Resolved on June 11, 2026.
NIS2 applies directly to SaaS companies above 50 employees or €10 million in revenue, and indirectly to smaller suppliers whose enterprise customers fall in scope. The regulation requires a documented risk management system, a 24-hour incident reporting procedure, supply chain assessments, and a business continuity plan. ISO 27001 is explicitly recognised by NIS2 as a compliance path. Fines reach up to €10 million or 2% of global annual turnover for essential entities.
Update timeline
- resolved Jun 11, 2026, 12:00 PM UTC
NIS2 applies directly to SaaS companies above 50 employees or €10 million in revenue, and indirectly to smaller suppliers whose enterprise customers fall in scope. The regulation requires a documented risk management system, a 24-hour incident reporting procedure, supply chain assessments, and a business continuity plan. ISO 27001 is explicitly recognised by NIS2 as a compliance path. Fines reach up to €10 million or 2% of global annual turnover for essential entities.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services