Calculators and checkers
Each tool explains its sources and lets you share or export the result.
Breach deadline calculator
Enter when you became aware of an incident and get the GDPR 72-hour and NIS2 24-hour, 72-hour and one-month deadlines, with a calendar file to download.
Calculate deadlines ›NIS2 significant-incident checker
Check an incident against the significance criteria of Article 23 NIS2 and Implementing Regulation (EU) 2024/2690 before you decide whether to report.
Check an incident ›NIS2 scope checker
Answer a few questions on sector, size and services to see whether NIS2 is likely to make you an essential entity, an important entity or neither.
Check your scope ›ISO 27001 certification cost and timeline estimator
Estimate audit days, a realistic timeline and the budget for ISO 27001 certification from your headcount, sites and scope.
Estimate your audit ›Dutch and Italian tools, in English
Decision aids, crosswalks and checklists for the Dutch Cyberbeveiligingswet and the Italian NIS2 decree, each inside its guide.
Dutch Cbw and GDPR reporting decision aid
For organisations in the Netherlands: what to report to the CSIRT via MijnNCSC and to the Autoriteit Persoonsgegevens, with deadlines and a calendar file.
Use the decision aid ›Dutch Cbb crosswalk to ISO 27001, NEN 7510 and BIO2
Search and filter the Dutch duty of care against three frameworks and download the result as CSV for your gap analysis.
Open the crosswalk ›Italian ACN basic measures checklist
Track the Italian NIS2 basic measures for important or essential entities, calculate your deadline and export to CSV.
Open the checklist ›CPV search for Italian NIS supplier lists
Find the right CPV codes among 731 ICT codes and build the relevant-supplier list for the annual ACN update.
Search CPV codes ›Italian Garante and ACN decision tool
Decide whether a breach goes to the Garante, CSIRT Italia or both, and get the deadlines as a calendar file.
Use the decision tool ›In Dutch and Italian
The same breach deadline arithmetic, with the national authorities and wording.
Datalek-meldtermijn berekenen
Bereken de 72-uurstermijn van de AVG voor een melding bij de Autoriteit Persoonsgegevens, vanaf het moment dat je het lek ontdekte.
Bereken je termijn ›Calcolo scadenza notifica data breach
Calcola le 72 ore del GDPR per la notifica al Garante, e le scadenze NIS2 verso il CSIRT Italia, dal momento della scoperta.
Calcola la scadenza ›Guides that go with the tools
The AI Act timeline after the Digital Omnibus
Which AI Act deadlines moved (high-risk to 2 December 2027 and 2 August 2028), which did not, and what that means for your plans.
Read the guide ›AI Act chatbot disclosure
What Article 50 asks when customers talk to a chatbot or see AI-generated content, and how to word the notice.
Read the guide ›NIS2 Implementing Regulation 2024/2690 checklist
The technical and methodological requirements for cloud, data-centre, managed-service and other digital providers, as a checklist.
Read the checklist ›