how do I prevent having to fill in the same company details repeatedly
Bank and insurer request largely the same supply chain file
That can be faster, because the core questions from bank and insurer overlap strongly: identity, scale, locations and a few risk indicators. Both want to know what the registered name of the company is, under which number it is registered and how many employees the undertaking has. These are not bank-specific or insurer-specific questions; they are basic data that appear in every portal, only in a different order and with a different label. The supply chain file captures that core once; for each list, only whether the answer is still current is checked.
Where the lists diverge is in the risk questions: a bank more often asks about continuity and information security, an insurer more often about liability and claims history. For those questions, the second layer of the file is relevant — the section that states whether, for example, liability insurance is in place or is a business continuity plan has been established. If a supporting document is missing, that field is left blank rather than guessed at; an empty field is then the honest answer, not a "no" that is not substantiated.
Why identity and scale appear in every portal
That basic data appear in virtually every questionnaire follows from the Trade Register Act 2007: these are precisely the data that are centrally recorded for every business, such as name, number, address and sector. Because bank, insurer and other customers request the same registered data, recording once and reusing per list is sufficient — the source does not change, only the question about it.
What this is based on
- Trade Register Act 2007 — the data recorded for each company
- EFRAG VSME — the voluntary standard for non-listed SMEs, basic module
- Directive (EU) 2022/2464 (CSRD)
- ISO/IEC 27001 — Annex A, the control measures
- Directive (EU) 2022/2555 (NIS2), Article 21(2) — the ten measures
The regulation itself is on EUR-Lex. We refer for each claim; you do not have to take our word for it.
What you concretely need to do
The implementation of each obligation, with the deadlines involved and the templates for recording it, is included in the subscription.
View the subscription First the free quick-scanThis is not legal advice. This page provides general information on the regulations this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections receive priority.