# Does NIS2 apply to companies based outside the EU?

It can, if they provide services in the EU. NIS2 applies to entities that provide their services or carry out their activities within the Union (Article 2), and Article 26 sets which Member State has jurisdiction: as a rule the one where the entity is established, with special rules for providers of public electronic communications, for public administration and for certain digital providers, such as DNS and cloud providers, data centres, managed service and managed security service providers, online marketplaces, search engines and social networks, which fall under the country of their main establishment in the EU. A provider of those digital services that is not established in the EU but offers services there must designate a representative in a Member State. Non-EU companies outside these categories usually meet NIS2 through their EU customers' supplier requirements.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [NIS2 scope and duties](https://netsenx.com/en/faq/nis2) · https://netsenx.com/en/faq/does-nis2-apply-to-companies-outside-the-eu

## Read next

- https://netsenx.com/en/nis2-network-monitoring
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [What evidence will a NIS2 supervisor ask for?](https://netsenx.com/en/faq/what-evidence-will-a-nis2-supervisor-ask-for)
- [What is Implementing Regulation (EU) 2024/2690 under NIS2?](https://netsenx.com/en/faq/what-is-the-nis2-implementing-regulation-2024-2690)
- [How do national NIS2 laws differ between EU countries?](https://netsenx.com/en/faq/how-do-national-nis2-laws-differ)
- [Do I need NDR for NIS2?](https://netsenx.com/en/faq/do-i-need-ndr-for-nis2)
- [Does NIS2 require network monitoring?](https://netsenx.com/en/faq/does-nis2-require-network-monitoring)