Data residency
All operational data lives on customer-controlled hardware. No mandatory cloud egress. No telemetry by default. Backups go to a customer-chosen destination — local filesystem on the appliance, or the customer's object storage.
Security & Compliance
Traceable OT evidence for NIS2 and IEC 62443 review.
Konseki connects ICS and SCADA evidence, security zones and conduits, investigations, decisions, and versioned changes without moving the data outside the customer environment.
Standards and regulatory support
These statements describe product capabilities, not certification or legal advice. Applicability and compliance remain specific to each organization, deployment, and jurisdiction.
Framework
Status
Notes
NIS2
Supports evidence workflows
Connects risk, incident, decision, reporting, and execution evidence while retaining source provenance and review history. Konseki supports an organization’s compliance work; it does not determine legal compliance.
IEC 62443
Supports assessment workflows
Represents OT assets, security zones, conduits, relationships, evidence, and changes for technical review. Konseki does not itself certify IEC 62443 conformance.
GDPR
Customer-controlled processing
On-premises deployment supports data residency and customer control. Compliance still depends on configuration, governance, lawful processing, and the organization’s wider controls.
ISO 27001
No certification claimed
Product capabilities may support an organization’s information-security controls, but Konseki does not currently claim ISO 27001 certification.
SOC 2
No attestation claimed
Konseki is customer-hosted and does not currently claim a SOC 2 attestation. Deployment responsibilities are clarified during security review.
Evidence and deployment posture
Versioned evidence trail
Graph changes, source provenance, investigations, reports, approvals, and execution outcomes remain reviewable as a connected history. Access controls govern who can retrieve, discuss, report, or act on that evidence.
Reviewable software stack
Konseki is built from established infrastructure components including Kubernetes, PostgreSQL, Cassandra, JanusGraph, Qdrant, Kafka, MinIO, Keycloak, Prometheus, and Grafana. Dependency and architecture review forms part of deployment assessment.
Airgap operation
The platform supports fully air-gapped operation. Installation and updates use offline bundles, and normal product operation does not require outbound internet access.
Deployment review process
A practical sequence for validating the architecture, evidence model, dependencies, and air-gapped operating requirements before a pilot.
STEP 1
Architecture and evidence walkthrough
Review data flow, trust boundaries, graph history, and the deployment topology relevant to the OT environment.
STEP 2
Component and dependency review
Security and platform teams examine the deployment components, dependency inventory, access model, and offline operating process.
STEP 3
On-premises proof of concept
Validate ingestion, investigation, evidence lineage, reporting, and operations on representative data inside the intended network boundary.
STEP 4
Customer assessment
Use documented pilot evidence to complete the organization’s technical, security, procurement, and compliance assessment.
For OT security, compliance, and procurement teams
Konseki supplies connected, reviewable evidence. Your organization remains responsible for determining applicable obligations, configuring controls, and demonstrating compliance to the relevant authority or assessor.
For data processing agreements, SBOMs, and detailed architecture documents: request a demo and we will route you to the security review track in parallel.
Review Konseki against your OT requirements.
Request a private architecture and evidence-model walkthrough focused on your NIS2, IEC 62443, network-segregation, and air-gap requirements.