Is a smaller European security vendor a business continuity risk?

It can be, as any vendor can, so judge it by the exit plan rather than by size alone. A small vendor may be more exposed to funding, staffing or acquisition changes; a large one may change prices, drop a product or move data under another jurisdiction. Reduce the risk the same way in both cases: make sure you can export your data in a usable format at any time, keep your own copies of evidence you need for audits, insurance or regulators, know how long the vendor keeps running after notice, and decide in advance what you would replace it with. For a detection tool, also consider what happens if it stops: alerts stop, but your systems keep working, which is different from losing a firewall. NetSenX is operated by TriStiX S.L., a small company in Spain, and we say so openly. Its data processing agreement describes export and deletion; alerts can be exported through the API from the Pro plan and to a SIEMSIEM: security information and event management. A system that collects logs from many systems and looks for patterns across them. from the Business plan, and Enterprise can run on your own premises.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

← All 20 questions on Data residency and trustAll topics