Terms

What this is

A tool for answering the security questionnaires your customers send you, from a library of answers you write and own. It saves you typing the same answer for the fifth time. It does not know anything about your company that you have not told it.

This is not legal or security advice

Nothing here is advice. Where the product quotes LOV nr 434 af 06/05/2025 it names the provision so that you can read it yourself, and a quotation is not a statement that you comply with it. Whether your answers are true, and whether what you do is enough, is your judgement and your responsibility. An answer written here is one you have confirmed and sent.

Four things the product will not do

• It does not invent an answer. A question nothing in your library covers comes back empty and says so. There is no code path that fills a blank with something plausible.
• It does not send anything to your customer. The export hands you a file. Sending it is yours.
• It does not report an incident to any authority on your behalf. The incident module writes a draft and says who the recipients are (§ 12, stk. 1: the competent authority and the CSIRT). The button says “Generate draft” because that is what it does.
• It does not attach a file you have not deliberately marked as shareable. Evidence is private by default, and making it shareable asks you to type the file's title back.

Why your customers ask

Most of them are covered by LOV nr 434 af 06/05/2025, and § 6, stk. 2, nr. 4 makes supply chain security one of their minimum measures — “Forsyningskædesikkerhed, herunder sikkerhedsrelaterede aspekter vedrørende forholdene mellem den enkelte enhed og dens direkte leverandører eller tjenesteudbydere.” — which reaches their direct suppliers. Their management body approves those measures and supervises them (§ 7). That is why the questionnaire arrives, and why an answer that names the provision is worth more than a yes.

Being a supplier does not make the act apply to you. If it does apply to you, that is a question for your own advisers, not for this product.

Your data

Held in the EU, described in the privacy notice, exportable as a zip and deletable from Settings — rows and files together. We do not sell it, and we do not send the content of your answers to a language model.

Availability and liability

This is early software run by a small team. It can be unavailable, and it can be wrong. Our liability is limited to what you have paid us. Nothing in these terms limits liability that cannot be limited by law.

Questions: the address in your sign-in e-mail. Complaints about how we handle personal data go to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby.