NIS2 · ISO/IEC 27001 · GDPR

Control access.Show the evidence.

Make network access a part of your compliance programme you can explain and demonstrate.

Apply access policies, follow connections and bring records into your reviews. SOVA connects everyday network operations with the evidence your security and compliance teams need.

From policy to proof

  1. 01
    Set the access policy

    Define who and what can connect.

  2. 02
    Follow the decision

    See the identity, access context and result.

  3. 03
    Bring the record to the review

    Use session records, audit history and reports.

Access controlTraceabilityReporting

Practical support for your programme

Three priorities. Connected to everyday operations.

NIS2

Know who gets in.

Support network access control and security risk management with policies and a clearer view of connected users and devices.

  • Apply authentication and access policies.
  • Review access decisions and session activity.
  • Investigate unexpected activity with network observations.

For your reviewAccess records and visibility to support your risk assessments and investigations.

About NIS2 ↗

ISO/IEC 27001

Make controls demonstrable.

Bring network access controls and operational records into your information security management system.

  • See which access policy was applied.
  • Follow administrative changes through audit history.
  • Use records and reports in internal reviews.

For your reviewEvidence to help assess how your chosen network access controls operate.

About ISO/IEC 27001 ↗

GDPR & UK GDPR

Be clear about network data.

Understand what the service processes, where cloud records are hosted and how responsibilities are defined.

  • Network traffic content stays in your network.
  • Cloud network records are hosted in Germany.
  • The DPA defines processing, retention and safeguards.

For your reviewA documented basis for evaluating the service in your own data protection programme.

Read the DPA →

Evidence you can use

Answer the questions
behind the audit.

Who connected? Where? When? What was the access decision? Use the available identity, session and policy records to explain what happened.

Export executive PDF reports and CSV files for review. Available detail depends on your configuration and the records supplied by your network equipment.

Take the product tour →

A clear division of responsibility

The controls and records.
The context behind them.

SOVA supports your compliance work; certification and legal compliance depend on your organisation's scope, policies, configuration and wider processes.

Identifiers such as usernames, MAC and IP addresses are processed for central management. The DPA also covers authorised access and international transfer safeguards; Germany hosting does not mean all processing occurs only in Germany.

See how the evidence comes together.

Explore SOVA with your own network and access policies.

Start free trial