supplia.eu

can I use the same answers for the next questionnaire from a different customer

Yes, for identity questions almost always

Yes, for a large part of every questionnaire the same answer can be used again. This especially applies to fixed basic data: legal name, Chamber of Commerce number, registered office address, sector, number of employees and turnover. This data is fixed in the Business Register and does not change per customer. Whether the question comes from a bank, an insurer or a purchasing department requesting sustainability: the company's registration number is the same answer everywhere. The same applies to a question about liability insurance or ISO 9001: that is not a snapshot, it is a status that you record once and then reuse until it changes.

For substantive questions it is more nuanced. A question about ISO/IEC 27001 asks in one list only whether the certificate exists, in another for specific control measures from Annex A — for example access control or incident response. A question that refers to the ten measures of Article 21(2) of Directive (EU) 2022/2555 is more precise than a general question about "cybersecurity", and the answer must match that precision. It is the same with sustainability lists: the VSME core module of EFRAG asks something slightly different than a customer who has made their own selection from the CSRD indicators. The underlying fact — do you have the policy, do you have the measure — remains the same, but the question to which the answer must fit differs. That is why reuse is the basis, and for each question it is a matter of checking whether the question measures exactly the same as the control that goes with it.

Why this differs per source

For identity data this is so because the Business Register Act 2007 establishes that data as one fixed set, regardless of who asks for it. For the substantive questions, the difference comes from the source to which the questionnaire itself refers: the ten measures of Article 21(2) of Directive (EU) 2022/2555 are formulated somewhat differently than the control measures of Annex A to ISO/IEC 27001, and the indicators of the EFRAG VSME module follow a different structure again than Directive (EU) 2022/2464. The same underlying practice can thus appear in different questions, with a slightly different answer as a result.

What you concretely need to do

The implementation of each obligation, with the deadlines involved and the templates for recording it, is included in the subscription.

View the subscription First the free quick-scan

This is not legal advice. This page provides general information on the regulations this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.

Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections receive priority.