what do I have to enter in the questionnaire for our liability insurance
Recognisable fields, with a few hidden pitfalls
At first glance, an insurer's or broker's questionnaire looks like any other supply chain questionnaire: business details, activities, size. What is the registered office of the undertaking? and you can obtain the KvK number without any dispute from the Commercial Register. It becomes more difficult with questions that look forward rather than backward: expected turnover for the coming year, number of fte including self-employed persons and temporary workers, and a description of the "activities" that is often broader or narrower than your own SBI code suggests. Fill in that last one as factually as possible — the description also determines which damages are covered under the policy, and a description that is too broad or too narrow will only be questioned when you make a damage claim.
Two categories of questions are typical for liability and are not standard in your supply chain file. First, claims history: number and nature of claims in the last three to five years, including rejected claims. That data is usually held by your current insurer or intermediary, not by you. Second, subcontractors and chain of liability: do you work with self-employed persons or subcontractors, and do you usually have recourse or waiver agreements with them? If you already have a policy in force, then Does the undertaking have a business liability insurance? a question that you answer with the existing policy details instead of looking it up again. If a damage figure is missing, answer with a reference to "to be requested from current insurer" instead of an educated guess — an incorrectly completed claims history is exactly the kind of error that can lead to a coverage dispute in a later claim.
No legal basis, but contractual consequences
This questionnaire does not follow a standard such as the NIS2 Directive or ISO 27001; the insurer determines his own acceptance questions based on the risk to be insured. What is certain: the data you provide — name, legal form, place of establishment — must correspond with the Commercial Register Act 2007, because discrepancies between the policy and the KvK entry can cause delays in the event of a claim.
What this is based on
- Trade Register Act 2007 — the data recorded for each company
- EFRAG VSME — the voluntary standard for non-listed SMEs, basic module
- Directive (EU) 2022/2464 (CSRD)
- ISO/IEC 27001 — Annex A, the control measures
- Directive (EU) 2022/2555 (NIS2), Article 21(2) — the ten measures
The regulation itself is on EUR-Lex. We refer for each claim; you do not have to take our word for it.
What you concretely need to do
The implementation of each obligation, with the deadlines involved and the templates for recording it, is included in the subscription.
View the subscription First the free quick-scanThis is not legal advice. This page provides general information on the regulations this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections receive priority.