If a partner names the TISAX objective or level, follow that. If nobody does, the ENX handbook recommends choosing objectives that imply AL 3, because the effort is not generally higher than AL 2 and it covers future requests. AL 2 can still be cheaper to assess, so weigh your own effort too.
Start with what is asked
Protection needs map one to one to assessment levels. The handbook lists objectives such as information with high or very high protection need, confidentiality levels, availability, prototype parts, vehicles, test vehicles, events, data and special data. Some map to AL 2 and others to AL 3. Partner contracts usually use these terms, so match your objective to the words in theirs.
When you choose alone
Reasons to aim for AL 3:
- the handbook says effort is not generally higher,
- it covers more future partner requests,
- fewer repeat assessments if a customer later asks for more.
Reasons to stay at AL 2:
- assessment fees are lower,
- your handling of sensitive information is limited,
- you want a first label quickly.
The handbook adds that AL 2 usually requires a more thorough self-assessment and documentation, so the total cost depends on your internal effort as much as audit fees.
A decision guide
- List current and likely partners. Ask what each will need in the next two years.
- Check whether any work touches prototype parts or vehicles. The handbook maps those to AL 3.
- Estimate internal effort for documentation at AL 2 and at AL 3. Ask your provider for a view.
- If the effort is close, choose the higher level.
- Consider AL 2.5, the remote variant, if travel or timing is hard. It is evaluated as AL 2 and can later be upgraded to AL 3.
A caution
Do not widen scope just to look thorough. Each added location needs evidence. Decide scope by where partner information will be handled.
After the decision
Register, complete the ISA self-assessment, and pick an auditor. The labels and validity post covers what comes next, and the levels explainer covers how each level works.
Safeguard's compliance and evidence automation can keep the policy and evidence files an assessor will ask for, which reduces internal effort at either level.
Quick check
Is AL 3 always more work than AL 2?
The handbook says effort is not generally higher, since AL 2 needs a more thorough self-assessment.
What if my partner names a level?
Follow the partner's requirement.
Sources
Last reviewed: 19 October 2026.
