For suppliers

Complete it once. Share it with every customer who asks.

Customers under the Dutch Cyberbeveiligingswet must test whether you meet their requirements, and every customer asks differently. With an about.biz passport you answer once, with evidence checked at the source.
  • Free to start

    You pay nothing during the pilot. Every kind of check stays available for free afterwards too.
  • Complete once

    Your website, your registration, your certificates and one questionnaire. Then you keep it current.
  • Reuse

    Every next customer gets a link instead of a new questionnaire.

Step 1

Show that the website is yours

It makes your passport provably yours: nobody else can take it over, and customers and AI agents who look you up by your domain see that it speaks for you. Only whoever controls the domain can do this. There are three ways; you pick one.
  • A code in the domain settings

    Your web manager or IT provider adds a short code to your domain's DNS settings (a TXT record). about.biz checks the code and records when.
  • A file on your website

    You put a small file with a code in a fixed place on your website. Useful when you can reach the website but not the domain settings.
  • An e-mail to admin@ or postmaster@

    We send a code to admin@ or postmaster@ at your domain. Whoever reads that mailbox usually controls the domain.

Step 2

Complete your passport once

  • Your registration

    Your company registration number. We check the registration, insolvency and sanctions at the source. You share those details only with customers you approve.
  • Your certificates

    ISO 27001, NEN 7510, ISO 9001 and others. Our staff check them in the certification body's register. When a certificate expires, its label changes by itself.
  • Your security contact

    An address at your own domain, confirmed with a code or through your security.txt.

Step 3

The questionnaire: 20 questions, once

Twenty questions in six sections, written with the Dutch NIS2 law, EU Implementing Regulation 2024/2690 and the municipalities' PLC in mind. Each question says why customers ask it.
  1. 01Organisation and contacts
  2. 02Accounts and access
  3. 03Day-to-day security
  4. 04Data and supply chain
  5. 05Continuity and exit
  6. 06Proof and cover

Someone at your company signs the answers with name and role, from a verified work e-mail. What a source can confirm becomes “verified”; the rest reads “signed”.

Step 4

Share the way you want

  • Share links

    A short link per customer or per tender (abt.bz). Private, revocable, and you see when it was opened.
  • Your sharing policy

    Share automatically with verified business requesters, or decide per request.
  • A public page, if you want

    about.biz/yourdomain, only if you choose it. Every required part is on it, including a part that does not hold.
  • A live seal for your website

    The seal shows the current state and date, and links to your passport. If something expires, it turns grey by itself.

Frequently asked questions

Do I need ISO 27001?
The law does not require it. Your customer can ask for it, as part of its own requirements. Municipalities ask for it from PLC level 2.
My customer already has its own questionnaire. Now what?
Send your share link along. Many questions overlap. Whether your customer accepts the link is its call.
What do I see of who views my passport?
For a share link you see when it was opened, and by which organisation if the viewer was signed in. Nothing more.
Can I stop?
Yes. You decide who you share with, you revoke share links whenever you want, and you can switch a public page off again.