Find out whether NIS 2 applies to your company
Answer four short steps and see on screen your company's likely category, the reasons and the obligations that apply. Takes about 3 minutes.
- 27EU countries
- 18sectors assessed
- €10Mor 2% of turnover, the maximum fine
Loading the test...
What you get at the end
- 01Likely categoryEssential, important, supplier to an in-scope entity or out of scope.
- 02The reasonsEach conclusion with the article of the directive that supports it.
- 03Obligations that applyRisk management, incident notification, registration and penalties.
- 04Rules in PortugalDeadlines under Decree-Law No. 125/2025 when the company operates in the country.
Basis: Directive (EU) 2022/2555 · Recommendation 2003/361/EC · Decree-Law No. 125/2025 (PT). Indicative result, with no legal value.
What the test assesses
The same questions the directive uses to define who is in scope, in order and in plain language.
Presence in the European Union
A branch, subsidiary or office in an EU country, or the supply of goods and services to European customers. You indicate the countries involved.
Sector and type of entity
One or more sectors from Annexes I and II of Directive (EU) 2022/2555, with the type of entity in each. The sector determines whether the company is essential or important.
Size and special cases
Employees, turnover and annual balance sheet define the size. Some cases fall in scope regardless of size, and the test asks about them.
Questions about the test
Does the result have legal value?
No. The test is indicative and applies the general rules of Directive (EU) 2022/2555. Formal qualification is carried out with the competent national authority of each country, and each Member State has its own transposition law. We recommend validation by a specialist.
Do I need to be headquartered in Europe?
No. A company headquartered outside the EU may be in scope when it has an establishment in a country of the bloc or provides certain digital services in the EU, in which case it designates a representative. As a supplier to in-scope companies, it also feels the effects of the directive.
What are the name, company and e-mail for?
To identify the test. The B10SEC team receives a notice and may get in touch to validate the result. The result is not sent by e-mail: it appears on screen. Data is processed in accordance with our Privacy Policy.
What if my company is a supplier to an in-scope company?
Supply chain security is one of the mandatory measures of NIS 2, and in-scope companies start to demand assurances from their suppliers. The test flags this case when you report customers in the EU.
Want to validate the result with a specialist?
B10SEC confirms your company's scoping, country and category and builds the NIS 2 compliance plan.
