Situation — Demanding clients and regulations

A major client demands a security file before signing with us, and we don't know what to send.

Context

The contract is almost signed. Then your client's procurement team sends a security questionnaire. Dozens of questions, evidence to attach, a deadline.

Your IT is sound, or so you believe. But you have never had to prove it.

The problem

  • No file, no contract: the client can pick a competitor who ticks the boxes.
  • Answering "yes" without proof commits you, and can backfire.
  • Your next major client will ask for the same thing.

Case study

Real-life caseSeptember 2026

SME suppliers facing NIS2, France

The European NIS2 directive requires the companies it covers to make sure their suppliers are secure enough. It covers several thousand companies in France, compared with relatively few under the previous directive.

So an SME outside the scope of NIS2 may still have to answer security questionnaires, undergo audits and strengthen its practices to keep its clients. The Paris Île-de-France Chamber of Commerce made this point in September 2026.

For those clients, the stakes are high: fines of up to 10 million euros or 2% of worldwide turnover for an essential entity. The French law transposing NIS2 has not yet been adopted (Leto (opens in a new tab)).

Read the sourceNIS2: is your SME affected without knowing it? — CCI Paris Île-de-France (opens in a new tab)

Why us?

  • We fill in your client's questionnaire, with evidence behind every answer.
  • You receive a file in the expected format: report, tender file or self-certification.
  • The file can be reused for your next clients, insurers and tenders.
  • Doctoral-level expertise in cybersecurity and AI, tools and infrastructure in Europe.

Contact us

Talk to an expert

A free 30-minute video call with one of our experts, then your free quote, with no commitment.

Take the diagnostic

A few questions, the first already answered for your situation: your answers help us prepare the video call. Free, no sign-up, about 2 minutes.

Take the diagnostic