TISAX · Automotive industry
TISAX: information security in the automotive industry
Show the major manufacturers that you meet their security requirements, with a single assessment recognized by all of them.
What is TISAX?
The standard German automakers require
TISAX certifies compliance with the VDA ISA information security catalog, required by manufacturers such as the Volkswagen Group, Mercedes-Benz and BMW.
The platform is run by ENX, the association that brings together manufacturers, suppliers and organizations in the European automotive industry.
VDA ISA version 6.0 was aligned with ISO 27001:2022 and the NIST Framework.
VDA ISA 6.0 requirements
Four blocks of controls
Third-party relationships
Prototype protection
Personal data protection
Phases
How to obtain TISAX
- 1Registration: online registration with your company information.
- 2Audit: verification of the maturity level. We prepare compliance with the VDA ISA 6.0 module, the documentation and the required resources.
- 3Exchange: results are shared with the manufacturers or clients that request them.
Assessment levels
Choose the level your clients require
AL 1
Self-assessment for internal purposes.
AL 2
The auditor reviews the self-assessment evidence by video conference.
AL 3
More extensive checks, with on-site inspection and in-person interviews.
No more than nine months can pass between the initial check and the final result. The TISAX label is valid for three years, with no annual surveillance audits.
Why TISAX
One assessment, many clients
You demonstrate compliance
To your automotive industry clients.
No duplicate assessments
You avoid repeated audits from different clients.
Mutual recognition
Assessments are recognized across companies.
Reliable results
Backed by the VDA ISA catalog.
Credentials
TISAX auditors on the team
FAQ
What clients ask us most
What is TISAX?
TISAX (Trusted Information Security Assessment Exchange) is the European automotive industry's information security assessment mechanism, based on the VDA ISA catalog.
Who needs TISAX?
Suppliers and partners of automakers, especially German ones, that handle sensitive information, prototypes or their customers' personal data.
Are you a supplier to the automotive industry?
We prepare you for the TISAX assessment at the level your clients require.