Besides the technical functions, the question of data sovereignty is becoming more and more important for many companies. This lesson explains how AIMdefense approaches this topic and what the term NIS2 readiness actually means.

Data sovereignty as a decision criterion

Anyone running a firewall also manages security-relevant data with it: rule sets, logs, network topologies. With AIMdefense there is no vendor cloud requirement for this. Operation and data storage stay in the company's own premises, not with a foreign cloud provider. That also takes the question of the US CLOUD Act off the table, because this US law can require American providers to hand over data regardless of where the data is physically stored. On top of that, the software is developed in Germany.

NIS2 and KRITIS: what that means

NIS2 is an EU directive on network and information security that brings new obligations for many mid-sized companies and for operators of critical infrastructure, known in Germany as KRITIS. These include things like risk management, mandatory reporting of security incidents, and evidence of protective measures taken. Whether a specific company falls under NIS2 and exactly which obligations apply is a legal question. This course does not provide legal advice. Anyone who wants to know whether and how NIS2 applies to their own company should clarify that with legal counsel.

Readiness instead of promises

AIMdefense supports companies in providing evidence of security measures, as required by NIS2, ISO 27001 or BSI guidelines. This support is called readiness. That means AIMdefense helps create and document the technical prerequisites. It does not mean that using AIMdefense alone makes a company NIS2-compliant or replaces a certification. This distinction matters and applies to every statement about compliance in this course.

Key point: NIS2 readiness means AIMdefense supports evidence gathering. It does not automatically make any company NIS2-compliant.

Key point: Whether a company falls under NIS2 is decided by legal counsel, not by this course.

Why this matters for AIMdefense

Data sovereignty and readiness are, for many of this course's target audiences, a main reason to look at AIMdefense in the first place. The next lesson shows where AIMdefense deliberately draws limits.