VSL applies lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability to EU/EEA workflows. For sensitive processing, VSL documents the purpose, lawful basis where required, recipients, transfer safeguards, retention logic and technical or organisational measures.

VSL supports applicable access, correction, erasure, restriction, objection and portability rights subject to lawful retention and other statutory limits.

Relevant marketplace controls include seller or trader traceability, reporting channels for illegal goods or content, transparency, product or service evidence and action when VSL becomes aware of prohibited activity. VSL's seller verification, evidence and moderation systems support those controls while the exact DSA category remains a service-specific legal question.

EU AI Act transparency obligations under Article 50 apply from 2 August 2026 to covered systems. VSL identifies AI-assisted interactions where required, keeps AI connections within scoped permissions, requires confirmation for protected actions where configured, and records material action or security events.

Each AI feature is classified on its own facts. The presence of VSL guardrails does not by itself prove that a feature falls outside a regulated AI category.

VSL provides the commerce, payment-request and orchestration layer and relies on the relevant provider for the regulated processing available to that transaction. If a future VSL feature changes VSL's own role so that VSL would itself perform a regulated payment service, VSL treats that as a separate legal and launch gate.