Legal Representation for Online Platforms: Article 13 DSA Providers & Prices (2026)

• Article 13 DSA requires non-EU intermediary service providers to appoint a legal representative in the EU.
• REP27 — Europe Services, SE offers DSA representation from EUR 390/year (price verified October 2026).
• Engage Compliance, EDSR, OSTRAI, DP-Dock GmbH, and MLL Legal also provide this service; pricing and scope differ.
• The legal representative must be established in an EU Member State where the service is offered.
• Appointment does not create an EU establishment but gives legal competence to the representative's state.
• Not all online businesses need a DSA representative—see the decision matrix and practical scenarios below.

Updated 21 October 2026 · 7 sources checked

Providers compared

Prices as published on each provider's website on 21 October 2026, excluding VAT unless stated. Each row links to its source.

What Article 13 DSA Requires: Legal Duties and Who Must Comply

Article 13 of the Digital Services Act (DSA) imposes a clear legal obligation: any provider of intermediary services (including online platforms, marketplaces, hosting, cloud, VPN, DNS, CDN) established outside the EU, but offering services to users in the EU, must appoint a legal representative in at least one EU Member State where it offers its service. This requirement applies regardless of the provider’s size, but for Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs), a representative is required in every Member State where services are offered. The legal representative acts as the official point of contact for authorities and users, receives and enforces orders, and must be contactable by both electronic means and postal address. The representative must be equipped with the necessary powers and resources to cooperate efficiently with authorities and ensure compliance with DSA decisions. Importantly, appointing a legal representative does not create an EU establishment, but it does confer legal competence to the Member State where the representative is located. Failure to comply with Article 13 can result in fines of up to 6% of annual worldwide turnover, and authorities may block access to the service in the EU. The DSA became fully enforceable for all intermediary services on 17 February 2024. Providers remain liable for DSA compliance even if their representative fails to act. The legal representative may also be mandated to receive and respond to claims for damages related to DSA compliance.

• Included / Not Included / Extra Fees Table

Providers must ensure their legal representative’s details are public, easy to find, and kept up to date. The representative’s contact information must be published in the provider’s terms or privacy notice. Orders and decisions from authorities must be received and enforced promptly.

How to Choose a DSA Legal Representative: Practical Steps and Decision Matrix

Choosing the right DSA legal representative is a critical compliance step. The law requires the representative to be located in a Member State where your service is offered. For example, REP27 — Europe Services, SE is established in the Czech Republic and can only act if your service is also offered to Czech users. Engage Compliance is based in Ireland, while others offer representation in multiple countries. Consider the following when selecting a provider:

• Location: The representative must be established in a Member State where your service is available. If you offer your service in several EU countries, most providers can cover all relevant states, but some (like REP27) require Czech Republic coverage.
• Scope of Service: Confirm that the provider covers all the Member States you need, and whether they offer additional services such as ready-made text for your terms, authority notifications, and public verification pages.
• Price and Transparency: Compare published and verified prices. REP27’s price is verified at EUR 390/year (EUR 350/year with a GDPR plan). Engage Compliance’s price is EUR 1200/year. Others provide pricing on request. Always ask for a breakdown of what is included and whether there are extra fees for notifications, document updates, or additional Member States.
• Cancellation and Renewal: Look for flexible terms and clear cancellation policies. REP27 allows cancellation at any time with no notice period. For others, check the terms before signing.

Decision Matrix

Always confirm with the provider whether your specific business model and geographic coverage are supported. If your service is not open to users in the representative’s country, you may need to select a different provider.

What the Price Really Includes: Comparing Service Scope and Value

DSA legal representative service pricing varies widely, and what is included can differ significantly between providers. REP27 — Europe Services, SE offers a verified price of EUR 390/year (EUR 350/year if you already have a GDPR plan with them). This includes a signed Article 13 DSA designation, notification to the Czech Digital Services Coordinator, a verifiable certificate with QR code, a public information page, forwarding of authority decisions within one working day, ready-made text for your terms, optional Article 11 contact point, and weekly checks to ensure your terms are up to date. There is no set-up fee, and cancellation is allowed at any time. Engage Compliance charges EUR 1200/year for DSA legal representative services, including handling communications with authorities and DSA compliance, but further details on included features are available on request. Other providers such as EDSR, OSTRAI, DP-Dock GmbH, and MLL Legal offer pricing and included services on request, and their scope may include regulatory contact infrastructure, escalation arrangements, and coordination with regulators.

When comparing providers, always ask:

• Does the price cover all required Member States?
• Are authority notifications and document updates included?
• Is there a public verification page or certificate?
• Are there extra fees for urgent requests or additional services?
• Is cancellation possible at any time, or is there a notice period?

Some providers may charge extra for document preparation, notifications, or coverage in additional Member States. Always request a written confirmation of what is included before signing up.

Hidden Costs and Exclusions: What to Watch For

While some providers, such as REP27 — Europe Services, SE, clearly state that there are no set-up fees and cancellation is possible at any time, other providers may have less transparent pricing or service exclusions. Always check for:

• Notice Periods: Some providers may require a notice period for cancellation, or may not refund unused months.
• Per-Request or Per-Notification Fees: There may be extra charges for handling authority notifications, urgent requests, or document updates.
• Limits on Liability: The representative’s liability may be limited by contract, and providers may exclude responsibility for product compliance (GPSR) or representation in Switzerland.
• Geographic Restrictions: Some representatives only act if your service is offered in their country. For example, REP27 only acts if your service is open to Czech users.
• Exclusions: DSA representation does not cover GDPR or GPSR obligations unless specifically included. Swiss representation is not included by any provider listed here.

