These are not trend pieces. Each one has a date attached, and the date is not mine to move. The shape of the job is almost always the same: pull data out of systems that were never designed to talk, chase the suppliers who did not answer, and produce a filing that survives an auditor reading it backwards. Chasing suppliers for documents and reconciling what they send is the core of it — work I did in procurement, customs and import paperwork included.
CBAM data collection
Definitive regime since 1 January 2026; authorised declarants file an annual CBAM declaration — the first one covers 2026. The engineering problem is not the form — it is collecting embedded-emissions data from dozens of suppliers in a dozen formats, and chasing the ones who go quiet. Ingest → match → flag the gaps → chase automatically → draft the annual declaration.
EUDR due-diligence files
Applies from 30 December 2026 for large and medium operators (30 June 2027 for micro and small enterprises). Geolocation and legality evidence per supplier, a risk assessment that holds up, and a due diligence statement. Mostly supply-chain paperwork, a little software — which is the right mix for me.
e-Factura / SAF-T reconciliation
Since 1 January 2025, invoices issued to consumers (B2C) must be sent through RO e-Factura (Government Emergency Ordinance 69/2024). This is not another invoicing tool — the market is full of those. It is the reconciliation layer: what your billing system issued, versus what actually reached the state portal, versus the difference, versus the days left.
AI Act operational compliance
High-risk obligations for stand-alone (Annex III) systems — including AI used to monitor and evaluate workers — apply from 2 December 2027, after Regulation (EU) 2026/1744 moved the date. If what I build for you uses AI, the log trail, the human-oversight record and the who-approved-what evidence come with it. Not sold separately — it is a by-product of building it properly.
European Accessibility Act
Applies from 28 June 2025 and covers e-commerce among other services. My website builds include a WCAG 2.1 AA audit; for businesses in scope, that audit stops being a nice-to-have.
Sources for these dates
Dates and scope above link to official sources. For these five regulations I do not quote penalty amounts: the figures circulating in commercial blog posts did not survive checking, and I am not going to sell you on a number I cannot stand behind. Where this site does quote a fine — on the LumAIstra Pontaj page — it comes straight from the statute, with the source next to it. If a penalty figure matters to your decision, we verify it together against the legislation before it goes anywhere near a proposal.