Coverage

One answer layer for everything that lands in the same inbox.

Attestria is not another ESG tool for a single format. The product is built for the convergence of supplier questionnaires: sustainability, supply-chain due diligence, cybersecurity, data protection and custom templates.

01 Automotive · InfoSec

TISAX / VDA-ISA

VDA-ISA questionnaires for automotive suppliers — with control IDs, evidence references and audit-ready citations.

Control IDsEvidence referencesAudit-ready citations
02 Sustainability · SAQ

EcoVadis

Sustainability assessments including evidence uploads — in 2026 the silver threshold rises from 68 to 72.

03 Supply chain · Due diligence

LkSG

Due-diligence questionnaires that large customers pass down to every supplier.

04 Cybersecurity · EU

NIS2

Supply-chain security reviews under the German NIS2 implementation.

Also: ISO 27001 · BSI IT-Grundschutz · GDPR / DPA · Custom formats

Why now

Six regulations hit the same inbox.

The pain is not one rule — it is the simultaneity. Buyers have long automated sending. The supplier side still answers by hand.

LkSG CSRD / VSME NIS2 EU AI Act TISAX / VDA-ISA EcoVadis 2026 One inbox One answer layer
  1. LkSG Due-diligence duties are passed down to every supplier. since 2023
  2. CSRD / VSME Sustainability reporting pushes ESG data down the supply chain. phased
  3. NIS2 Implemented in Germany — supply-chain security reviews. Dec 2025
  4. EU AI Act Art. 4 (AI literacy) since Feb 2025; high-risk duties phase in. since 2025
  5. TISAX / VDA-ISA Mandatory automotive InfoSec, renewed every 3 years. ongoing
  6. EcoVadis 2026 Silver threshold 68 → 72 — many must resubmit. 2026

Back in the original format.

Buyers want their own template back — not a PDF from someone else’s tool. Attestria exports approved answers in the format the questions arrived in: Excel, Word, PDF or portal copy-paste.

Arrives as Excel Returns as Excel

Next step

One real questionnaire. Your real documents.

Let’s talk for 20 minutes. We listen to how compliance runs at your company today — and whether Attestria can take over the repetitive part.