Always request a full list of included and excluded services, and ask for a sample contract if possible. Clarify whether the provider will notify authorities when your mandate ends, and whether they will help update your terms and privacy notice if required by law.

How Appointment Works: Step-by-Step Guidance and Buyer Checklist

The process for appointing a DSA legal representative is straightforward but requires careful attention to detail. Here is a step-by-step guide based on current provider practices:

1. Confirm Your Obligation: Use the decision matrix above to determine if your business needs a DSA legal representative. If in doubt, consult the provider’s online checklists or contact them directly.
2. Choose a Provider: Select a provider established in a Member State where your service is offered. Confirm that they cover your business model and geographic footprint.
3. Sign Up and Provide Details: Complete the provider’s onboarding process, supplying company details, service description, Member States covered, and a contact point for users and authorities.
4. Receive and Sign the Designation Letter: The provider will issue a signed designation under Article 13 DSA, often with a verification code and certificate.
5. Authority Notification: The provider notifies the relevant Digital Services Coordinator(s) of your appointment. For REP27, this is the Czech Telecommunication Office (ČTÚ).
6. Update Your Legal Documents: Add the representative’s details to your terms of service and privacy notice, as required by Article 13(4) DSA. The provider may supply ready-made text for this purpose.
7. Ongoing Communication: Ensure you have a process for forwarding authority requests, updating documents, and renewing the mandate annually.

Buyer Checklist

1. Review your service type and EU presence.
2. Check if your platform is open to the representative’s country (e.g., Czech Republic for REP27).
3. Compare providers, prices, and included services.
4. Sign up and complete onboarding.
5. Update your terms and privacy notice as required.
6. Maintain communication and renew annually.

Some providers, such as REP27, also offer a weekly check to ensure your terms are up to date and will send reminders if updates are needed.

Risks and Fines for Non-Compliance: What Happens If You Ignore Article 13 DSA?

The risks of failing to appoint a DSA legal representative are significant. Under Article 13, non-compliance can result in fines of up to 6% of annual worldwide turnover. In addition to financial penalties, authorities may block access to your service in the EU, issue orders to cease operations, or take further enforcement actions. Providers remain liable for DSA compliance even if their representative fails to act. The legal representative must be equipped with the necessary powers and resources for efficient cooperation and compliance with DSA decisions. Orders and decisions from authorities must be received and enforced promptly. If you fail to keep your representative’s details up to date or do not respond to authority requests, you may face additional penalties or enforcement measures.

For VLOPs and VLOSEs, the risk is even higher, as a representative is required in every Member State where services are offered, and enforcement is likely to be more rigorous. Appointment of a legal representative does not shield the provider from liability; it is a statutory requirement to ensure effective enforcement of the DSA. The representative may also be mandated to receive and respond to claims for damages in respect of DSA compliance.

In summary, failing to appoint a DSA legal representative exposes your business to severe financial, operational, and reputational risks. Appointing a qualified representative and keeping your documentation up to date is essential for continued access to the EU market.

What Providers Usually Do Not Say: Exclusions, Notice, and Liability

There are several important details that many DSA legal representative providers do not highlight on their main sales pages:

• Appointment Does Not Create an EU Establishment: Having a legal representative in the EU does not mean your company is established there for tax, employment, or other legal purposes. It only gives legal competence to the representative’s Member State for DSA enforcement.
• Geographic Restrictions: Some providers can only act if your service is open to users in their country (e.g., REP27 requires Czech Republic coverage). If your service is not offered in that country, you must choose another provider.
• Scope Limitations: DSA representation does not cover product responsibility (GPSR), GDPR obligations, or Swiss representation unless specifically included. For example, REP27 does not provide Swiss representation.
• Notice Periods and Cancellation: Not all providers specify their cancellation terms. REP27 allows cancellation at any time with no notice period, but others may require advance notice or may not refund unused months.
• Extra Fees: Some providers may charge extra for authority notifications, urgent requests, or document updates. Always request a full price list and service scope in writing.
• Liability Limits: The representative’s liability for compliance failures may be limited by contract. Providers may not cover damages or fines resulting from your own non-compliance.

Always ask for a sample contract and clarify all terms before appointing a representative. Ensure you understand what is and is not included, and how to terminate the mandate if needed.

Realistic Scenarios: Who Needs What and How to Comply

• US SaaS Platform with EU Users: A US-based SaaS platform allowing users to post content or store data, with no EU office, must appoint a DSA legal representative in a Member State where the service is offered. If the platform is open to Czech users, REP27 — Europe Services, SE can act as the representative. The provider must update its terms and privacy notice, receive a signed designation, and ensure ongoing compliance. If the service is not offered in the Czech Republic, another provider must be chosen.
• Chinese Amazon Seller: A Chinese seller using Amazon, Etsy, or eBay does not need a DSA legal representative unless they operate their own platform or intermediary service. They must complete trader verification (handled by the marketplace) and may need a GPSR responsible person for product compliance. If they launch their own marketplace targeting the EU, they would need to appoint a DSA legal representative as described above.
• UK Online Shop (no EU office): A UK-based online shop with no EU establishment, offering a marketplace or intermediary service to EU users, must appoint a DSA legal representative in a Member State where the service is offered. The provider must ensure the representative’s details are public and up to date, and comply with all DSA requirements. If the shop only sells its own products and does not allow third-party sellers or user-generated content, no DSA representative is required.

These scenarios demonstrate the importance of understanding your business model, service type, and geographic reach before appointing a representative. Use the decision matrix above to determine your obligations and choose the simplest compliant route.