Guides for procurement and suppliers
Articles on NIS2, data protection and supply-chain due diligence – each with an as-of date and sources.
Supplier onboarding under NIS2: what does Section 30 BSIG require for the supply chain?
Section 30 BSIG makes supply chain security mandatory. What Germany's NIS2 implementation act means for supplier onboarding – with sources.
As of: 17 October 2026
Security questionnaire or shared supplier profile: which fits onboarding?
One questionnaire per customer or one profile for all? Compared by effort, comparability, currency and evidence – and when both work together.
As of: 17 October 2026
Which evidence should a supplier keep ready?
Certificates, DPA, technical measures, contingency plans: which evidence customers ask for, what makes it valid and how to record it once.
As of: 17 October 2026
Data processing with suppliers: what does Art. 28 GDPR require in practice?
When a supplier is a processor, what the data processing agreement must contain, how to check guarantees and what applies to sub-processors.
As of: 17 October 2026
German Supply Chain Act (LkSG) 2026: what applies, and what is changing?
The German Supply Chain Act in October 2026: who is covered, which duties apply, what the government bill would change and what the EU requires.
As of: 17 October 2026
The assessment criteria
All 69 criteria in 10 categories Vendo4u uses to record suppliers – from information security to supply-chain due diligence.