Framework · Automotive
TISAX
Customers in the automotive supply chain may ask suppliers for a TISAX label. We help you prepare for the assessment; the assessment itself is carried out by an approved audit provider.
The framework explained
What does TISAX mean in the automotive supply chain?
What is it?
TISAX stands for Trusted Information Security Assessment Exchange. It is the system managed by ENX that organisations use to share information security assessments with partners in the automotive supply chain. The assessment is based on the VDA ISA questionnaire.
Who is it for?
TISAX becomes relevant when an automotive customer asks for a specific label. The required protection may cover information security, prototypes or data protection. Agree with your customer which locations, activities and assessment objectives are needed – the requested assessment level alone does not define the scope.
Why take action?
A customer may require a label as a condition for working together or for access to sensitive information. TISAX is an industry assessment system; the need usually stems from customer agreements. By starting early, you can address gaps before the assessment.
Where do you start?
- Confirm the customer request, scope and assessment objectives.
- Carry out a self-assessment and strengthen your measures and evidence.
- Register with ENX and choose an approved audit provider for the assessment.
- Share the results with your chosen partners and keep the measures in place. TISAX labels are usually valid for three years.
Public sources · content checked on 5 October 2026
Preparation
Ready for your assessment
We work with the questionnaire the TISAX assessment is based on.
- Gap analysis against the requirements.
- Preparation of measures and evidence.
- Support all the way to the assessment.
Frameworks
Explore the other frameworks
Each framework has its own scope and evidence requirements. Often, several apply at once.
Getting ready for a TISAX assessment?
Tell us what your automotive customer is asking for and which locations and activities are involved. Together we determine the scope and the right preparation.