EU Declarations of Conformity

Bombyx LLC provides software-based logistics collaboration services accessible at bom-byx.com. As a technology platform serving European Union users and business customers, Bombyx is committed to compliance with applicable EU regulations governing digital services, data protection, and information security.

This page documents Bombyx’s declarations of conformity with the following EU legislative frameworks. These declarations are reviewed and updated on an ongoing basis as our platform evolves and new regulations come into effect.

General Data Protection Regulation (GDPR)

Regulation (EU) 2016/679 — GDPR

✓ Compliant

Bombyx declares its commitment to compliance with the General Data Protection Regulation (EU) 2016/679. Our data processing activities are carried out in accordance with GDPR principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

Key compliance measures include:

• Maintenance of a Record of Processing Activities (RoPA) as required by Article 30;
• Implementation of appropriate technical and organisational security measures (Article 32);
• Data Processing Agreements (DPAs) with all sub-processors;
• Standard Contractual Clauses (SCCs) for international data transfers from the EEA;
• Data subject rights mechanisms (access, rectification, erasure, portability, objection);
• Data breach notification procedures aligned with Article 33 (72-hour reporting obligation);
• Privacy by design and by default principles incorporated into product development.

For privacy inquiries, contact: contact@bom-byx.com

Digital Services Act (DSA)

Regulation (EU) 2022/2065 — DSA

✓ Monitoring

Bombyx acknowledges the requirements of the Digital Services Act and is committed to applying applicable provisions to our platform services. As a platform primarily serving business users (B2B) with supplementary consumer access (B2C), Bombyx monitors DSA obligations proportionate to our platform scale and nature.

Our DSA compliance commitments include:

• Maintenance of transparent terms of service and content policies;
• Provision of accessible contact points for regulatory authorities;
• Cooperation with competent authorities upon lawful request;
• Monitoring of platform status relative to applicable DSA thresholds.

Network and Information Security Directive (NIS2)

Directive (EU) 2022/2555 — NIS2

✓ Monitoring

As a digital infrastructure and logistics platform, Bombyx acknowledges the relevance of the NIS2 Directive for supply chain and digital service security. We maintain security practices aligned with NIS2 requirements, including:

• Risk management frameworks for information security;
• Incident detection and response capabilities;
• Supply chain security assessment for critical vendors;
• Business continuity and disaster recovery planning;
• Employee cybersecurity training and awareness programmes.

EU AI Act

Regulation (EU) 2024/1689 — AI Act

⏳ Under Review

Bombyx is actively reviewing the applicability of the EU Artificial Intelligence Act to its platform features and automated tools. We are committed to complying with applicable provisions as the Act’s implementation timeline unfolds. We will update this declaration as our assessment progresses and relevant obligations apply.

ePrivacy and Cookie Compliance

Directive 2002/58/EC (ePrivacy) and national implementations

✓ Compliant

Bombyx implements a consent-based cookie management approach aligned with ePrivacy requirements. Non-essential cookies are only deployed with prior user consent, which can be withdrawn at any time through our cookie preference centre.

Disclaimer and Updates

The declarations on this page represent Bombyx’s good-faith assessment of its compliance posture as of the date indicated. These are not formal CE mark declarations (which apply to physical products) and should not be construed as legal opinions. Compliance is an ongoing process, and this page will be updated as regulations evolve or our assessment changes.

For formal documentation, product-specific compliance inquiries, or to report a compliance concern, please contact us at contact@bom-byx.com.