PLDShield — EU Product Liability Directive Compliance Autopilot for Software & SaaS Companies

The Problem

On December 9, 2026, the EU's revised Product Liability Directive (EU) 2024/2853 comes into full effect. For the first time in European legal history, standalone software, SaaS, and AI systems are explicitly classified as "products" subject to strict liability. This means software developers and SaaS providers can be held legally liable for damages caused by defective software — without the claimant needing to prove fault.

Most software companies have never had to think about product liability. They're used to limiting liability through EULAs and Terms of Service. Under the new PLD, contractual exclusions of liability for software defects are void. A failed security update, an AI model that causes harm after learning in production, or a cybersecurity vulnerability that leads to data corruption — all of these can trigger strict liability claims with compensation for psychological harm and data destruction.

The kicker: the burden of proof has been eased for claimants. In complex technical cases (AI, sophisticated software), courts can presume defectiveness and causal links if the claimant demonstrates likelihood. The manufacturer must then prove their product wasn't defective.

Software companies need to implement: continuous risk assessment, detailed technical documentation, post-market surveillance, cybersecurity monitoring, update liability tracking, and evidence preservation for potential claims. Most have none of this infrastructure.