who is responsible if a completed answer later turns out to be incorrect

Who signs, remains responsible for the content

The enterprise that confirms and submits the answer is and remains responsible for it — not Supplia. The platform recognizes questions, populates answers from the supply chain file and presents each answer for confirmation. That confirmation with yes or no is the core: with it, the entrepreneur themselves states that the answer is correct at the time of submission. Supplia makes no determinations, makes no assessments and never logs in to the customer's portal. No substantive review is therefore performed that would assume the enterprise's own responsibility.

This applies to every type of question, from a factual item such as the registration number under which the enterprise is registered to an assessment such as the status of a continuity plan in the event of a serious disruption. If an answer later turns out to be incorrect — for example because a certificate has meanwhile expired or a number of employees has changed — that is a matter between the entrepreneur and the party that sent out the questionnaire. The supply chain file is a tool for answering faster and more consistently, not a source that guarantees correctness; only the entrepreneur themselves can provide that guarantee, per answer, at the time of confirmation.

Why this is not a role for Supplia

This follows directly from the procedure as described above: the system proposes an answer, the client confirms, and only after that confirmation does the answer go to the customer's portal. There is no step in which Supplia gives a substantive opinion — no score, no mark of approval, no statement. For subjects where an external standard determines the content, such as the ten measures of Article 21(2) of the NIS2 Directive or the control measures from ISO/IEC 27001 Annex A, it therefore applies that the entrepreneur themselves assesses whether the proposed answer still matches the current situation, for example regarding the use of AI systems within service provision. That assessment lies outside the platform.