TISAX results are issued as labels that reflect your assessment objectives, such as information security, data protection or prototype protection. A label is valid for three years. You share results with partners through the ENX Portal. Results are not public, so a partner cannot look you up without your permission.
Who runs it
ENX Association governs TISAX. The ISA catalogue is maintained by ENX and published by the VDA. Independent audit providers carry out the assessments. TISAX describes itself as a standardized approach to information security in the automotive industry, based on the ISA catalogue.
The process in order
- Register as a TISAX participant, with at least one assessment scope.
- Define scope: relevant locations, processes and protection needs.
- Choose an audit provider.
- Complete the self-assessment against the ISA catalogue.
- Undergo the external audit. Depth ranges from document review to detailed on-site inspection depending on the protection required.
- Receive labels matching your assessment objectives.
- Share results with chosen partners through the portal.
Scope is the whole game
A label covers a defined scope. If your scope is one site and a partner's work happens at another, the label may not help. Before registering, list where the partner's information will be handled and put those places in scope.
Three year validity
Labels are valid for three years per ENX. The handbook says that to remain a supplier you go through the process again. Plan the repeat, and treat the gap years as time to keep controls running rather than let them lapse.
Sharing and confidentiality
ENX states results are not publicly available and participants keep control. When a new customer asks, you grant access in the portal instead of emailing a report.
Common misunderstandings
A label is not a general security badge. It reflects the objectives you chose. Check which one a partner needs.
A self-assessment alone does not give a trusted label at the higher levels. See the assessment levels.
Quick check
Can anyone see my TISAX result?
No. ENX says results are not publicly available. You share them with partners through the portal.
How long does a label last?
Three years, after which you repeat the process.
Sources
Last reviewed: 19 October 2026.
