EU-hosted · Built for NIS2 Article 21(2)

Answer security questionnaires once. Reuse them forever.

Upload your policies once, then upload any questionnaire you need filled in. NIS2Fill shows you instantly how much it can already answer and what still needs you, and unlocks every matched answer the moment you sign up.

How it works

No blank form, no setup call. Two uploads and a score.

NIS2Fill needs to know what you already know and what you're being asked now.

1

Upload what you know

Add existing policies, completed questionnaires, or a handful of answers. This becomes your answer library.

2

Upload the questionnaire

Drop in the file your customer sent. NIS2Fill matches every question against your library and shows your coverage score immediately.

3

Sign up to reveal your answers

Continue with Google and subscribe to unlock every matched answer, fill the remaining gaps, and export the finished file.

What you get

Built around the questionnaire, not a generic form builder

Fills the actual file

Excel and Word questionnaires are filled in place, with dropdowns, formulas, and formatting kept intact.

Answer once, reuse forever

Every answer you approve joins your library and auto-fills every future questionnaire, from any customer.

Red-flag before you submit

Answers that wouldn't hold up under a NIS2 audit are flagged before they go out, not after.

EU-hosted, org-isolated

Your data lives in the EU with row-level security enforcing isolation between every organization.

Works in your language

Draft and answer in English or Dutch today, matching the language the question was asked in.

Bring what you already have

Import existing policies and completed questionnaires. That is what builds your library in the first place.

Why this matters now

NIS2 made security questionnaires everyone's problem,
not just big enterprises'.

Directive (EU) 2022/2555 requires every regulated company to manage risk in its own supply chain. In practice, that means your customer pushes a security questionnaire down onto you, even if NIS2 never applies to your company directly.

In force since17 October 2024. This is a currently active law, not a future draft.
Why it reaches youArticle 21(2)(d) obligates regulated customers to vet their suppliers' security. That is exactly why the questionnaire ended up in your inbox.
At stakeFines of up to €10M or 2% of global turnover for the regulated company if its supply chain isn't accounted for.
Questions

Before you upload anything

Is this only for NIS2 questionnaires?

No. NIS2Fill matches the questions in whatever you upload against your own answer library, so it isn't limited to NIS2 wording or a fixed template. Your library starts organized around the categories NIS2 Article 21(2) covers, since that's the most common starting point for our users, and every answer you add extends it to whatever your customers actually ask.

Do I need to pay before I see anything?

No. Upload your files and NIS2Fill shows your coverage score, including which questions were matched and which are gaps, before you create an account. Sign up with Google and subscribe to reveal your matched answers and complete the rest.

Where is our data stored?

In the EU (Supabase, EU region), with row-level security enforcing isolation between every organization on the platform.

Do you keep our questionnaire answers?

Yes, that is the point. Every answer you approve is saved to your private answer library, so the next questionnaire starts more complete than the last.

Do I need a company email to sign up?

No. Sign up with any Google account. Once you're subscribed you can invite teammates from inside the app.

Stop answering the same questionnaire twice.

Upload your questionnaire and see exactly how much of it NIS2Fill can already fill in for you.

Upload your questionnaire