You will receive your reporting protocol, update policy and contracts.
§ 1
Approach
We will set down in writing the protocol for reporting to the authorities and who triggers it, so that your team knows how to react in the first hours.
We will define which security updates you provide and for how long, so that your customers know where they stand.
We will review the contracts with those who supply your components, libraries or models, to allocate responsibility for the final product properly.
§ 2
Engagement
El importe exacto se cierra en la hoja de encargo antes de pagar, con los gastos previsibles incluidos. Si el encargo se alarga, no pagas más.
§ 3
Process
A unilateral confidentiality agreement signed by PASSAS before the video consultation, available at no additional cost on request. It binds the firm alone — no signature is required from the client — and adds an explicit contractual layer on top of the professional secrecy obligations inherent to the practice of law.
A 60-minute working session by video call in which we analyse your situation, your specific needs and our ability to help you. We assess whether we can take on the matter and give you the fixed price in advance. You can book it directly through the Google Calendar link on our website and pay €90 by Stripe.
Legal analysis of the business model that determines which rules affect the company, what legal risks exist and what documentation is mandatory before operating. Covers the sectoral regulatory framework, data protection obligations, essential contracts and any applicable authorisation or licensing requirements.
An internal procedure for reporting actively exploited vulnerabilities and severe incidents to the authorities within the time limits of the Cyber Resilience Act, with the people responsible designated.
A written commitment on the security updates provided for the product and for how long, in line with the Cyber Resilience Act.
Contractual documentation to formalise relationships with clients and suppliers, with the terms, liabilities and scope clearly defined from the first engagement. Includes the services agreement adapted to the company's operations, with limitation of liability clauses and payment terms, ready to sign.
§ 4
Team
I see legal practice as a discipline of precision. I work where the law meets technology and cross-border operations, and I read code and contracts with the same attention. Before accepting an engagement I tell you whether it is worth pursuing and what it costs, at a fixed price.
§ 5
Questions
Manufacturers, importers and distributors of products with digital elements placed on the EU market, including software. Software provided only as a service generally falls outside it, and we will check this against your product.
Since 11 September 2026, reporting actively exploited vulnerabilities and severe incidents. The essential cybersecurity requirements will apply from 11 December 2027.
Until Spain transposes it, its effect here is limited. If you sell in Member States that do, your supplier contracts will need to take it into account, and we will review that within the same engagement.
From €3,500 + VAT, within three weeks. The exact figure is fixed in the engagement letter before you pay.
60 minutes on Google Meet with a qualified lawyer specialising in artificial intelligence, data, litigation or international law. €90 including VAT, deducted from the first invoice if we take on your matter. You leave with legal judgement and a fixed price for whatever comes next.
