Do product safety rules apply to a cloud provider?
Short answer
Only when software is supplied as part of a product. The liability route now reaches software components.
Read against the registers 2026-08-26.
Who the role is
Whoever runs infrastructure, hosting or a platform for someone else's data and traffic.
What the topic covers
The EU sets one general safety duty with named economic operators and a liability regime behind it. China works through compulsory certification and origin rules at the border.
The rows behind the answer
European Union
- General Product Safety Regulation — Regulation (EU) 2023/988: General safety requirement, a responsible person in the Union and duties per economic operator.
- Product Liability Directive — Directive (EU) 2024/2853: Liability for defective products, extended to software and to digital components.
- Market Surveillance Regulation — Regulation (EU) 2019/1020: Market surveillance powers and the requirement that a person in the Union is reachable for compliance.
United States
No US row in our register for this topic. That is a gap in the register, not a statement that no rule exists.
China
- Regulations on Compulsory Product Certification (CCC): Named product categories require certification before they may be sold on the Chinese market.
- Regulations on the Origin of Import and Export Goods: Determines the origin of goods, which decides duty treatment and labelling at import.
Where companies usually start
- Name the responsible person in the Union before the first shipment, not after a complaint.
- Check whether the product category sits on the Chinese certification list.
- Keep the technical file and the origin documents in the same place.
This page reads published registers and describes common practice. It is not legal advice and it is not a compliance verdict.
Other questions for cloud service provider
- Do ai governance rules apply to a cloud provider?
- Do personal data rules apply to a cloud provider?
- Do cross-border data rules apply to a cloud provider?
- Do cybersecurity rules apply to a cloud provider?
- Do health data rules apply to a cloud provider?
- Do online platforms rules apply to a cloud provider?
- Do consumer rights rules apply to a cloud provider?
- Do climate disclosure rules apply to a cloud provider?
- Do export controls rules apply to a cloud provider?
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
