The NIS2 incident clock
Once you become aware of a significant incident, three NIS2 reporting deadlines start running. Next Lite counts them down for you and keeps the evidence.
What Next Lite covers
Only what NIS2 requires, without heavyweight processes a smaller organisation does not need. Unlimited users, risks and suppliers. See each area in the working application.
The tour moves on by itself. Click an area to stay on it.
NIS2 classifier
Questions tailored to your sector determine whether you are an essential or an important entity and which obligations apply. The result becomes your action plan straight away.
Risk analysis with a sector package
Pick your sector package and add risks from ready-made templates instead of starting with an empty table. Every risk has an owner, an assessment and actions.
Security policies
Simple policy templates for your sector, approved by your management body with a record of adoption.
NIS2 incident handling
Simplified incident handling with 24 h / 72 h / 1 month deadlines, an activity log and report content ready to submit to your CSIRT or competent authority.
ICT suppliers
A supplier register and assessments with sector-specific questions, linked to your risk analysis. Assessment results show up in the risk register straight away.
NIS2 AI Expert in the app
The AI assistant works on your data in the system: it suggests next steps, points out gaps in evidence and drafts documents. A person on your side approves every proposal. Available in the With AI expert and With NIS2 expert plans.
Up and running in four steps
From sign-up to your first classification in a day.
- 01
Enter your organisation detailsBasic company information, entered once and used across the system.
- 02
Choose your sectorThe system loads your sector package: risk templates, policy templates and incident scenarios.
- 03
Classify your entityThe classifier determines your category and builds a plan with deadlines.
- 04
Work for 30 days freeBuy whenever you are ready. Everything you do in the demo stays in the system.
A content package for your sector
You choose your sector when you create the account. The package is included in every plan and starts with the most pressing issue in your sector.
A real application or a pretty mock-up?
NIS2 tools are multiplying fast, and a screen can be generated in minutes today. Before you trust anyone with your audit evidence, ask the vendor these questions. Here are our answers.
- Do I work with real data from day one?
- Yes. Lite is a configuration of the live BCMLogic Next platform, not a separate prototype.
- Is the service certified for information security?
- Yes. The SaaS service is certified to ISO/IEC 27001.
- How does access control work?
- Roles and authentication based on Keycloak – the same security model as the full platform.
- Who develops and maintains the product?
- The BCMLogic team, which has been building risk and business continuity software since 2010.
- What if we grow?
- Moving to the full BCMLogic Next (business continuity, BIA, DORA and more) is a plan change, with no data migration.
- Can I see the price without a sales call?
- Yes. Full pricing is on our website.
Trust package
NIS2 requires you to assess your ICT suppliers – and your compliance software vendor is one of them. We share the documents your security team will ask for before you buy.
- ISO/IEC 27001 – SaaS service certificate to download
- Framework SLA – availability and response times before you buy
- Security testing – regular application testing
- Data protection – data processing agreement (Art. 28 GDPR), processing location
- Exit from the service – export all your data at any time
- Content from GRC experts – regulatory changes arrive as proposals and never overwrite your data
Lite or full BCMLogic Next?
It is the same platform. In the app you can see straight away what is in Lite and what is in the full version.
| Area | Next Lite | BCMLogic Next |
|---|---|---|
| Classifier, risk analysis, policies, incidents, ICT suppliers | Yes, simplified for NIS2 | Yes, in full |
| Business continuity (BCM, BIA) | — | Yes |
| DORA, AI Act, configurable reports, SSO, custom processes | — | Yes |
| Deployment model | SaaS | SaaS or agreed individually |
Rather not enter the data yourself?
NIS2 Quick Start: you provide the information in a questionnaire, we enter it into the system. Available with every plan.
- 01You fill in one questionnaire
- 02We move the data into Next Lite
- 03You start work on a ready account
Buy by 31 December 2026 and lock in your price for all of 2027
Standard pricing applies from 1 January. Start with a 30-day demo on your organisation’s data.
Frequently asked questions about Next Lite
Does Next Lite make us NIS2 compliant?
No software delivers compliance on its own. Next Lite guides you through the obligations, tracks deadlines and collects evidence that they are being met. Decisions and accountability, including those of the management body, stay with your organisation.
How much does NIS2 software cost in the Lite version?
From €150 net per month at the pre-sale price when you order by 31 December 2026 – the price is fixed for the whole of 2027. Plans differ in the level of support. See pricing.
Who is Next Lite for, and who needs the full BCMLogic Next?
Lite is for organisations that want to meet their NIS2 obligations without heavyweight GRC processes. Organisations that also need business continuity management, DORA, custom processes or SSO choose the full BCMLogic Next. Switching between versions requires no data migration.
Are there limits on users, risks or suppliers?
No. You pay a fixed monthly fee, and as many people as you need can use the system.
Does Next Lite submit incident reports to the authorities?
No. Reports are submitted through the channel of your national CSIRT or competent authority. Next Lite tracks the deadlines, keeps the log and prepares the report content for you to submit.
Will Next Lite help us prepare for a NIS2 audit?
Yes, on the evidence side: approved policies, risk analysis, supplier assessments and the incident log are in one place, with a change history. The audit itself is carried out by an independent auditor or the competent authority.
We are a public sector body. How do we buy?
We will prepare an offer and the trust package documents for your procurement procedure. Payment by bank transfer against an invoice.
What happens to our data after the 30-day demo?
If you buy, everything stays in the system. If not, you can export your data, and the account is deleted after the period set out in the terms of service.
Try Next Lite on your organisation’s data
Tell us your organisation and sector – we will set up the demo account with your sector’s content package. 30 days free, no payment details required.