@Lynoure Basically not, it's the one that
operates the software who is responsible to comply.

However you might be liable if you knowingly ignore best practices without the
client explicitly directing you.

That's why subcontractors have insurances.