Engage offers GDPR Article 27, DSA, TCO and Data Act representative appointments through the same online sign-up. Choose the mandates your business needs. They are separate appointments, one for each mandate, sold together in one order.
The same Engage entity, named in the representative agreement, contracts for all four mandates. Your appointment documents identify the mandate and the entity holding it. Representative agreement, clauses 1 and 16, read October 14, 2026.
Which appointments belong in your order?
| Appointment | Read the duty before choosing | Engage’s contracted role |
|---|---|---|
| GDPR Article 27 | Article 27(1) says the controller or processor must “designate in writing a representative in the Union” where Article 3(2) applies. Check the territorial test and exemptions. | EU contact for supervisory authorities and data subjects; holding the processing-record copy you supply. |
| DSA Article 13 | Article 13(1) concerns providers of intermediary services with no Union establishment that offer services in the Union. It calls for a representative “in one of the Member States where the provider offers its services”. | Representative contact for Member State authorities, the Commission and the European Board for Digital Services. |
| TCO Article 17 | Article 17(1) addresses a hosting service provider without its main establishment in the Union. The written appointment is for “the receipt of, compliance with and the enforcement of removal orders and decisions”. | Receipt and immediate forwarding of removal orders to your named contact. |
| Data Act Article 37(11) | The rule covers an in-scope entity making connected products available or offering services in the Union without an establishment there. It says to “designate a legal representative in one of the Member States”. | Representative contact for the competent authorities and data coordinator of the Member State where Engage is located. |
Legal sources, checked October 14, 2026: GDPR Article 27, DSA Article 13, TCO Article 17, Data Act Article 37. The contracted roles come from the matching schedules in the agreement.
For the DSA appointment, the provider must offer services in the representative’s Member State. For the TCO appointment, Article 17(2) says the representative must reside or be established “in one of the Member States where the hosting service provider offers its services”. Engage’s EU establishment is in the Netherlands, so check that location against your services before choosing these appointments. DSA Article 13(1) and TCO Article 17(2), checked October 14, 2026.
What you receive
Each selected mandate has an appointment document and certificate. Engage supplies the representative wording you publish, and the public representative contact page reflects each appointment’s current status.
For the GDPR, DSA and Data Act appointments, Engage forwards in-scope correspondence within one business day of receipt, subject to reasonable use. For the TCO appointment, Schedule C C8.4 requires immediate forwarding of all correspondence received in that representative capacity. Translation of representative correspondence is included and uses automated tools; the original language version prevails. Images, photos and identity documents are forwarded without translation. Agreement, clauses 4, 15, 16 and 19, read October 14, 2026.
The GDPR appointment includes holding the processing-record copy you supply and making it available to a supervisory authority on request. You write and update that record. The DSA, TCO and Data Act schedules do not include holding documents for you. Agreement, matching schedules, read October 14, 2026.
How the annual price works
Each mandate in your order is a separate appointment with its own price, quoted for paying yearly. Quarterly and monthly payment cost more. Your commercial band follows the highest result from employee count, global revenue and EU/UK data-subject count. These are pricing bands, not statutory size tests.
Choose only the mandates you need. The instant quote shows the price before payment.
TCO orders need an available response contact
For a TCO appointment, Engage forwards all representative correspondence immediately on receipt, including removal orders. You must keep an available 24-hour contact and meet the response duties in Schedule C. The agreement lets Engage resign the TCO appointment immediately after a single missed response service level. The DSA appointment has its own Schedule C response duties. Agreement, Schedule C, C3 and C7 to C9, read October 14, 2026.
The legal removal deadline belongs to the hosting service provider. Article 3(3) says content must be removed or access disabled “within one hour of receipt of the removal order”. Your contractual response window in Schedule C starts when Engage forwards the communication. The statutory removal deadline follows the Regulation’s receipt rules; Engage’s internal relay does not create a new statutory period. The appointment does not give Engage access to remove your content. TCO Article 3(3) and the TCO contract schedule, checked October 14, 2026.
Article 3(5) says the authority addresses the order to the hosting provider’s main establishment or its Article 17 representative, then transmits it to the Article 15 contact point. The electronic record must establish “the accuracy of the date and the time of sending and receipt of the order.” Use that original delivery record when checking the legal deadline; do not treat a later internal relay timestamp as a new removal order. TCO Article 3(5), read October 14, 2026.
Article 3(7) and (8) contain specific start rules where compliance is impossible for the stated reasons, or the order has manifest errors or insufficient information. Paragraph 7 says the deadline starts when “the grounds referred to in the first subparagraph of this paragraph have ceased to exist.” Paragraph 8 says it starts when “the hosting service provider has received the necessary clarification.” Those exceptions must be checked against their full conditions, rather than treating every operational delay as extra time. TCO Article 3(7) and (8), read October 14, 2026.
Your compliance work stays with you
The representative agreement covers the representative function. It excludes DPO services, compliance advice and legal advice. You decide the substance of your responses and keep your own compliance work current.
Engage also delivers DPO services directly under a separate DPO scope. If you need that service, review it separately from the representative appointments. Representative agreement, clauses 2 and 3 and current DPO service description, read October 14, 2026.
Choose your mandates and see the price
Choose representative mandates
Before paying, read the representative agreement, including the schedules for the mandates you choose. Billing renews automatically, for the same period and the same way of paying, unless canceled under the agreement. Pre-existing authority correspondence is excluded. Agreement, clauses 5, 6 and 12, read October 14, 2026.
Representative mandates
These mandates stack rather than replace each other. One company selling into Europe can be caught by several at once, each is a separate appointment with its own published contact point, and an EU representative does not cover the UK. Engage Compliance holds them together so you have one point of contact across the set.
- EU GDPR Article 27 representative
- UK GDPR Article 27 representative
- Swiss FADP Article 14 representative
- DSA Article 13 legal representative
- EU AI Act GPAI authorised representative
- EU AI Act high-risk authorised representative
- NIS2 representative
- Data Act legal representative
- Data Governance Act representative
- e-Evidence legal representative
- Terrorist Content Online representative
- GPSR responsible person
- CE-marking authorised representative
- Non-EU regimes on request (China, Korea, Turkey, Thailand)