Compliance built into
how you moderate

Compliance built into how you moderate

The DSA, the UK Online Safety Act and COPPA ask you to protect your users and to prove how you do it. Amanda combines AI detection with human review, and keeps every decision documented and ready to explain.

Three layers of
moderation governance

Every platform shares the same legal floor, and builds up from there. Knowing which layer a question belongs to tells you who sets the rules, and what you need to be able to show.

EDITORIAL DISCRETION

Set by you

The rules you add above the legal floor: your community guidelines, your tone, your culture.

Amanda enforces your own guidelines, so your community feels like yours.

PROCESS OBLIGATIONS

Set by regulators

How you moderate, and how you show it. Describe your rules, enforce them diligently and proportionately, protect minors, explain every sanction, handle appeals with real people and publish transparency reports. The EU’s DSA sets the bar here.

Amanda pairs AI detection with human review, and keeps a record of every decision.

LEGAL FLOOR

Set by governments

Illegal content, including child sexual abuse material and other prohibited material. The rules vary by country, and they apply everywhere you have users.

Amanda flags suspected illegal content and behaviour so your team can escalate it.

What the rules mean

Regulations are written in legal language. Your moderation team works in queues, sanctions and appeals. Here is how the two line up, and where Amanda supports each duty.

The duty What it means day to day How Amanda supports it
Notice and action DSA, UK OSA Your user reports queue. Reports need a clear way in, and a prompt, careful decision. User reports flow into Amanda, where they are prioritised and routed to automated or human review.
Statement of reasons DSA Telling users why their content was removed or their account restricted, and whether the decision was automated. Every action is logged with the rule it enforces and how the decision was made.
Appeals DSA, UK OSA Users can challenge a decision. Under the DSA, appeals cannot be decided by automation alone. Appeals go to human moderators, with the full case history in front of them.
Protection of minors DSA, UK OSA, COPPA Stronger protection wherever children can use your service, from chat to profiles. Detection for grooming and other child safety risks, with escalation to your team.
Risk assessment DSA, UK OSA Knowing which harms can happen on your service, and showing how you reduce them. Moderation data and trends give your risk assessment real evidence to stand on.
Transparency reporting DSA, UK OSA Publishing your moderation numbers in the format regulators expect. Reports are drafted from your moderation data and exported in machine readable formats.

The rules our
customers ask about most

Where your company is based matters less than where your users are. These are the three regulations that regularly come up.

DSA

Digital Services Act

Applies to

Online services offered to users in the EU that host user content, from games and social apps to learning platforms. Wherever you are based.

Key duties

  • Notice and action for illegal content
  • Statements of reasons and user appeals
  • Protection of minors on online platforms
  • Risk assessments for the largest platforms

Recent enforcement

May 2026: the European Commission fined Temu €200 million over its risk assessments, the largest DSA fine so far.

Fines up to 6% of global annual turnover

OSA

Online Safety Act

Applies to

User to user and search services with UK users, of any size. If children can use your service, the children’s safety duties apply too.

Key duties

  • Illegal content risk assessments
  • Children’s risk assessments and safety duties
  • Age assurance for the most harmful content
  • Transparency reports for categorised services

Recent enforcement

March 2026: Ofcom fined 4chan £520,000 over its risk assessment, terms of service and age checks.

Fines up to £18M or 10% of qualifying worldwide revenue, whichever is greater

COPPA

Children’s Online Privacy Protection Act

Applies to

Online services directed at children under 13 in the US, or that knowingly collect their personal data. Common in games, learning apps and social apps for kids.

Key duties

  • Verifiable parental consent
  • Separate consent before sharing data with third parties
  • Data retention limits and a written security program

Recent enforcement

January 2025: HoYoverse agreed to a $20 million FTC settlement over allegations it collected data from children under 13 without parental consent.

Fines up to £18M or 10% of qualifying worldwide revenue, whichever is greater

Operating in other markets, such as Australia?
Ask us which rules apply and how Amanda fits.

Decisions you can explain,
reports you can stand behind

Humans in the loop

AI handles volume. Trained moderators handle the hard calls, the edge cases and the appeals.

Every decision is traceable

What happened, which rule applied, and who or what decided. Everything is ready when a user or a regulator asks.

Reports generated from your usage data

Transparency reports are drafted from your moderation data, so your team reviews and adds context instead of starting from scratch.

Works with what you have

If you don’t use Amanda for moderation you can still use our Transparency Report Wizard via API or manual input.

FAQ

Q: Does using Amanda make us compliant?
No tool can do that on its own. Compliance depends on your policies, your processes and your decisions. Amanda gives you the moderation workflow, human review, documentation and reporting those obligations rely on, so you can show what you do and why.

Q: Why does human review matter for compliance?
Regulators expect platforms to make careful, proportionate decisions and to correct mistakes. The DSA, for example, requires that appeals are not decided by automated means alone. Human review is how you meet that expectation.

Q: We are not based in the EU or UK. Do these rules still apply?
Often, yes. The DSA and the UK Online Safety Act both look at where your users are, not where your company is registered. If you have users in those markets, it is worth checking.

Q: Where is Aiba based?
Aiba is a Norwegian company, so European privacy and safety rules are part of how we work every day.

Q: Do you give legal advice?
No. We know moderation and the operational side of these rules well, and we are happy to talk them through. For legal interpretation, your own counsel should have the final word.