Compliance navigator: ISO 27001, ENS, PCI DSS, NIS2, DORA and GDPR

See which controls of your certification or regulation Noraina products and services support, and the audit evidence each one produces.

Which certification are you working towards?

Pick one to see which of its controls our services support, and the evidence you get for your auditor.

Across the frameworks you selected
Service	ISO 27001	ENS	PCI DSS	NIS2	DORA	GDPR
Efficient Cloud Instances with replicationWorkloads run in one of our five data centres and replicate continuously to another of your choice, ready to fail over.	5.295.308.14	op.cont.2op.cont.3op.cont.4	–	21.2.c	art.11art.12	32.1.b32.1.c
Efficient Cloud BackupEncrypted backups outside your cloud provider, in Wasabi object storage with Object Lock (WORM).	8.138.245.33	mp.info.6	–	21.2.c21.2.h	art.12	32.1.a32.1.c
Efficient Cloud DNS (NorainaDNS)Your domains are served from a global anycast network with health-checked failover between origins, and on Enterprise from a redundant multi-cloud network as well.	5.295.308.14	op.cont.2op.cont.4mp.s.4	–	21.2.c	art.11	32.1.b32.1.c
Complete edge loggingCloudflare Enterprise Logpush keeps every request, security event and access decision, for as long as you need.	8.158.16	op.exp.8op.mon.3	10.2.110.5.1	21.2.b	art.10	art.33
Application and DDoS protectionCloudflare WAF, bot management, API protection and DDoS mitigation in front of every public application.	8.208.26	mp.s.2mp.s.4op.mon.1	4.2.16.4.26.4.311.6.1	21.2.e	art.9	32.1.b
Zero Trust access and data protectionCloudflare One verifies every user and device, filters web traffic and stops sensitive data from leaving.	5.158.58.128.228.23	op.acc.2op.acc.4op.acc.6mp.s.3mp.com.1	1.3.17.2.18.4.2	21.2.i21.2.j	art.9	32.1.b

Our services support these controls and produce evidence for them. Certification depends on your whole management system and is granted by an accredited auditor, not by a supplier.

European by design

For many regulated companies, where data lives and who runs the platform matter as much as any control. Noraina is a European company, our platform runs in European data centres, and your data stays in the site you choose.

Some of our services are built on providers headquartered outside Europe: Cloudflare, AWS, Microsoft Azure, Google Cloud and Wasabi. Each page says which one a service uses, and our privacy policy explains the safeguards for any transfer.

A stack with no provider outside Europe

When your requirement is that every provider in the chain is European, we build it from our platform and our partner Bunny.net: servers in our EU data centres, with Bunny.net's CDN and Shield web application firewall in front.

Reference architecture

Noraina Ltd is an Irish company, registered in Cork. Our contracts are under Irish law.
Our platform runs in five data centres in Europe, operated by our own team: Dublin, Paris (two sites) and Barcelona inside the EU, and London in the UK.
Your data stays where you put it. Our standard contract says we never transfer, store or process customer data outside the region you designate without your explicit consent.
Efficient Cloud Backup stores its encrypted copies in the EU, with a key that neither we nor the storage provider know.
We peer locally at INEX (Dublin), LINX (London) and France-IX (Paris).
Our services support controls in European regulations, ENS, NIS2, DORA and GDPR, as well as ISO 27001, and our own operations are ISO 27001 certified.

All frameworks

Tell us what you are preparing for

We reply with the controls we can cover, what stays on your side, and a realistic timeline.