Personal or health-related
Roles, purposes, access from abroad, subcontractors, retention and deletion.
View health requirements →Home / Supplier relationships
Supplier relationships
International suppliers, beyond digital alone
Qualify what is provided, what the European client entrusts and what genuinely depends on the relationship.
The true scope
The nature of the supplier alone is not enough to define the requirements.
A company may manufacture a mechanical part, process health data, develop software or operate an activity for a European client. The analysis starts with the flows and dependencies created by the relationship, not with a sector label.
01What is provided
Service, study, software, device, equipment, component or sub-assembly.
02What the client is entrusting
Data, access, plans, code, know-how, procedures or trade secrets.
03What depends on it
Continuity, service quality, security, industrial capacity or market access.
Five exposure gateways
One relationship can open several.
Each entry point changes the relevant evidence, the people to interview and the controls to examine.
Access to the client's IT system
Identities, permissions, roles, privileged accounts, logs and access revocation.
View international access →Plans and know-how
Classification, need-to-know, copies, transfer, return and subcontracting.
See industrial confidentiality →Placing on the European market
Development cycle, vulnerabilities, documentation and product-specific obligations.
View the Cyber Resilience Act →Operational dependency
Concentration, incidents, alternatives, recovery, reversibility and supply chain.
View the supply chain →iKNSA scope
Ensure the governance, practices, systems and evidence that support the relationship.
For a prosthesis, an aeronautical part or industrial equipment, iKNSA can examine the protection of data, access, confidential information and supplier commitments. The clinical, mechanical or regulatory compliance of the product falls, where necessary, to separate competent specialists.