About ChainSec
ChainSec is a Swedish system for supplier evaluation and GRC. The Supplier offering keeps track of which suppliers are approved, which certificates are valid and when each supplier is due for re-evaluation. The GRC offering gives the person responsible for security and compliance supplier security assessments, a risk register and the NIS2 requirements catalogue.
The problem we solve
Supplier follow-up is rarely anyone's main job. It sits with the quality manager, procurement or IT security alongside everything else, and it often lives in a spreadsheet. That works for ten suppliers. But the spreadsheet doesn't tell you when a certificate has expired or a re-evaluation is overdue, and when the auditor asks who approved what and when, the history has already been overwritten.
ChainSec turns the list into a register: every supplier has an approval status, certificates with expiry dates, its own re-evaluation interval and a log of who reviewed what. For whoever owns security and compliance there is GRC, with security assessments of suppliers, a risk register and the NIS2 requirements catalogue.
Our team
ChainSec is developed by Fiive AB, a technology company in Gothenburg with experience building cloud-based tools that companies use in their daily work. We are a team of developers, designers and security experts who solve concrete problems – not abstract compliance challenges.
We build ChainSec the way we would want to use it ourselves: fast, clear and without unnecessary features. Security is built in from the start – not added afterwards.
Why we exist
The demands on supplier follow-up keep growing. ISO 9001 requires you to evaluate and re-evaluate external providers, NIS2 requires you to manage security in the supply chain, and auditors want evidence. Meanwhile more time goes into compiling that evidence than into actually evaluating suppliers.
We want whoever owns supplier follow-up to spend their time on the evaluations – not on digging through email threads for a certificate from 2022.
Our goal is simple: when the auditor asks, the answer should be an export – not a weekend in the spreadsheet. That is why we build ChainSec.
Talk to the team building ChainSec.
Tell us about your supplier follow-up or GRC work. We can help you find the right approach and show you the system.