CompanyEuropean Union
Quanovio produces continuous evidence against the numbered controls of CIR (EU) 2024/2690. Everything else about the company follows from that sentence, including what we deliberately cannot do.
Every connector requests read permissions only, and a credential returned with a write permission is refused at connection time rather than used carefully. Quanovio cannot change a configuration, disable an account or move a file. Your administrators remediate; the next collection records whether it worked.
This is in the contract, visible in the product, and enforced by the absence of the capability. Two of the three would not be enough.
Self-hosted deployments transmit nothing outside your network. Managed deployments run on infrastructure inside the European Union, never on a hyperscaler. Where administration is performed from outside the Union, the usual transfer instruments apply and are disclosed rather than assumed.
Quanovio is built on Wazuh, which is licensed under GPLv2. The corresponding source is offered on request and our own components run as separate processes. Quanovio is not affiliated with, endorsed by, or sponsored by the Wazuh project.
Current content, not licence enforcement. A self-hosted customer holds the software, and pretending otherwise would be theatre. What cannot be self-served is a mapping kept current against a moving regulation and a moving ruleset, which is what the subscription delivers.
Written enquiries are answered in writing, usually within a working day. No call is required at any stage.
hello@quanovio.com