For suppliers
Complete it once. Share it with every customer who asks.
Customers under the Dutch Cyberbeveiligingswet must test whether you meet their requirements, and every customer asks differently. With an about.biz passport you answer once, with evidence checked at the source.

Free to start
You pay nothing during the pilot. Every kind of check stays available for free afterwards too.Complete once
Your website, your registration, your certificates and one questionnaire. Then you keep it current.Reuse
Every next customer gets a link instead of a new questionnaire.
Step 1
Show that the website is yours
It makes your passport provably yours: nobody else can take it over, and customers and AI agents who look you up by your domain see that it speaks for you. Only whoever controls the domain can do this. There are three ways; you pick one.
A code in the domain settings
Your web manager or IT provider adds a short code to your domain's DNS settings (a TXT record). about.biz checks the code and records when.A file on your website
You put a small file with a code in a fixed place on your website. Useful when you can reach the website but not the domain settings.An e-mail to admin@ or postmaster@
We send a code to admin@ or postmaster@ at your domain. Whoever reads that mailbox usually controls the domain.
Step 2
Complete your passport once
Your registration
Your company registration number. We check the registration, insolvency and sanctions at the source. You share those details only with customers you approve.Your certificates
ISO 27001, NEN 7510, ISO 9001 and others. Our staff check them in the certification body's register. When a certificate expires, its label changes by itself.Your security contact
An address at your own domain, confirmed with a code or through your security.txt.
Step 3
The questionnaire: 20 questions, once
Twenty questions in six sections, written with the Dutch NIS2 law, EU Implementing Regulation 2024/2690 and the municipalities' PLC in mind. Each question says why customers ask it.
- 01Organisation and contacts
- 02Accounts and access
- 03Day-to-day security
- 04Data and supply chain
- 05Continuity and exit
- 06Proof and cover
Someone at your company signs the answers with name and role, from a verified work e-mail. What a source can confirm becomes “verified”; the rest reads “signed”.
Frequently asked questions
- Do I need ISO 27001?
- The law does not require it. Your customer can ask for it, as part of its own requirements. Municipalities ask for it from PLC level 2.
- My customer already has its own questionnaire. Now what?
- Send your share link along. Many questions overlap. Whether your customer accepts the link is its call.
- What do I see of who views my passport?
- For a share link you see when it was opened, and by which organisation if the viewer was signed in. Nothing more.
- Can I stop?
- Yes. You decide who you share with, you revoke share links whenever you want, and you can switch a public page off again.