Supply Chain Security as a Service

Zurich, Switzerland - September 17, 2025

How Validato and CypSec strengthen human and digital security

Organizations in the DACH region currently face mounting pressure to secure their supply chains not only against technical threats but also against human-related risks. The EU's NIS2 directive, together with national regulations such as Germany's IT-SiG 2.0, Austria's NISG, and Switzerland's ISG, makes it clear that supply chain security must extend beyond technology. Companies are now expected to verify the integrity of employees, contractors, and partners who have access to sensitive systems and critical infrastructure.

This new focus on people as a potential point of vulnerability reflects a simple reality: even the strongest technical defenses can be undermined if the individuals operating within the system cannot be trusted. Insider threats, unvetted contractors, or poorly screened supplier staff can all expose organizations to risks that compliance frameworks are increasingly designed to prevent. The challenge for businesses is to integrate effective background verification into their risk management processes in a way that is both efficient and aligned with evolving legal requirements.

Validato has positioned itself at the center of this development. From its headquarters in Switzerland, the company delivers a digital platform that enables organizations to carry out fast, GDPR-compliant background checks across the entire employee lifecycle. What sets Validato apart is its ability to combine speed with thoroughness. Initial results can be available within hours, while more comprehensive validations are typically completed in a matter of days. This allows companies to screen new hires before they start, re-check existing staff during their employment, and extend the same scrutiny to contractors and supplier personnel who may be given access to critical systems. Validato embeds this process directly into HR and procurement workflows, ensuring that security teams can maintain oversight of the human supply chain without introducing unnecessary complexity.

"Supply chains are only as strong as the people who operate them. Combining thorough background verification with our partners' cyber defense expertise provides organizations the confidence to trust every link in their chain," said Reto Marti, Chief Operating Officer at Validato AG.

While background verification addresses the human element, technical resilience remains a cornerstone of supply chain security. This is where CypSec comes into play: CypSec has built a reputation as a defense-oriented cybersecurity partner, focusing on the protection of critical infrastructure and essential services. Its approach emphasizes resilience, active defense, and the principle that compliance should be embedded into the design of security systems rather than treated as an afterthought. Through advanced monitoring, zero-trust architectures, and secure communication platforms, CypSec helps organizations defend themselves against increasingly sophisticated cyber threats.

The partnership between Validato and CypSec brings these two dimensions together, combining rigorous background verification with advanced cyber defense to offer a holistic model of corporate security. For organizations in energy, finance, healthcare, telecommunications, and other essential sectors, this collaboration delivers an integrated solution that addresses both human and digital vulnerabilities. The result is a framework that not only meets the demands of NIS2 and national regulations but also helps businesses build lasting resilience in an environment where threats are constantly evolving.

Both companies stress that the value of their collaboration lies in uniting two worlds that are often treated separately. Validato ensures that organizations know exactly who is working for them and for their suppliers, while CypSec ensures that the technical systems those people interact with remain secure against attack. Together they enable companies to operate with confidence, knowing that both human integrity and digital resilience are safeguarded.

For security and compliance teams across the DACH region, this approach represents a future-ready model of supply chain assurance. It reflects a broader shift in thinking: that resilience in critical infrastructure is not achieved through technology or people alone, but through the alignment of both.

About Validato AG: Based in Zurich, Switzerland, Validato AG enables organizations to build trust across their supply chains by delivering fast, GDPR-compliant background checks for employees, contractors, and supplier staff. Its platform integrates with procurement and HR systems to screen individuals who have access to sensitive systems and critical infrastructure. For more information on Validato AG, visit validato.com.

Media Contact: Daria Fediay, Chief Executive Officer at CypSec - daria.fediay@cypsec.de.