nis2fix.eu

who checks the answers before they go to my customer

Who confirms internally, not Supplia

That is for you to decide, because that is precisely why there is a confirmation step per answer in the system. The system proposes an answer based on the supply chain file, but someone at the company marks yes or no for each question. Supplia does not read that list, does not assess anything and does not log in to the customer's portal — the check is therefore entirely with the company itself, not with us.

In practice, that is usually the person who already manages the file: for a NIS2 questionnaire, someone who knows the ten measures of article 21(2) checks whether the status of each measure is still current, for a CSRD or VSME questionnaire someone who can annual turnover and the number of employees vouch for the figures behind. Who that is internally should not be in the system but in your own process: who signs, who checks before signing, and what happens if an answer becomes outdated. The system only recognizes whether a question has been answered before — it does not recognize whether the answer is still correct.

Why Supplia has no controlling role

That follows directly from the scope of the platform: Supplia builds the supply side of the chain, not the assessing side. An ISO/IEC 27001 certificate, included under Annex A, remains a statement of the certifying body; an answer based on the ten measures of NIS2 article 21(2) remains a statement by the company itself. Supplia converts those sources into a pre-filled answer, but the confirmation — and with it the responsibility for what is submitted to your customer's portal — lies with the person who clicks "yes". That applies equally to factual fields such as the registered address as to substantive answers about security or sustainability.

This answer applies to every type of questionnaire, not only to the cyber questions from your customer, answer it. The full explanation — with the sources, country-specific details and related topics — is on the hub.

Read the full answer on supplia.eu

This is not legal advice. This page provides general information on the regulations this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.

Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections receive priority.