can I upload the questionnaire from my customer's portal here

Yes, that is the entire process

Yes, the questionnaire you obtained from your customer's portal, you simply upload it here. That is exactly what the system is built for: you receive a list in Word, Excel or PDF from a customer — an audit portal, a procurement department, a bank — and you put it here in the format you received it. The system recognises the questions and fills in the answer to each question from your supply chain file, along with the source that goes with it.

This works regardless of the format or subject of the list. A question about the number of employees is recognised and linked to how many employees the undertaking has, a question about ISO 27001 measures to the control measures you have already established. The same applies to a NIS2-like question about the ten measures of Article 21(2): if the answer is in your file with a source, it comes back as a suggestion; if it is not there, the field remains open instead of something being guessed. You will therefore never receive a fully completed list without reviewing it — each answer requires your confirmation with yes or no before it is ready. Downloading and submitting to your customer's portal you do yourself; we do not log in there.

What the system does and does not do with the content

This follows from how the answer process is set up: the system reads and recognises questions, but does not assess the content of the list. Whether a question comes from the VSME basic module of EFRAG, from a CSRD questionnaire under Directive (EU) 2022/2464, or from a security audit based on ISO/IEC 27001 Annex A — the process is identical: recognise, match with the file, suggest, and confirm by you. Questions that are not recognised, or for which no source data exists, are not simply skipped: you see them back as outstanding, so you can complete them yourself. Sensitive answers — for example about in which countries the enterprise has establishments — you can shield with the confidentiality button before you share or download the file.