EU Compliance

Overview

Droblet is fully committed to compliance with all applicable European Union regulations governing trade, customs, data protection, and digital services. Our platform is designed to help businesses navigate EU compliance requirements while maintaining the highest standards ourselves.

1. GDPR Compliance

2. EU Customs Regulations

Union Customs Code (UCC)

• Automated customs declaration generation
• HS code classification according to EU Combined Nomenclature
• Customs valuation compliance
• Origin determination and preferential rules
• Duty and VAT calculation

Import Control System 2 (ICS2)

Export Control System (ECS)

• Export declarations and notifications
• Exit summary declarations
• Dual-use goods licensing compliance

3. EU Carbon Border Adjustment Mechanism (CBAM)

Droblet supports CBAM reporting requirements for imports of:

Automated quarterly reporting and embedded emissions calculation

4. eIDAS Regulation

• Qualified electronic signatures for customs documentation
• Electronic seals for automated systems
• Time-stamping services for audit trails
• Recognition of EU member state eID schemes

5. VAT and Taxation Compliance

EU VAT Directive

• Automated VAT calculation for imports and intra-EU supplies
• OSS (One Stop Shop) compliance for e-commerce
• IOSS (Import One Stop Shop) for low-value consignments
• Reverse charge mechanism implementation

DAC7 Reporting

Support for platform economy reporting requirements under Directive 2021/514/EU

6. Dual-Use Export Controls

• Automated screening against EU dual-use lists
• License requirement identification
• End-use and end-user controls
• Catch-all provision compliance

7. Product Compliance

8. Sanctions and Trade Restrictions

Real-time screening against:

• EU consolidated list of sanctioned persons, entities, and countries
• Country-specific embargoes and restrictions
• Sectoral sanctions (e.g., Russia, Iran, North Korea)
• Financial and trade measures under EU Common Foreign and Security Policy (CFSP)

9. Security & Data Protection

We protect personal data through encryption at rest (AES-256-GCM), encryption in transit (TLS), and UK-based hosting (Amazon Web Services, London — eu-west-2).

Droblet does not currently hold formal information-security certifications such as ISO 27001, SOC 2 or TISAX, and has not yet completed a formal third-party penetration test. We will update this section as our certification programme progresses.

10. Updates and Monitoring

We continuously monitor EU regulatory developments and update our platform to ensure ongoing compliance. Our legal and compliance team reviews all EU Official Journals, customs notices, and regulatory guidance.