NIS2 compliance starts with a question

Does the directive apply to you, and what does it ask of you? Put the question to our assistant first, then bring its answer to a conversation with us.

“We run a plant in Sweden.Does NIS2 apply to us?”Understandsector, size,establishmentSearch the lawNIS2 and theSwedish ActAnswerwith the articleit relies on
How the assistant answers: it searches the legal text first, then cites the article behind each answer.

Ask the NIS2 assistant

It searches the legal text before it answers, and names the article each answer rests on.

What it can do

  • Tell you whether your sector is listed in Annex I or Annex II
  • Explain the directive and the Swedish Cybersecurity Act, article by article
  • Walk you through duties such as the 24-hour early warning

What it cannot do

  • Give legal advice or a binding conclusion
  • Answer in depth for member states other than Sweden

Tested before launch: 97% correct across 134 acceptance tests, drawing on 509 sections of legal text and 41 FAQs.

You are talking to an AI. Answers are a first orientation, not legal advice.

Want a person to look at your case? Book a consultation

It answers in Chinese for now. You can ask in English.

NIS2 assistant

Connecting to the assistant…

From the first question to measures in place

  1. Applicability assessment

    Find out whether NIS2 applies to you, and under which country’s law.

    • Your activities checked against the sectors in Annexes I and II
    • Size thresholds, and the cases where size does not matter
    • Jurisdiction, and whether you are an essential or an important entity

    You get a written conclusion with the articles behind it.

  2. Gap analysis against Article 21

    See where your security measures fall short, and what to fix first.

    • The ten risk-management measures of Article 21(2), one by one
    • Management accountability (Article 20) and reporting duties (Article 23)
    • Every gap ranked by risk and by the effort it takes to close

    You get a prioritised roadmap.

  3. Implementation support

    Turn the roadmap into measures that are in place and can be shown to a supervisor.

    • Policies and procedures written for how your company actually works
    • An incident process that meets the 24-hour and 72-hour reporting deadlines
    • Security requirements and questionnaires for your suppliers

    Network measures are built by our own network team.

    Explore Network

Bring the assistant’s answer to a conversation

We start from your situation and tell you which requirements apply and what it takes to meet them.