Enterprise security and compliance

Know the boundary. See the evidence.

Packet captures can contain sensitive payload data. PacketSafari gives security and procurement teams a clear operating boundary, documented controls, and reviewable evidence.

Request a security review Review security boundary

Assurance snapshotCurrent posture

Deployment: Managed SaaS or customer infrastructureChoose the operating boundary before captures arrive.
Data and AI: Explicit routes per deployment profileStorage, retention, egress, and approved AI are defined for the selected path.
Access: Identity, authorization, and audit controlsMFA, roles, capture authorization, session controls, and security audit events.
Evidence: Reviewable posture and control materialPublic summaries here; deeper evidence is shared through appropriate diligence channels.

GDPR-aware operations, NIS2 and BSI/C5 reference alignment, CRA and EU AI Act readiness practices, and a SOC 2 readiness program. No formal certification or audit attestation is claimed.

Start with your review

The answers enterprise buyers need first.

Go directly to the control boundary or evidence set relevant to privacy, security, AI, or procurement.

01
Sensitive capture data
Understand data categories, deletion, retention, subprocessors, and transfer handling.
Review privacy posture
02
Deployment boundary
Compare SaaS and on-premises ownership for storage, identity, egress, recovery, and operations.
Compare security boundaries
03
AI governance
Review how AI-assisted features, providers, transparency, and guardrails are governed.
Review AI posture
04
Procurement evidence
Start a questionnaire, DPA, or deployment-specific assurance review with the right scope.
Request assurance material

Framework positions

Clear posture. Clear limits.

These pages state what PacketSafari can support today and where formal certification, attestation, or customer-specific legal review is still required.

Privacy program

GDPR

Covers capture data, account data, retention, deletion, data-subject workflows, subprocessors, and transfer review.

Privacy and security controls documentedReviewed July 24, 2026

Resilience baseline

NIS2

Governance, incident readiness, access control, supplier oversight, and continuity are maintained as enterprise review areas.

NIS2-aligned practicesReviewed July 24, 2026

Product security

Cyber Resilience Act

Secure development, vulnerability handling, software-component visibility, and supportability are part of the product program.

CRA-readiness practicesReviewed July 24, 2026

AI governance

EU AI Act

AI-assisted features, provider diligence, user transparency, routing boundaries, and operational guardrails are reviewed.

Governance controls documentedReviewed July 24, 2026

Cloud assurance

BSI / C5

Governance, continuity, and cloud-control expectations are organized for German enterprise security review.

Reference-framework alignmentReviewed July 24, 2026

Control readiness

SOC 2

Control and evidence material is being organized for enterprise review; no audit attestation is claimed.

Readiness programReviewed July 24, 2026

Diligence support

Move from posture to review.

Use the public assurance material as a starting point. Deployment-specific evidence, contractual detail, and questionnaires are handled with the appropriate scope.

SupportingReviewed July 24, 2026

Customer security and privacy documents

Public PacketSafari privacy, security, service-provider, deployment, AI, product-security, and independent-assurance information.

Open material

ExternalReviewed July 24, 2026

Service providers and data transfers

Which providers support PacketSafari SaaS, when optional providers are used, and how the provider set changes for on-premises deployments.