From "do I fall under it?" to a file that answers the question
Four steps. The first is free, takes two minutes and you can do it today.
Know where you stand Do it now
Three questions: your sector, your size and whether you supply to an organisation subject to the law. You'll be told immediately whether you are an essential entity, an important entity, or whether you receive the requirements through your customers — with the reason. No account needed, and we don't keep your answers.
Build your file
The ten measures from the duty of care as a living register. For each measure three things: is it arranged, partially, not or not applicable — which document do you show if someone asks — and who is responsible for it. The last is not a formality: a measure without an owner gets left behind.
Extract documents and answers
From that file come your policy documents — information security policy, incident response plan, continuity plan, supplier policy — with version and date. And the answers to your customers' security questionnaires, with the source of each answer from your own file. What is not in there is marked as missing. We don't make anything up.
Keep track and be ready when things go wrong
If something changes in the rules that affects your file specifically, you'll be notified with the action included. And for an incident, the notification texts are ready, with the deadlines of 24 hours, 72 hours and one month — filled in from your file. You submit it yourself, to your own regulator.
What you can do today and what is coming
Step 1 works and is free, as is the entire knowledge base. Steps 2 to 4 are being built. You can sign up now, then you'll be notified as soon as your file can be built, and you'll know in advance what it will cost. We won't ask you to pay upfront for something that doesn't exist yet.
Two minutes, no account, no obligation.
How we maintain our sources
The standard and the directive underneath it change. Every week we check what is new and which topics and which fields that affects. If something changes that affects your file specifically, you'll be notified — you don't need to follow the regulations yourself.
Monthly we check whether our references are still correct: does the provision still exist, and is the quote still in there word for word? If it's no longer correct, the topic gets a flag and the date of the last successful check is not updated.