EU Sovereignty Commitment
Nisura exists because European organisations need cyber risk quantified on European terms — under European law, with data that never has to leave the Union.
EU-resident by design
Your data is stored and processed within the European Union. No routine transfers to third countries.
Built for NIS2, DORA & GDPR
The platform models European regulatory liability natively — not retrofitted from a US cost template.
European operator
Nisura is built and operated by OnDuty AI Solutions GmbH, headquartered in Wien, Austria.
Data minimisation
The simulator needs no network access or credentials. You share only the inputs you choose.
Data residency
All personal data and customer inputs are hosted within the EU (Vienna, Austria). We do not transfer personal data outside the EU/EEA unless a valid adequacy decision or Chapter V GDPR safeguard applies, and we will always tell you if that changes.
Regulatory alignment
Nisura's calculation engine is native to the Eurozone: localized labour indices, regional incident-response costs, and statutory fine caps under NIS2, DORA and GDPR. Cost baselines are informed by the ENISA Threat Landscape.
Security posture
Our stated posture is: ISO 27001 · DSGVO / GDPR · EU-Hosting (Wien). Full security and compliance documentation — certifications, sub-processors, and controls — is available in our Trust Center.
Questions
For due-diligence or procurement questions about our data handling, see our Privacy Policy or contact us.