
Ten security questions for your charging back-end supplier
What to ask before you sign or renew, why each question matters, and what a good answer sounds like.
Your customers’ security reviews are getting harder, and NIS2 asks operators to look at their suppliers. Give them answers without building a security team.

NIS2 Article 21 lists supply chain security among the measures for entities in scope, including the relationship with direct suppliers.
The 2026 CISA advisories were written about charging platforms, so expect buyers to ask about them.
Each item carries its status today. The first GridSEAL release is targeted for about Q2 2027.
GridSEAL inside your platform, for the customers who need it.
RoadmapRecords an auditor can check independently of you and of us.
RoadmapDated answers to the questions operators now ask.
RoadmapIn a study of 325 DC chargers, 12% supported TLS on this link.
ISO 15118-20 applies to new or renovated points from 1 January 2027.
It’s a networked computer on a public site, and its firmware is an update path.
The Cyber Resilience Act binds charger makers.
CISA issued at least 15 advisories on these platforms from January to October 2026.
NIS2 binds operators, including their supplier risk.
Vehicle-to-grid adds commands that move real power, so each one needs limits.
GridSEAL Grid is on our roadmap.

What to ask before you sign or renew, why each question matters, and what a good answer sounds like.

On one day, CISA published six advisories on charging platforms that all listed missing authentication on charger connections.

A log tells you what a system says happened. An auditor also needs to know it’s complete, unchanged and independent of the supplier.
We’re looking for a small number of platform partners. Tell us about your customers and your review burden.