European requirements
NIS2DORACiteqly helps teams complete seller-side security questionnaires. Answers can be mapped to NIS2 supply-chain and DORA ICT third-party themes. It does not replace legal advice or a full GRC control library.
Data hosting
Production pilot data is stored in Neon Postgres in AWS Europe Central (Frankfurt). The application is hosted on Vercel.
Model usage
Drafting uses the OpenAI API with retrieved passages from documents you upload. Customer content is not used to train Citeqly’s models or any third-party foundation model. A DPA is available for paid pilots.
Approval and retention
Export requires named human approval. Citations, the approving user and timestamp are retained for the pilot report. Pilot workspaces can be deleted on request after the engagement.
See it in the product
Upload documents, draft a questionnaire, approve answers and export to Excel. The insights page includes a time-saved estimate for the pilot.