
How Regweaver helps
Pre-built SFDR requirement package covering entity, product, channel and marketing layers — each line traceable to its legal source and versioned as the rules evolve.
Due diligence
What it requires
Requires companies to identify, prevent and mitigate human rights and environmental impacts across their value chains.
Why it's hard
Extends responsibility deep into value chains. Requires ongoing monitoring, not just assessments.
How Regweaver helps
Value chain mapping, continuous monitoring, and traceable due diligence processes.
What it requires
Prohibits placing products made with forced labour on the EU market. Applies from 14 December 2027, including to importers.
Why it's hard
Forced labour risk can sit several tiers away from the company placing the product on the market.
How Regweaver helps
Next on the same infrastructure: structured requests through your value chain, evidence tied to each requirement, and versioned records.
Cyber & digital
What it requires
Expands cybersecurity requirements to more sectors and smaller companies. Includes value chain security obligations.
Why it's hard
Many companies don't know they're in scope. Value chain requirements add complexity.
How Regweaver helps
RegCheck identifies applicability, and RegWatch monitors the NIS2 acts behind it as scope and timelines shift.
What it requires
Cybersecurity requirements for products with digital elements, throughout their lifecycle.
Why it's hard
Products are built from components and software from many suppliers, and the evidence has to stay current for the whole lifecycle.
How Regweaver helps
Structured requests to component suppliers, evidence tied to each requirement, and versioned records.
What it requires
EU rules on access to and sharing of data generated by connected products and services.
Why it's hard
Data from connected products involves several parties in the value chain.
How Regweaver helps
Structured requests through your value chain, evidence tied to each requirement, and versioned records.
What it requires
EU rules for processing personal data, with fines up to 4% of global turnover.
Why it's hard
Personal data is often processed by suppliers, and every one of them needs follow-up.
How Regweaver helps
Structured requests through your value chain, evidence tied to each requirement, and versioned records.
What it requires
Classifies AI systems by risk and sets obligations for providers and deployers, especially for high-risk AI.
Why it's hard
Many AI systems in use come from suppliers, and obligations depend on each system's classification.
How Regweaver helps
Structured requests through your value chain, evidence tied to each requirement, and versioned records.
Energy & buildings
What it requires
Renovation, minimum energy performance, metering, building automation and charging requirements on the EU building stock.
Why it's hard
Levels are set nationally, and suppliers are reached through their customers' procurement.
How Regweaver helps
Next on the same infrastructure: structured requests through your value chain, evidence tied to each requirement, and versioned records.
Your own requirements
What it requires
Build your own requirements — like a Code of Conduct, supplier policy or internal standard — and send them through your value chain alongside regulatory ones.
Why it's hard
Custom frameworks live outside formal regulation, but still need structured collection, follow-up and traceability. Spreadsheets and email don't scale.
How Regweaver helps
Define custom requirements in the same operating model as CSRD, CSDDD and SFDR. One structure for everything you push to your value chain.
We continuously expand the library with new regulations and requirement areas — driven by what our customers need to operationalise next.
Not sure which regulations apply to you?
Request a RegCheck and get a tailored regulatory overview from our team.