← Blog

The DSA and image moderation: what a small platform needs to know

2026-07-02 · admin@modwall.dev · approx. 2 min read

This post is informational and does not constitute legal advice. If in doubt, consult a lawyer.

The Digital Services Act (DSA) is sometimes associated exclusively with the big platforms. That is misleading. Some obligations — especially those concerning content published by users — also cover small and medium hosting services: marketplaces, forums, classifieds portals, social and dating apps.

Who it applies to

If your service lets users publish content (including photos), you are a "hosting service provider" within the meaning of the DSA. The smallest entities (micro and small firms) are exempt from some of the heaviest obligations, but not from all of them — the basic duties of due diligence and reacting to illegal content apply, as a rule, to everyone.

What the DSA changes for moderation

• Reacting to illegal content. You must have a reporting mechanism and act once you receive a credible notice.
• Transparency of decisions. Moderation decisions should be explainable and possible to challenge — "we removed it just because" is not enough.
• Trace and accountability. In practice this means documenting what, when and on what basis was flagged or blocked.

For image content, a proactive scan on upload and recording the decision are the simplest way to demonstrate due diligence — instead of waiting until the problem hits the front page.

What the DSA does not require

The DSA does not impose a general obligation to monitor all content, nor does it require building your own AI model. It is about reasonable, documented processes — and those you can buy as a service instead of maintaining them yourself.

How modwall helps you prepare

modwall does not "handle compliance" for you — it is an assistive tool that makes it easier to meet the obligations:

• A proactive scan of every photo on upload (monitor / review / enforce modes — you decide the level of intervention).
• An immutable audit log of decisions (hash chain) — a ready trace of "what, when, what result, what decision".
• A human-in-the-loop queue for borderline cases — because hard decisions should be reviewable by a human.
• Processing in the EU, a DPA ready to sign, the image never stored.

The final decision and responsibility for content remain with you — but with a good tool, demonstrating due diligence stops being a quarter-long project. Create an account or write to us if you need the self-host variant.