← Back to the qualifier

Wersja polska · English version

Terms of Service

NIS 2 / KSC Qualifier — nis2.guardiso.com · Effective date: 14 June 2026 · Version 1.0

These terms are issued pursuant to Article 8(1)(1) of the Polish Act of 18 July 2002 on Providing Services by Electronic Means and set out the rules for using the free NIS 2 / KSC qualifier available at nis2.guardiso.com. In the event of any discrepancy between language versions, the Polish version (Regulamin) prevails.

§ 1. Service Provider

  1. The service provider is Guardiso, based in Poland — Michał Lewandowski, sole proprietor (CEIDG registry), ul. Święty Marcin 29/8, 61-806 Poznań, Poland, Tax ID (NIP) 6060011996, REGON 381263810, operating under the Guardiso brand (the "Provider" or "Guardiso").
  2. Contact: kontakt@guardiso.com.

§ 2. Definitions

  1. Service Website — the website available at nis2.guardiso.com.
  2. Qualifier — the free informational tool available on the Service Website that allows the User to preliminarily assess whether their organisation may be subject to the Polish Act on the National Cybersecurity System (KSC) implementing Directive (EU) 2022/2555 (NIS 2), and to perform an indicative readiness self-assessment.
  3. Report — the free PDF report with the qualification and self-assessment result, sent to the email address voluntarily provided by the User.
  4. User — any person using the Service Website.
  5. Services — the services provided electronically by the Provider via the Service Website, described in § 3.

§ 3. Types and scope of the Services

  1. The Provider offers the following free Services via the Service Website:
    • Qualifier — an interactive guide through the KSC / NIS 2 qualification criteria with statutory citations, running in the User's browser, with an optional feature to fetch company details from the public API of the Polish Ministry of Finance VAT taxpayer registry ("Biała Lista") based on a provided tax ID (NIP);
    • Readiness self-assessment — an indicative set of questions about the implementation status of cybersecurity risk-management measures;
    • Report — delivery of the Report to the email address provided by the User, after the User gives separate, voluntary consent to the processing of their email address.
  2. All Services are free of charge. Using the Qualifier and the self-assessment requires no personal data and no registration.
  3. The processing of personal data is governed by the Privacy Policy.

§ 4. Informational nature of the result — disclaimer

  1. The result of the Qualifier and the self-assessment, as well as the content of the Report, are for information purposes only. They do not constitute legal advice, a legal opinion or any other form of advisory services, and the Provider does not provide legal assistance via the Service Website.
  2. The classification is based on the Polish Act of 23 January 2026 amending the Act on the National Cybersecurity System (Journal of Laws 2026, item 252), Directive (EU) 2022/2555 (NIS 2) and the Q&A clarifications of the Polish Ministry of Digital Affairs of June 2026, as at the date of the legal state indicated on the Service Website.
  3. The final assessment of whether a given entity is subject to statutory obligations depends on individual circumstances and may require legal analysis. In borderline cases the Provider recommends consulting the Ministry of Digital Affairs or a law firm.
  4. The User makes decisions based on the Qualifier result at their own responsibility.

§ 5. Technical requirements

  1. Using the Service Website requires:
    • a device with internet access;
    • a current version of a web browser (e.g. Chrome, Firefox, Safari, Edge) with JavaScript, sessionStorage and localStorage enabled;
    • to receive the Report — an active email account and software capable of opening PDF files.
  2. The Service Website does not require installing any additional software.
  3. The Provider makes efforts to keep the Service Website continuously available, but reserves the possibility of temporary technical interruptions (maintenance, updates, failures beyond the Provider's control).

§ 6. Conclusion and termination of the service agreement

  1. The agreement for the Qualifier and self-assessment Service is concluded when the User starts using the Service Website and terminates when the User leaves the Service Website, without any additional declarations.
  2. The agreement for the Report Service is concluded when the User provides their email address, ticks the consent checkbox and submits the form, and is performed when the Report is sent to the provided address.
  3. The User may stop using the Services at any time. Withdrawal of consent to the processing of the email address is described in the Privacy Policy.

§ 7. Rules of using the Service Website

  1. The User must use the Service Website in accordance with the law, good practices and these terms.
  2. The User is prohibited from supplying unlawful content, in particular providing another person's email address without authorisation.
  3. Actions that may disrupt the operation of the Service Website are prohibited, including interfering with its code, mass automated querying and attempts to bypass security measures.

§ 8. Liability

  1. The Provider performs the Services with due care. Given the free and purely informational nature of the Services, the Provider is not liable for the consequences of decisions made by the User based on the Qualifier result or the Report content, to the fullest extent permitted by law.
  2. The Provider is not responsible for the accuracy or currency of data retrieved from public registries (the Ministry of Finance "Biała Lista" API) or for the availability of those registries.
  3. The limitations of liability in this section do not exclude or limit any liability of the Provider that cannot be excluded or limited under mandatory provisions of law, in particular towards Users who are consumers.

§ 9. Intellectual property

  1. The Service Website, including its content, layout, qualification logic, graphics, logos and the Report, is the subject of rights of the Provider or its licensors and is legally protected.
  2. The User may use the Report for their own internal purposes (including sharing it within their organisation). Copying or distributing elements of the Service Website for other purposes requires the Provider's consent. Citations of legal provisions contained on the Service Website are not subject to copyright protection.

§ 10. Complaints

  1. Complaints regarding the operation of the Service Website and the Services may be submitted by email to: kontakt@guardiso.com.
  2. A complaint should include: a description of the issue, the date it occurred and an email address for the reply.
  3. The Provider handles complaints promptly, no later than within 14 days of receipt. The reply is sent to the email address from which the complaint was submitted, unless another address is indicated.

§ 11. Personal data

Information about the processing of personal data — including the controller, purposes, legal bases, recipients, retention periods and data subjects' rights — is provided in the Privacy Policy, which forms an integral supplement to these terms.

§ 12. Final provisions

  1. These terms are governed by Polish law.
  2. In matters not regulated herein, the provisions of Polish law apply, in particular the Civil Code, the Act on Providing Services by Electronic Means and data protection law.
  3. Disputes arising from the use of the Service Website are resolved by the common courts having jurisdiction under general rules; for Users who are not consumers — the court having jurisdiction over the Provider's registered office. This provision does not limit consumers' rights under mandatory provisions of law.
  4. The Provider may amend these terms for important reasons (changes in the law, changes to the scope of the Services, security reasons). The current version of the terms with its effective date is always available at nis2.guardiso.com/legal/terms.html. Using the Service Website after amendments take effect constitutes their acceptance; amendments have no retroactive effect.
  5. These terms are made available free of charge, in a form that allows them to be obtained, reproduced and recorded.