Start with a focused readiness snapshot, then expand into evidence preparation, remediation planning and managed support as needed.
Prices are indicative and exclude VAT. Final scope may depend on company size, sector, number of sites, available evidence and the level of human review required.
Best for companies that want a first structured view of their NIS2 readiness.
For companies that need a more complete preparation package before consultant review, audit preparation or management remediation planning.
For companies that want ongoing support with evidence tracking, remediation follow-up and readiness documentation updates.
For larger organizations, multi-site companies, supplier-chain assessments or custom compliance workflows.
| Snapshot | Evidence Pack | Managed Support | Enterprise | |
|---|---|---|---|---|
| Preliminary applicability indication | ✓ | ✓ | ✓ | Custom |
| Readiness score | ✓ | ✓ | Updated | Custom |
| Gap analysis | Top gaps | Detailed | Updated | Custom |
| Risk register | Initial | Extended | Updated | Custom |
| Evidence register | Initial | Extended | Updated | Custom |
| Corrective action plan | 30 days | Roadmap | Follow-up | Custom |
| Draft policies/procedures | - | ✓ | Updates | Custom |
| Human review | ✓ | ✓ | ✓ | Custom |
| Review meeting | - | 1 | Monthly | Custom |
| Monthly follow-up | - | - | ✓ | Custom |
| Supplier workflow | - | Questionnaire | Tracking | Custom |
| Custom scope | - | - | - | ✓ |
No. ConformityAgent provides readiness-support documentation and evidence preparation. It does not replace a formal cybersecurity audit, legal review or official certification.
Yes. The report is structured to support management decisions, remediation planning and discussions with consultants or auditors.
No. Prices are indicative and exclude VAT.
Yes. Larger companies, multi-site organizations and supplier-chain assessments are handled by quote.