Assessyourthirdpartiesacrossallframeworks
NIS2, DORA, GDPR, ISO 27001, TISAX, CSRD, CSDDD, VSME… Select your regulatory framework, identify the relevant third parties, and launch your campaigns. Conitiv collects, archives, and reports results for you.
Automated scoring + self-declared data = 360° assessment
Automated scoring enables you to monitor all your third parties using publicly available data. But for your critical third parties — those accessing your data, systems, or business processes — you need to go further.
Conitiv compliance questionnaires allow you to collect self-declared data directly from your suppliers and subcontractors, based on specific regulatory frameworks.
Whether you're concerned with cybersecurity, data protection, operational resilience, or corporate responsibility, Conitiv provides expert-designed questionnaires aligned with each framework's requirements, integrated into a platform that automates sending, tracking, follow-ups, and response archiving.
💡 Results complement automated scoring to produce a consolidated assessment of each third party, combining public data and self-declared data.
Dans le cadre d'une collecte documentaire structurée, les questionnaires de conformité permettent de s'assurer de la conformité réelle de chaque fournisseur et de constituer un dossier opposable.
How it works
Choose your framework
Select the regulatory framework appropriate to your context: NIS2, DORA, GDPR, ISO 27001, TISAX, CSRD, CSDDD, VSME, or a generic cyber or ESG questionnaire.
Identify your third parties
Target the relevant suppliers and subcontractors based on their criticality class (Class B: critical third parties).
Schedule your campaigns
Launch questionnaire distribution, track responses in real time, and automate follow-ups.
Collect the reports
Responses generate a timestamped compliance report, archived and usable as evidence in case of regulatory inspection.
Available regulatory frameworks
Three families of questionnaires covering all third-party management obligations.
Cyber Questionnaires
Assess your third parties' cyber maturity: security governance, IS protection, vulnerability management, business continuity, and incident management.
ESG Questionnaires
Measure your suppliers' responsible commitments: environmental policy, social conditions, business ethics, and governance.
Regulatory Questionnaires
For each regulatory framework, an original questionnaire structured around the specific requirements of the text, with an integrated maturity scale.
Cyber governance, process mapping, incident management, supply chain security, and business continuity.
ISMS implementation, Annex A controls, risk management, internal audits, and continuous improvement.
Processor commitments (Art. 28), security measures (Art. 32), breach management, and transfers outside the EU.
ICT risk management, resilience testing, incident reporting, and supervision of critical ICT service providers.
Prototype protection, OEM data security, and management of access to sensitive information.
Self-declared ESG data: environmental footprint, social policy, governance, and sustainable development goals.
Human rights compliance, working conditions, environmental impact, and remediation mechanisms.
Risks to fundamental rights, health & safety, and environment related to subcontractor activities.
What sets apart Conitiv questionnaires
Original questionnaires
Designed by cybersecurity, compliance, and ESG experts, aligned with current regulatory texts.
Integrated maturity scale
Each response is qualified (not applicable, not addressed, initiated, documented, mastered) for precise and comparable scoring.
Automated campaigns
Sending, tracking, follow-ups, and closure managed from the platform, without manual back-and-forth.
Complete archiving
Every campaign, response, and report is timestamped and archived — an evidence file ready for regulatory inspection.
Scoring + self-declared combined
Responses enrich automated scoring to produce a 360° assessment of each third party.
Simplified third-party experience
Intuitive interface for respondents, integrated comments, and ability to attach supporting documents.
Who are Conitiv questionnaires designed for
DPO & compliance teams
Demonstrate your subcontractors' GDPR compliance and produce evidence in case of CNIL inspection.
Learn moreCISO & cybersecurity teams
Assess your IT service providers' security posture within the NIS2, DORA, or ISO 27001 framework.
Learn moreProcurement departments
Integrate ESG and due diligence criteria into your supplier selection and monitoring process.
Learn moreM&A & Risk Management
Complement your due diligences with a self-declared assessment of the target's third parties.
Learn moreFrequently asked questions
Les questionnaires de conformité s'intègrent dans un programme TPRM Advanced clé en main pour une gestion complète du risque tiers, de l'évaluation initiale au suivi continu.
Ready to assess your third parties' compliance? Launch your first campaign.
Discover how Conitiv questionnaires enable you to collect, archive, and leverage your suppliers' self-declared data — across all your regulatory frameworks.
expert Conitiv