Terms and conditions of use

The Site is owned and operated by BITUP TECHNOLOGY S.R.L., a Romanian company with its registered office in Câmpia Turzii, Cluj County, registered with the Trade Register under no. J12/1556/2020, tax identification no. RO42613248, e-mail [email protected], phone +40 757 150 894 (“BitUp”, “we”). NIS2 Advisory is the name under which BitUp offers preparation services for compliance with Romanian Government Emergency Ordinance no. 155/2024 establishing a framework for the cybersecurity of networks and information systems in the national civil cyberspace, approved with amendments by Law no. 124/2025 (“OUG 155/2024”).

These terms apply to anyone who accesses the Site (“User”, “you”). Consulting and preparation services as such are contracted separately, under a written agreement whose provisions prevail over these terms in everything concerning those services. Nothing in this document is an offer to contract.

BitUp is not affiliated with, authorised by or endorsed by the National Cyber Security Directorate (“DNSC”) or any other public authority. References to DNSC, the NIS2@RO platform, the ENIRE@RO and EVAL_MMS tools or to legislation are for information only.

The Site offers, free of charge: (a) general information on the obligations arising from OUG 155/2024 and the acts issued under it, presented for people without legal training; (b) three indicative tools — checking whether you fall within scope (“Does NIS2 apply to me?”), estimating the assurance level (“Which level will I have?”) and presenting the sequence of obligations and deadlines (“The NIS2 roadmap”); (c) the possibility to contact us and book an introductory call.

The information and tools are general and indicative. They are not legal, tax or other advice, do not replace an analysis of an entity’s specific situation and do not create any advisory or agency relationship between you and BitUp. Whether an entity is essential or important is decided exclusively by DNSC, through a decision, under art. 18 of OUG 155/2024; the assurance level results from the risk assessment validated by DNSC.

Each tool has limits you should know before relying on its result:

• “Does NIS2 apply to me?” queries, through our server, public services of the National Agency for Fiscal Administration (ANAF) (the taxpayer register and the indicators of the financial statements filed). The data may be incomplete, out of date or reported for a previous financial year; the NACE code does not always reflect actual activities. The result depends on the data you enter or confirm, on your answers regarding the group and the special cases, and on our reading of the legal texts as of the tool’s last update.
• “Which level will I have?” uses the standard values from the risk level assessment tool made available by DNSC, in the version indicated on the page. The official score is the one calculated and submitted by the entity through DNSC’s channels and validated by DNSC; standard values may be changed by the entity with justification and may differ between versions of the official tool.
• “The NIS2 roadmap” presents the obligations and deadlines from OUG 155/2024 and DNSC orders as of the last update, with the article cited. Legislation and the authorities’ practice may change; we update the content with reasonable diligence, without guaranteeing completeness or currency at any given moment.

You remain solely responsible for verifying the classification, level and deadlines applicable to your entity, directly with DNSC or with a legal adviser, and for the decisions you take. Tool results are not stored on our servers in association with you (see the Privacy policy).

You may use the Site to inform yourself or the entity you represent. You may not:

• automatically extract the Site’s content or data (scraping), query the tools or the programming interface serving them automatically or in bulk, or circumvent technical access limits;
• use the tools to collect or profile data about third parties for purposes contrary to the law or their rights;
• reproduce, distribute or modify the Site’s content beyond the limits of quotation without our written consent;
• attempt to affect the operation or security of the Site or related systems.

We reserve the right to limit or block access to the Site or the tools in case of breach of these rules, without prior notice, and to report to the competent authorities any facts that may constitute criminal offences.

The Site’s content — texts, structure, tools, code, graphics, the “NIS2 Advisory” mark and visual identity elements — is the property of BitUp or is used by BitUp with due right, and is protected by copyright and industrial property legislation. The legislation cited is public information, reproduced within the limits of the law.

CyberFundamentals (CyFun®) is a framework developed by the Centre for Cybersecurity Belgium; the names DNSC, NIS2@RO, ENIRE@RO and EVAL_MMS belong to the National Cyber Security Directorate. We mention them only to identify the acts and tools we refer to.

Through the form on the Site or the booking calendar you may request a free introductory call of about 30 minutes. Sending the form or booking creates no obligation for either party; the call is not advice and does not replace a contract. The data sent is processed under the Privacy policy.

Booking takes place on a third-party platform (Calendly), in a separate tab, under its own terms and privacy policy.

The Site and the tools are provided “as is” and “as available”. We do not guarantee uninterrupted or error-free operation, the availability of the third-party services we query (ANAF) or link to (DNSC, Calendly), or that the tool results match your situation exactly.

To the extent permitted by law, BitUp is not liable for: decisions taken solely on the basis of information or results on the Site; errors or omissions in data provided by third-party sources; loss of profit, of opportunity or other indirect damage; the consequences of your failure to comply with your legal obligations, including the deadlines under OUG 155/2024.

Nothing in this document excludes or limits liability that cannot be excluded or limited under the law, including liability for wilful misconduct or gross negligence, and nothing affects the rights the law grants you as a consumer, if you use the Site in that capacity.

The Site contains links to third-party websites (dnsc.ro, platformanis2.ro, anaf.ro, legislatie.just.ro, calendly.com, bitup.ro and others). We do not control and are not responsible for their content, availability or practices; you access them at your own risk and under the conditions each sets.

How we process personal data is described in the Privacy policy, and how we use cookies and similar technologies in the Cookie policy. Both form part of these terms.

We may change these terms to reflect changes in legislation, the Site or the services. The updated version is published on this page, with its date. Using the Site after publication means accepting the new version; if you do not agree, please stop using the Site.

These terms are governed by Romanian law. We will first try to settle any dispute related to the use of the Site amicably, at the contact address below. Failing that, disputes with professionals fall under the jurisdiction of the courts at BitUp’s registered office.

If you use the Site as a consumer, you keep the rights granted by consumer protection legislation, including the right to address the National Authority for Consumer Protection (anpc.ro) or the court of your domicile, and to use the European online dispute resolution platform (ec.europa.eu/consumers/odr).

In case of discrepancy between the Romanian and the English version of these terms, the Romanian version prevails.

For any question about these terms, write to [email protected] or to the registered office address in article 1.