Svenska Book a walkthrough

Industries · IT & service providers

IT and service providers: your customers' rules land on you. Answer with evidence.

Banks send DORA addenda, customers send security questionnaires, and NIS2 covers cloud, data centre and managed service providers directly. Paragraf keeps your customer contracts, commitments and evidence in one place, so you answer faster and only promise what you can prove.

NIS2DORA Art. 30ISO 27001Customer contracts
Book a walkthroughSee an example ↓

Customer · Nordbank · DORA addendum

  • Required clauses12
  • Matches your standard10
  • To negotiateAudit rights, exit support
  • OwnerLegal
Product example

The pressure

Your customers are regulated. So are you.

Questionnaire after questionnaire

Every customer asks the same security questions in a new format, and the answers live in someone's inbox.

You are in scope yourselves

Cloud, data centre and managed (security) service providers are covered by NIS2 as essential or important entities.

Where teams start

The situations we see most in iT & service providers.

A practical example

Example: a bank customer sends a DORA addendum.

Step 1 of 4

Compared with your standard.

The addendum is checked against your own DORA position. Ten clauses match. Two need negotiating.

Review · DORA addendum

  • Clauses12
  • Match10
  • DeviationsAudit rights, exit support
Product example

For the buying group

What each role gets.

One foundation, so each role sees its own part – and everyone sees the same truth.

  • LegalCustomer addenda reviewed against your own standard.
  • SalesFaster answers to security questions, without new promises.
  • SecurityNIS2 duties and customer commitments in one model.
  • DeliveryEvery commitment with an owner and a routine.

Before you decide

The questions that usually hold teams back.

Changing how work is followed up is a real decision. Here is how we make it a safe one.

We already have a standard DORA addendum.

Good. Put it in as your playbook. Every customer version is then compared with it, so you only negotiate what differs.

Can we reuse answers to security questionnaires?

Yes. Answers are tied to your controls and evidence, so the next questionnaire starts from what you have already proven.

Where is our data, and our customers' data?

Hosted in the EU, or on your own servers with local AI. Permissions apply per customer. See the Trust center.

Where do we start?

With your largest regulated customers and their contracts, with acceptance criteria agreed up front.

Go deeper

Your own processesLuisContracts · Compliance · Processes · FormsThe foundation

Next step

Fewer systems.
More control.

Book a walkthrough with one of your own customer contracts. We show you the review, the commitments and the evidence, on your material.

Book a walkthrough Template: your system map on one page →