how do I upload the questionnaire I received from my customer

Upload directly, recognition works at question level

You upload the file as you received it from your customer — Excel, PDF or an export from their portal, it doesn't matter. The system reads the questionnaire and recognizes at question level what subject it concerns, not which portal or which customer is involved. A question about Annex A of ISO/IEC 27001 is recognized as such, even if customer A calls it "information security policy" and customer B embeds it in a CSRD questionnaire under governance. That recognition is precisely why you don't have to formulate anew each time what the legal name of the company is or how many employees you have.

After recognition, the system fills in each question from your supply chain file — that is, from answers you have already confirmed before, not from a new interpretation of the question. If an answer is not yet there, for example because this is the first time someone asks about the ten measures of article 21 paragraph 2 NIS2, that field remains open instead of something being guessed. You get a yes/no confirmation for each answer before anything is finalized; without that confirmation, nothing goes to your customer's portal, because you submit it yourself.

What the system recognizes and what it does not

Recognition works at question level because most questionnaires draw on a limited number of underlying sources: identity data from the Trade Register Act 2007, size and location data, certifications such as ISO 9001, and sector-specific standards such as the VSME basic module from EFRAG or the CSRD Directive 2022/2464. What is not recognized — a question that has no match with an existing item in your file, such as whether the undertaking deploys AI systems when that has not been recorded before — remains open, so you can complete it yourself before you confirm.