For suppliers to regulated companies
Your customer sent a security questionnaire. Answer it, and keep the contract.
If you sell to a bank, an insurer, a utility, a hospital or anyone else covered by NIS2 or DORA, their obligations are now yours. ShieldIQ gives you the answers and the evidence, without hiring a security team. Built by a CISO who has sat on the other side of those questionnaires.
An unanswered questionnaire is a deal on hold.
No answer, no signature
Procurement will not sign off a new supplier until the security questionnaire comes back complete.
Reassurance no longer counts
Under NIS2 and DORA your customer has to manage its suppliers' security risk, so it needs evidence it can file, not a promise.
First with proof looks safest
When two suppliers are close on price, the one that answers quickly, with evidence attached, is the easier choice to defend.
Sound familiar?
The moment it stops being optional
A security questionnaire lands in your inbox
Page after page of questions, a deadline, and a procurement team that wants evidence, not reassurance.
A new NIS2 clause appears in the contract
Your customer must manage supply-chain risk under NIS2, so they are passing the requirements down to you.
A DORA addendum arrives from a financial client
Banks, insurers and investment firms must include DORA provisions in ICT contracts and monitor their providers on an ongoing basis.
They ask how fast you would tell them about a breach
Their regulator's clock is 24 hours under NIS2 and 4 hours under DORA. Your answer has to fit inside theirs.
Every week the questionnaire sits unanswered, the contract sits unsigned. Answer it well and it becomes a reason to choose you over a competitor who cannot.
What you get
From “we take security seriously” to proof
Know where you stand before you reply
Run a scored gap assessment against NIS2, DORA, ISO 27001 or the framework your customer names, so you answer honestly and know what to fix first.
Answer with evidence, not adjectives
Controls, policies and evidence live in one place, and the AI evidence judge tells you whether a document will actually satisfy the question.
Fill the policy gaps in an afternoon
The questionnaire asks for an incident response policy you do not have. Draft it with AI, review it, version it, and attach it.
Commit to a breach timeline you can keep
Incident management starts the 24-hour, 72-hour and 4-hour clocks for you and drafts the notification, so you can sign the clause with confidence.
Let the customer's auditor check for themselves
Give their auditor time-boxed, read-only access and export the audit pack, instead of emailing spreadsheets back and forth.
Reuse the work for the next customer
Map once, answer many. The same controls cover every major framework, so the second questionnaire takes a fraction of the first.
How it works
Questionnaire to signed contract in three steps
Get your free baseline
Answer a guided NIST CSF 2.0 assessment in about 15 minutes and see your gaps, free, with no card.
Close the gaps your customer will ask about
Add the framework in the contract, work through the prioritised plan, and draft the missing policies.
Send the answer with the proof attached
Export reports, compliance certificates and the audit pack, or give their auditor read-only access.
Which plan?
Start free. Upgrade when the customer asks for proof.
- Starter (free): your NIST CSF 2.0 baseline in about 15 minutes, so you know your gaps before you reply.
- Professional (€249 / month): any 3 frameworks, 25 policies, CSV and email reports, and incident management with the 24h / 72h / 4h clocks, for a team of 5.
- Business (€449 / month): the plan built for proving it. Audit export, compliance certificates and auditor access, across 5 frameworks and up to 3 entities.
Price on the page. No demo required. Prices include VAT. Pay annually and get 12 months for the price of 11.
See your compliance posture in 15 minutes,
and leave with a prioritised plan.
Free to start. No credit card. No setup calls. Your first NIST CSF 2.0 baseline is free, and every other framework is a click away on a paid plan.