It is no secret a major shift is expected for digital service builders with the new NIS2 directive. Upcoming regulations will oblige many digital providers and data centers to be considered as essential or important entities. The belts will be tightened for almost everyone: as soon as a service provider has an important customer falling under NIS regulation, he automatically has to be trusted, answer the security questions and conduct an audit. Software companies, even start-ups and scale-ups, need to look closer at regulations and often they are urged to do so by their customers.