Compliance

EU General Data Protection Regulation. SentriKat acts as data processor for SaaS customers; an on-premises deployment processes no personal data externally.

Swiss Federal Act on Data Protection. Equivalent safeguards to GDPR, applied to Swiss and EU residents.

Article 21 (risk-management measures, including vulnerability handling) is the organization's obligation. SentriKat produces signed NIS2 gap reports mapped to it, and reads the European vulnerability database that the EU cybersecurity agency runs under Article 12(2).

Digital Operational Resilience Act. The obligations bind regulated financial entities. SentriKat produces reports mapped to ICT risk management and to third-party register reporting.

Information Security Management System. No certification audit is booked yet.

Security, availability, and confidentiality Trust Services Criteria for the SaaS platform.

The Regulation binds manufacturers of software and connected products. Reporting of actively exploited vulnerabilities applies from 11 September 2026, the SBOM duty from 11 December 2027. SentriKat generates a CycloneDX SBOM for every release.

The catalogue of vulnerabilities confirmed as exploited. SentriKat reads it daily and ships signed compliance reports against it.

Relevant controls for vulnerability management (Req. 6, 11). SentriKat exports evidence in JSON and PDF with HMAC-SHA256 integrity.