#compliance

Every other EU AI Act headline in 2026 has been about delay, but the Article 4 AI-literacy duty was never postponed. It has applied since February 2025, and from early August 2026 national authorities gain the powers to enforce it. Here is how to build a defensible program.

The BSI's final grace deadline for NIS2 registration expired on 31 July 2026 with thousands of in-scope German entities still unregistered. Germany's NIS2 regime now enters its enforcement phase, and registration failures alone can draw fines of up to EUR 500,000.

empowsec lets company admins build custom roles with granular permissions, renders a dashboard with only the tabs each user may see, and gives reseller teams an equivalent permission system - so nobody needs full admin access just to do one job.

Compliance frameworks expect regular, evidenced security training - but manual re-enrollment does not scale. empowsec automation rules enroll new hires automatically and re-run courses every 3, 6, 12 or 24 months, hands-off.

empowsec maintains comprehensive audit logs, records every impersonation session, and provides a compliant account deletion workflow - giving organizations the accountability, traceability, and GDPR evidence they need.

empowsec bundles features into plans, charges seat-based billing through Stripe, and reconciles seat overages with a transparent true-up process - so your organization can grow without hard blocks or billing surprises.

empowsec delivers role-aware notifications across every actor in the platform - end users, admins, managers, and resellers - while letting users control preferences per notification type, and protecting critical alerts that cannot be switched off.

empowsec supports single sign-on via SAML 2.0, OIDC, and OAuth, with per-domain configuration, attribute mapping, auto-provisioning on first login, and cross-domain authentication for white-label deployments - centralizing access and reducing password risk.

In 2026, no MFA can mean no coverage, and underwriters now want documented awareness training and phishing simulations too. Here is what insurers look for and how to evidence it.

DORA is best known for ICT risk and incident reporting, but it also makes security awareness training a compulsory module for staff and management. Here is what financial entities must do, and how to evidence it.

empowsec lets you organize employees into departments, give managers scoped visibility into their team's training and phishing results, and deliver weekly compliance digests so nothing slips through the cracks.

ISO/IEC 27001:2022 expects more than a once-a-year slideshow. Here is what the standard actually requires for security awareness, and how to prove it to your auditor.