Cyber security compliance across your entire partner network

Cyber security compliance means that an organization meets the security requirements that apply to it: laws and regulations such as NIS2 or GDPR, recognized standards such as ISO/IEC 27001 or the NIST Cybersecurity Framework, and the contractual requirements of customers and manufacturers. Compliance has to be demonstrated with evidence and maintained continuously, not just once.

Every partner answers the same structured, scorable questionnaire in its own language and uploads evidence for its controls. Reviewers verify the evidence control by control, so the platform reports a self-assessed and a verified score side by side. Results roll up from the single site to regions, countries and the whole network, and the weakest areas become visible at a glance.

The assessment is aligned with ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls v8.1, NIS2, GDPR and PCI DSS 4.0.1. Industry requirements such as TISAX, UNECE R155/R156, ISO/SAE 21434 and IEC 62443 can be added to the questionnaire, and every company can extend it with its own requirements.

No. The platform prepares and accompanies certifications such as ISO/IEC 27001 or a TISAX assessment: it shows the gaps, tracks the measures and keeps certificates and their expiry dates in one register. The certification itself is carried out by an accredited certification body or audit provider.

Yes. Data is hosted in the EU, access is controlled by roles and organizational scope, every change is recorded in a tamper-evident audit trail, and data subject requests are handled in the platform. Assessment results relate to organizations, not to individuals.

The platform is built for organizations that have to assess many independent partners: automotive manufacturers and importers with their dealer and service networks, manufacturers with their suppliers and plants, and any company that runs a franchise, branch or partner network. Questionnaire, scoring and reports adapt to the industry.