One platform to stay compliant with NIS2.
Coverage by area
Upcoming deadlines
- PR.AA-01Access control policy & MFAin 12 days
- RS.MA-01Incident management procedurein 21 days
- GV.RR-02RACI role matrixin 34 days
Enter your company data once: the platform reuses it for documents, deadlines, incidents and suppliers. Not an archive to fill in by hand, but a system that tells you what to do and by when.
From the first question to the inspection, a single path.
Each stage feeds the next. The data enters at the start and travels on its own along the whole path, with no re-keying and no parallel spreadsheets.
The modules
A module for everything the law asks you to prove.
Not isolated features, but pieces of one picture: what you declare in one module becomes the starting point of the next.
You declare sector and size and the platform determines whether you’re an essential or important entity. It registers your infrastructure details and classifies your activities, ready to enter on the authority’s portal.
The precise list of what you must do, reproduced word for word from Italian law - not a translated foreign standard. And every measure is already mapped to the main international security standards: the work you do counts there too.
For each obligation the platform prepares a draft document or procedure to start from, with your company’s data. You complete it, approve it and sign it. Every step stays in its history, linked to the obligation it covers.
You collect the proof and link it to the obligation it demonstrates: the bond is explicit, not left to chance. Every piece of proof carries its own renewal deadline, so coverage doesn’t lapse in silence.
When an incident happens, the platform computes the statutory deadlines - early warning within 24 hours, notification within 72 hours, final report within 30 days - and prepares the notice to the authority on its own, with the data it already knows.
Your most important suppliers answer a questionnaire through a dedicated link, with no need to register. Their VAT number is actually verified on the European registers and each supplier gets a rating. A legal obligation, in a single flow.
The legal deadlines - documents to prepare, suppliers to count in the census, notices to send - are computed from your situation and assigned to an owner. A single calendar, instead of reminders scattered across email and diaries.
You train the team on the obligations with built-in courses. Training delivered isn’t just culture: it becomes proof, linked to the obligations that require awareness and to the training also required of company leadership.
If you follow several companies - as a consultant or an IT service provider - you manage them all from one console. Each client stays separate, you switch between them without re-entering anything and you keep everyone’s status under control.
The dossier you hand to the inspector: coverage status, approved documents, proof, notices and registration data, all in one place. You browse it in the platform or download it as a ZIP file.
How we use AI
What matters by law is decided by rules. AI helps, but you decide.
Who’s in scope, by when, and with which documents: these are precise, tested calculations - not an AI’s “opinion”. Where it saves time, AI prepares a first draft that you read, correct and approve. You always have the last word.
Decided by rules
- Whether your company is in scope
- What you have to do
- By when
- How to handle an incident
Draft ready to approve
System access policy
Prepared from your data. You read it, edit it if needed, and sign it.
NIS2 lead
Drives the compliance path, assigns measures and keeps coverage under control.
Company leadership
They approve measures, get briefed on incidents and sign - the responsibility the law places on leadership.
Incident lead
Handles incidents, meets the notification deadlines and coordinates the final report.
Operational user
Uploads proof, completes assigned tasks and follows the deadlines in their area.
Professional
Consultant or IT service provider: manages several companies from one console, each kept separate.
Administrator
Configures the company, manages roles and users and keeps the record of every action.
Who it’s for
A role for every person accountable for compliance.
Everyone sees what they need, and every action stays recorded.
Built with the same rigour that helps you prove it.
Principles and commitments for how we handle your data - not a checklist of ticked features.
Principles and commitments for how we handle your data - not a checklist of ticked features.
- Isolation between companiesEach company has its own space: its data never mixes with anyone else’s.
- Encryption in transit and at restData is encrypted while it travels and while it’s stored.
- Roles and permissionsRole-based permissions with tracking of management bodies (art. 23).
- Action logEvery relevant action is logged: who did it, on what, and when.
- Data in the EU, GDPR-compliantProcessing on European soil and data minimisation.
- Traceable AI proposalsEvery proposal is logged, justified and reversible.
MFA and SSO are on the way: they aren’t live yet.
- Isolation between companiesEach company has its own space: its data never mixes with anyone else’s.
- Encryption in transit and at restData is encrypted while it travels and while it’s stored.
- Roles and permissionsRole-based permissions with tracking of management bodies (art. 23).
- Action logEvery relevant action is logged: who did it, on what, and when.
- Data in the EU, GDPR-compliantProcessing on European soil and data minimisation.
- Traceable AI proposalsEvery proposal is logged, justified and reversible.
MFA and SSO are on the way: they aren’t live yet.
Questions
about the platform.
Can’t find the answer? Book a demo: our team answers your questions and shows you the platform live.
From Italian law, quoted word for word - not from a translated foreign standard. The platform selects them from your profile and maps them to the main international security standards: the work you do counts there too.
No. Who is in scope, what they must do and by when are set by precise, tested rules. The AI only prepares drafts, such as a policy, which you read, correct and approve. The final word is always yours.
No. For every obligation the platform prepares a draft document or procedure to start from, with your company’s data. You complete, approve and sign it, and every step stays in the document’s history.
The platform calculates the legal deadlines - early warning within 24 hours, notification within 72 hours, final report within 30 days - and prepares the notice to the authority with the data it already knows.
Your most important suppliers answer a questionnaire through a dedicated link, without signing up. Their VAT number is checked against the European registers and each supplier gets an assessment.
Yes. If you are a consultant or an IT service provider you manage all your clients from a single console: each one stays separate, and you switch between them without re-entering anything.
The Inspection Ready Pack: coverage status, approved documents, evidence, notices and registration data, all in a single dossier you can browse in the platform or download.