Will a Polish contractor pass our NIS2 supplier review?
Poland’s NIS2 law took effect on 3 April 2026, and NIS2 makes covered companies manage security across their suppliers, contractors included. A contractor who cannot answer your security questions becomes a gap in your own supplier review.
My security and trust pages answer the usual supplier questions up front: where code and data live, who has access, how access ends, NDA as standard. From 2022 to 2024 I handled Sandtime’s security reports myself: I fixed what was real, explained the protections already in place, credited researchers in a public Hall of Fame and applied one bounty policy to everyone.
