Verify the NIS2 implementation status of a company that uses NIS2Compass.
Around 29,000 companies in Germany that are directly subject to NIS2 ask their suppliers for IT security evidence. Even if you are not directly affected, the requirement reaches you through the supply chain.
Source: Bitkom estimate of NIS2 applicability in Germany.
Checking a code is free · Creating a code is Pro (€29/month)
What your customers must ask for under Section 30 BSIG, and how to classify these requirements correctly.
145 NIS2 requirements, ready-made templates and the Knowledge Hub form the basis of your answer.
Your customer can look up your documented implementation status at any time using the verification code.
Check off requirements, fill in templates, build up expertise.
Find your verification code in the proof section of the platform.
Share the code by email or embed it as a badge on your website.
The customer enters the code on this page and sees the current implementation status.
A NIS2 supplier proof is a structured self-declaration of how far a company has implemented the requirements of the NIS2 Directive. Many directly affected companies must assess the IT security of their suppliers and therefore request proof. With NIS2Compass you document this status along 145 concrete requirements and share it via a verification code.
The verifying company receives a short verification code from the supplier. On this page the code is entered and, after a security check, the current implementation status is shown: the organization name and the number of completed NIS2 requirements. The values are recalculated on every request, so they are always up to date.
If your company qualifies as an essential or important entity under NIS2, you must assess the security of your supply chain under Section 30 BSIG. Proof from your suppliers helps you meet this obligation verifiably, without auditing every supplier individually.
NIS2Compass is a guide for structured NIS2 implementation and does not replace legal advice. The supplier proof documents a self-declaration and is not a conformity certificate.