Choose a sector and enter staff, turnover and balance sheet, then click Check scope.
Result
The same sector at other sizes
| Size | Result | Basis |
|---|
What it does, and what it leaves to you
- Size: small is under 50 staff with turnover or balance sheet of EUR 10 million or less; medium is under 250 staff with turnover up to EUR 50 million or balance sheet up to EUR 43 million; anything above is large.
- Category: large Annex I is essential; medium Annex I and medium or large Annex II are important. DNS providers, top-level domain registries, qualified trust service providers and central government bodies are essential whatever their size; other trust service providers are important; public electronic communications providers are essential from medium size.
- Not decided: how your Member State transposed the Directive, whether it designated you, partner-enterprise proportional size rules, whether your activity fits an Annex entry as national law defines it, which sector rules such as DORA take precedence, and your exact deadlines and fines.
Common questions
Does NIS2 apply to my company?
It applies to entities in the sectors listed in Annex I and Annex II of Directive (EU) 2022/2555 that provide services in the EU and are medium-sized or larger, plus some types that are in scope whatever their size. The page applies those rules to your sector and size and shows the result.
What is the difference between essential and important entities?
Large entities in Annex I sectors are essential; medium Annex I entities and medium or large Annex II entities are important. Essential entities are supervised proactively and face higher maximum fines than important ones, at least EUR 10 million or 2% of turnover against EUR 7 million or 1.4%.
How is company size measured for NIS2?
By the thresholds in Commission Recommendation 2003/361/EC: medium means 50 or more staff or more than EUR 10 million in both turnover and balance sheet; large means 250 or more staff, or turnover above EUR 50 million together with a balance sheet above EUR 43 million. Linked enterprises count in full, so use whole-group figures.
Are small companies ever covered by NIS2?
Yes for some types: DNS providers, top-level domain registries, trust service providers, public electronic communications providers and central government bodies are in scope whatever their size, and Member States can designate sole providers and nationally critical entities.
Is my data uploaded anywhere?
No. Everything is calculated in your browser and nothing is sent; a test in the code asserts there are no network calls.