do you also issue a certificate or score about our company

We do not issue a certificate, score or assessment

No, we do not, and that is a deliberate boundary. Supplia provides no certificate, no rating and no statement about your enterprise. What you prepare in the chain file are facts and the supporting documents that go with them — not an assessment of those facts. The distinction that is often confusing: ISO/IEC 27001 certification is an assessment by a certification body of your information security, based on the control measures in Annex A. We only register whether you have that certificate and prepare the certificate itself as supporting documentation. We do not confirm that it is correct, we do not verify its validity, and we do not make any assessment of the quality of your security.

The same applies to any other subject where a questionnaire appears to request verification. For the ten measures of Article 21(2) of the NIS2 Directive (2022/2555) you enter what you have organized — we do not verify whether that is sufficient for your sector or risk profile. The same applies to a VSME report according to the basic module of EFRAG: we structure the data that the standard requests, but we do not determine whether your report is "good" or "CSRD-proof". That assessment lies with the client who sends out the list, with an auditor, or with a certification body — never with us. If supporting documentation is missing, the answer remains open; we never enter an assessment where there is no source document for it.

What we record comes from the business register and your own file

The basic data we use for identity — such as the statutory name and the registration number — come from the documentation that the Dutch Business Register Act 2007 already requires. For subjects such as ISO 9001 or business continuity planning the same procedure applies: we show what you have submitted, with source reference, so that you can confirm each answer with yes or no. The assessment of that content lies with whoever is asking for it.