Ready before your customers ask.
Your customers are asking about NIS2 compliance? This app turns the obligations of EU Directive 2022/2555 into a structured self-check: 29 checkpoints in six topic areas, written for companies that supply into the EU or run subsidiaries there.
iPhone · iPad · Mac · iOS 17 or later, macOS 14 or later · One purchase covers all three
From governance to the 24-hour early warning — every checkpoint references the directive's article, paragraph and letter.
Governance & risk management, incident handling & reporting, continuity, supply chain, cyber hygiene, technical measures — 29 checkpoints covering Articles 20, 21 and 23.
The explicit legal duties stand out: management accountability and training, registration, the 24 h / 72 h / 1 month reporting deadlines, and multi-factor authentication.
Per checkpoint: one sentence for the management, three to five concrete steps for companies without a legal or security department, typical pitfalls, audit evidence, effort and ownership.
Ratings from 0 to 4, maturity per topic area and overall, and a radar chart that makes gaps visible before your customers — or an authority — find them.
Management summary, gap analysis, all open duties in full and complete detail pages. Audit firms add their name, logo and accent colour — no rework. CSV export included.
No account, no cloud, no tracking. Face ID / Touch ID lock optional. Multiple assessments with their own company details; backup as a portable file.
INC-02 · What it looks like
The directive tells you what is expected. Every checkpoint in the app also carries this:
First clarify whether and in which EU country your company is subject to reporting obligations and which CSIRT or authority is competent — if in doubt, with legal advice or through your EU customer.
Record the reporting channel, the reporting portal or contact address and any access credentials so that they are immediately at hand in an emergency.
Create a template for the early warning: what happened, since when, is a malicious act suspected, are other countries affected?
Define who triggers and monitors the 24-hour deadline — including a deputy for holidays and weekends.
Test the process with an exercise: from a fictitious incident to a completed early warning in under 24 hours.
The directive is officially published in all EU languages — the app carries German, French, Italian and English, plus an unofficial Romansh version.
The free version is a real working version, not a preview: the first checkpoints of every topic area, fully readable, ratable and with the complete tips.
24 of 29 checkpoints, one assessment.
Per year. The usual choice.
Per month — or 199.00 once, without a subscription.
Free to download. Prices in US dollars as listed on the App Store; you pay in your own currency. Subscriptions renew until cancelled in the App Store account settings.
An independent app. This is an independent self-assessment tool — neither proof of compliance nor an official EU offering. Whether and how your company falls under NIS2 is determined by the directive and the national implementing law of the relevant member state.
The obligations are paraphrased. The directive itself, Directive (EU) 2022/2555, is available free of charge at EUR-Lex; the directive and national law prevail.
Not legal advice. The tips describe common practice; they do not replace legal advice, an audit or a certification.
Support
Write to us — in German, French, Italian or English. We answer within two working days.
info@treeinspired.com