Who is responsible if an answer in the file is incorrect

Responsibility lies with the company, not with the system

The company using the file is and remains responsible for the accuracy of every answer sent to a customer. The supply chain file only delivers what was ever entered — updated data from the Business Register, a previously completed ISO 27001 status, a NIS2 measure previously marked as "present". Supplia recognises questions and proposes answers, but does not verify whether an answer is still current and does not assess whether it is correct. That step — agreed or not — lies with the confirmation that the user gives for each answer before anything is submitted to the customer's portal.

This means in practice that an incorrect answer in a submitted questionnaire is an error of the company, even if the answer was automatically suggested. For a question about the number of employees or annual turnover it is usually a matter of correcting an outdated figure. For a question falling under the ten measures of Article 21(2) of the NIS2 Directive, there is more weight: if the file states that a measure has been implemented when it no longer is, and that answer is confirmed and submitted, then it is a statement by the company itself to its customer — not by Supplia.

Why that follows from the platform's role

Supplia reads, declares and certifies nothing: there is no score, no quality mark and no substantive assessment of what is in the file, only recognition of questions and the provision of previously recorded answers. The confirmation for each answer is the moment when responsibility is explicitly placed with the user, and submission to the customer's portal is done by the company itself, not by Supplia. For underlying facts, the same logic applies as for other basic data, such as the registered address or the registration number": the source is external or previously supplied by the company itself, and keeping it current is the responsibility of the company.