Fixed price · supplier evidence

NIS2 Supply Chain Pack

Your customers in scope of NIS2 must impose security requirements on their suppliers — including you, even if you are not in scope yourself. Assemble your security evidence once, and pass enterprise due diligence and security reviews faster.

EUR 699fixed price, one-time

Buy the NIS2 pack — EUR 699

Secure payment via Stripe · human-reviewed before delivery · within 5 business days

Why are you being asked?

Entities in scope of NIS2 must manage security in their supply chain and impose requirements on their direct suppliers (Directive (EU) 2022/2555, Article 21(2)(d), implemented in the Danish NIS2 act § 6(2)(4)). The requirements therefore reach subcontractors as questionnaires, auditor questions and contract annexes. In a CyberSmart survey of 670 leaders across 8 countries, 42% said partners or customers had asked them to prove their cyber security level — and 41% said investors had (source: CyberSmart).

What you get

✓NIS2 theme mapping: the controls you report, mapped against all 10 themes in section 6(2) of the Danish NIS2 act (Directive (EU) 2022/2555, Article 21(2)) — with documented themes and gaps clearly marked
✓Supplier attestation draft — ready for your customers' supplier management, marked as a draft for legal review
✓Evidence index: which annexes customers typically ask for per theme, so you assemble the documentation once and reuse it
✓Delivered as a formatted DOCX plus a machine-readable JSON index — signed, audit-ready and independently verifiable
✓Human-reviewed before delivery — within 5 business days of a completed intake

How it works

1. Purchase

Pay by card via Stripe. You receive a receipt with a link to the intake form straight away.

2. Intake (approx. 10 min)

You describe your company, services, customer sectors and existing security controls — structured per NIS2 theme.

3. Delivery

We build the pack from your information, review it by hand and deliver within 5 business days.

Honest product declaration: The pack is compliance documentation built on the information you provide — not legal advice, not a certification and not a technical audit. The attestation draft is marked as a draft and must be reviewed by your legal adviser before use. If you are unsure whether you are directly in scope of NIS2, clarify that with your adviser first.

Do the same questionnaires also ask about AI? See the Answer Library and the Article 4 AI literacy evidence file.

See all products and prices →