How do I check the NIS2 classification of my company?

NIS2 classification on CysNis takes a few minutes: enter the VAT ID, the primary NACE code and the number of employees. The platform compares the data with Annexes I and II of Directive (EU) 2022/2555 and OUG 155/2024 and returns the sector, annex, status (essential/important/excluded) and the applicable CyFun 2025 assurance level.

What are the NIS2 size thresholds?

Essential entity: >250 employees or turnover >50M EUR AND balance sheet >43M EUR, in an Annex I sector. Important entity: >50 employees or turnover/balance sheet >10M EUR, in Annex I or II. Below these thresholds, entities are generally excluded, except for special cases (DNS providers, TLDs, qualified trust services, public electronic communications, public administration — always in scope).

Is the NIS2 classification tool free on CysNis?

Yes. The NIS2 classification tool is free, no account required for the initial assessment. The result includes the sector, DNSC code, entity status and recommendations for next steps (ENIRE@RO registration, Art. 21 implementation plan).

NIS2 Classification: Check if Your Company Falls Under NIS2

How the classification works

VAT/Tax ID (CUI) — we look up NACE codes and headcount from the Romanian Trade Register (ONRC).
Primary NACE code — strict 4-digit match against Annexes I & II of NIS2.
Size thresholds — employees, turnover, balance sheet vs essential / important / below-threshold.
Special cases — DNS, TLD, trust services, public communications, public administration are in scope regardless of size.
Result — sector, annex, DNSC code, status, assurance level (CyFun 2025) and recommended next steps.

NIS2 size thresholds at a glance

Category	Employees	Turnover	Balance sheet
Essential (Annex I, large)	≥250	>50M EUR	>43M EUR
Important (medium)	50–249	10–50M EUR	10–43M EUR
Below threshold	<50	<10M EUR	<10M EUR

After classification — what's next?

Essential entities: register with DNSC via ENIRE@RO within 60 days.
Important entities: register within 150 days.
Start the Art. 21 implementation programme (17 pillars).
Prepare the incident reporting workflow (24h/72h/1 month).

Full walkthrough: NIS2 implementation guide.

FAQ

Is the classification tool really free?

Yes — initial assessment requires no account.

What if my NACE code is not in Annex I or II?

Your entity is generally out of scope — unless it operates DNS, TLD, trust services, public electronic communications or is part of public administration.

How accurate is the result?

The engine applies the strict 4-digit NACE match defined by DNSC and the size criteria of OUG 155/2024. For edge cases, the report flags ambiguity and recommends consultant review.

NIS2 classification: check if your company falls under NIS2