Who ultimately submits the answer to the portal

Submitting remains an action of the customer, never of the system

No. Supplia compiles the answers from the supply chain file and requests confirmation of "yes" or "no" for each answer, but submission to the customer's portal always remains a separate action. There is no link that logs in, no automatic upload and no submission that occurs without the entrepreneur's involvement. This applies to every questionnaire, whether it concerns sustainability data according to the EFRAG VSME baseline module, the ten measures of Article 21(2) of the NIS2 Directive, or a combination of identity data such as the registration number under which the enterprise is registered and operational data such as the number of employees.

The reason is deliberate: the system does not determine anything and does not assess anything. It recognizes questions, matches them to the file and displays a proposal with the source. Confirmation of each answer is a control moment, not a formality — especially for questions that appear identical at first glance but have a slightly different scope in the customer's portal, such as a question about ISO/IEC 27001 Annex A that in one list concerns the full management system and in another only a subset of measures. After confirmation, the entrepreneur downloads or copies the answers and submits them himself, in the manner required by his customer's portal.

Why that boundary lies at login and submission

This does not follow from a single article but from the design of the platform itself: Supplia never logs in to a third-party portal and does not declare, certify or assess anything. This means that the responsibility for the content of an answer — for example about the countries in which the company has establishments or applicable regulations such as the CSRD Directive (EU) 2022/2464 — remains with the entrepreneur, and the final step, the actual submission, also remains with him.