NIS2 supply-chain monitoring,
one price per supplier.
No tiers to game.

Per-tier pricing creates a direct financial incentive to mis-classify suppliers downward — exactly the behaviour you should never encourage in a risk management tool. EUSEC charges per supplier regardless of ABC tier. Your classification drives monitoring intensity and determines whether you add Verify for a specific supplier — but it never changes your invoice automatically. The only thing motivating accurate classification is your own § 30 risk posture.

EUSEC rates an organisation, not a domain count. Subdomains (mail.company.de, vpn.company.de) are discovered automatically via Certificate Transparency logs and DNS enumeration — one organisational scan covers all of them. For companies with multiple top-level domains (company.de, company.com), the primary domain registered in the Steckbrief anchors the scan, and related TLDs are discovered via CT attribution. Up to 3 registered TLDs are included in the standard price; additional separate TLDs available on request.

No. The EUSEC Platform Terms of Service create a three-party confidentiality framework: EUSEC commits to keeping supplier data confidential from any party the supplier has not authorised; buyers commit contractually to using inside data solely for their own § 30 compliance. No bilateral NDA required. A standard EUSEC NDA PDF is published for legal review if your supplier's counsel requires it.

Monitor and the standard inside assessment cover all 10 Art. 21 NIS2 measures — the screening layer. For suppliers subject to the EU Implementing Regulation 2024/2690 (DNS, TLD, Cloud, RZ, CDN, MSP, MSSP, trust service providers, online marketplaces), a platform flag indicates that the full ~159 CIR Annex controls require a separate audit. Verify (Tier 3) prepares the evidence scope for that audit — EUSEC does not claim to replace it.

Yes. § 30 BSIG requires risk-based, proportionate supply chain measures — not a full audit of every supplier. An automated outside rating is a documented, repeatable, proportionate measure for C-tier suppliers, exactly as Creditreform's scoring is for commercial credit risk. EUSEC publishes its methodology, commits to the US Chamber of Commerce Principles for Fair and Accurate Security Ratings and provides exportable § 30 documentation packages for regulatory defensibility.