customer asks for the signature of the management on the questionnaire

A management signature is not a legal requirement

No, no regulation stipulates that a questionnaire on sustainability, cybersecurity or continuity must be signed by management. The requirement does not come from the law, but from the customer's own portal. Companies sometimes build this in as their own control step, comparable to a "four-eyes principle": someone with signing authority must take responsibility for the content before it enters the customer's chain file. This is a choice of the requesting party, not of a regulator.

What you can ask: what name and title the customer expects at signature, and whether a digital confirmation (for example through the portal itself) is sufficient alongside a paper signature. This aligns with the legal name of the company, as portals often request exactly the same name as at signature. We populate that information from the chain file, but the signature itself — who signs on behalf of the company and whether it must be management — is for the customer and the entrepreneur together to decide, not for us.

No source requires signature

None of the sources relevant to this platform — the Dutch Trade Register Act 2007, the NIS2 Directive (article 21 paragraph 2), ISO/IEC 27001, the EFRAG VSME standard or the CSRD — contains an obligation for management to sign a customer questionnaire. These regulations set requirements for what an enterprise must do or register, not on the manner in which an answer to a questionnaire is confirmed. However, the registration number under which the enterprise is registered is often part of the same section as the signature, because a customer wants to be able to verify the identity of the submitter. For the precise requirement of a specific customer, that customer's portal remains the source, not one of these regulations.