Terms of purchase
Version 1.2 — Effective from 2026-09-29
These terms apply to all services ordered and paid for through the nis2europe.eu platform.
Service provider
The service is provided by AIPOS OÜ, registry code 16966532, registered in the Republic of Estonia. By placing an order and making payment, the customer confirms that they have read and accepted these terms. Address: Pargi tn 1, Kabala küla, Türi vald, 72001 Järva maakond, Estonia. Email: support@nis2europe.eu.
What the service includes
The service includes automatically generated documents, produced on the basis of the currently valid legal text of the relevant country's NIS2 transposition law. The service includes a step-by-step assistant that guides the customer through the document generation process. The service includes a manual that assists the customer in filling in the documents themselves.
Entry document and packages
The Company-Specific NIS2 Cybersecurity Risk Management Policy is a separate one-time service at the price shown in the price list, the same price in every country where it is offered. Its price is never deducted from, or credited towards, the price of any document package or other service; the platform grants no credits, coupons or set-offs. The same document type is also included in the full documentation package; purchasing the entry document is not a prerequisite for, nor a partial payment of, the package.
What the service does NOT include
The service does not include legal advice or legal counsel. The service does not include any examination or assessment of the documents by a lawyer or attorney. The service does not include signing of the documents. The service does not include implementing, within the customer's organisation, the security measures described in the documents. The service is not legal advice and does not replace an auditor or a lawyer.
Customer obligations
The customer undertakes to provide accurate and correct information to the platform. The customer undertakes to fill in the documents themselves. The customer undertakes to actually implement, within their organisation, the measures described in the documents. Fulfilment of these obligations rests solely with the customer.
Liability
The provider is liable for generating the documents correctly on the basis of the legal text valid at the time of generation. The customer is liable for the information they enter and for the content of the documents, and for the actual implementation of the measures described in the documents. The provider's liability is in all cases limited to the amount actually paid by the customer for the service; for recurring (subscription-based) services, the cap is the total fees for 12 months. Indirect and consequential damages, including lost profit, business interruption, and reputational or data-related loss, are excluded entirely.
Delivery
The documents are usually ready within one hour after payment has been received. The customer is notified of completion by email, at the address provided by the customer. The customer is responsible for ensuring that the email address provided is correct and functioning.
Order fulfilment: the service provider fulfils the order in any event no later than 10 working days after receipt of payment, including where the documents are referred to additional quality review before release. The one-hour completion time stated above describes the usual course and is not the deadline for fulfilment of the order.
Returns
This is digital content, delivered to the customer automatically and immediately after payment has been received. Under EU distance-selling rules, the right of withdrawal does not apply to digital content once delivery has begun with the customer's consent (Directive 2011/83/EU Article 16(m) and the Estonian law transposing it). By placing an order, the customer gives such consent and acknowledges that the right of withdrawal thereby lapses. In the event of a technical fault that prevented delivery of the documents, the matter is resolved by contacting the provider.
Personal data
The processing of personal data is described in a separate privacy notice available on the platform. Privacy notice
Governing law and dispute resolution
The contract is governed by the law of the Republic of Estonia. Disputes are to be resolved primarily through negotiation; if no agreement is reached, the dispute is resolved by Harju County Court (Harju Maakohus), the court of the provider's registered seat. This does not restrict the customer's rights where the customer qualifies as a consumer — if the mandatory consumer-protection law of the customer's country of residence grants a non-waivable right to bring proceedings before the courts of that country, or to rely on the consumer-protection provisions of that country, that right remains in force and is not excluded by this clause.