Take the free compliance quickscan
A short compliance check: which rules and standards apply to you, and where do you start?
Answer 16 short multiple-choice questions about your organisation's current situation. Based on your answers, we'll generate a personalised compliance action plan with concrete next steps, prioritised by risk and relevance to your business.
How it works
What is a compliance quickscan?
A compliance quickscan is a short check of where your organisation stands. You answer 16 multiple-choice questions about your product, your customers, your data and your security. You then see which laws and standards apply to you and where the biggest risks are. There is nothing to prepare and no auditor is involved.
Who is this compliance check for?
For organisations that want to know where to start. Think of a startup facing its first customer security questionnaire, an SME that wants to know what NIS2 means for its customers, or a healthcare software supplier that has to deal with NEN 7510. The questions are about your situation, not your knowledge of compliance. See also how Tidal Control works for compliance at startups, compliance in mid-market companies and compliance in healthcare.
What does the quickscan cover?
The questions are split into five parts. Together they set your risk profile in four areas: legal, security, compliance and reputation.
- Product and market
- What you deliver and to whom: software, IT services or hardware, to consumers, businesses or government.
- About your company
- Your team size, your growth stage and which compliance measures you already have.
- Laws and regulations
- Your customers' sectors, the data you process, whether you are a processor, how you use AI and where your customers are.
- Customer expectations
- What security customers ask of you and whether end users work with automated or AI features.
- Business protection
- Third-party AI tools, the financial impact of your product and intellectual property questions.
What do you get afterwards?
After the last question you see your risk profile and the first steps from your action plan straight away. Enter your work email and the full action plan lands in your inbox, with next steps ordered by risk and relevance. You can also view the action plan online afterwards.
Which standards and laws are covered?
The quickscan looks wider than a single standard. These frameworks, among others, come up in the questions and the action plan.
- ISO 27001
- The international standard for information security, often requested by business customers. See what it takes to get ISO 27001 certification.
- NIS2
- The European cybersecurity directive, implemented in the Netherlands as the Cyberbeveiligingswet. Read what NIS2 compliance asks of you.
- NEN 7510
- The Dutch standard for information security in healthcare. See the steps to NEN 7510 certification.
- GDPR
- The rules for processing personal data, including when you process it for your customers. See how to demonstrate GDPR compliance.
- AI Act
- The European rules for AI systems. For the management system around it there is ISO 42001 for AI management.
Quickscan, baseline assessment, gap analysis or audit: what is the difference?
These terms are often used interchangeably, but they belong to different moments in a project.
- Quickscan
- A first indication in a few minutes, based on your own answers. You see which rules apply and where to start. That is the scan above.
- Baseline assessment
- A record of your current situation against a specific standard, such as ISO 27001 or NEN 7510. For each requirement you check what is already in place.
- Gap analysis
- The comparison between your current situation and what the standard requires. The result is a list of what still needs doing. Our explanation of the gap analysis shows how it works.
- Audit
- A formal assessment by an auditor. For a certificate, such as ISO 27001, a certification body carries out the external audit.
In Tidal Control you do the baseline assessment and gap analysis in the platform and prepare for the audit. For our customers the median from start to certificate is 13 weeks.
Frequently asked questions
Nothing. The quickscan is free and you do not need an account. For the full action plan we only ask for your work email.
About 3 minutes. There are 16 multiple-choice questions. If you close the page halfway, you can continue where you left off in the same browser.
No. The quickscan gives a first indication based on your own answers. A baseline assessment or gap analysis checks your situation against each requirement of the standard. You do that afterwards in the platform, as described on the page about ISO 27001 certification.
Not formally. The quickscan asks whether your customers set sector-specific requirements, such as NIS2, NEN 7510 or DORA, and includes that in your risk profile. Whether your organisation itself falls under NIS2 depends on your sector and size. The page about NIS2 compliance explains how to work that out.
Start with the steps at the top of your action plan. If you want to manage the route to a certificate in one platform, look at Tidal Control plans and pricing or book a demo.