Legal & Compliance Strategy 2026
Regulatory Analysis and Alignment
Document Version
MV-COMP-2026-v1.1
DORA Framework Analysis (EU 2022/2554)
MazeVault supports the ICT risk management requirements of Article 9 (protection and prevention). Automating the cryptographic lifecycle, access control and audit evidence helps regulated entities reduce operational risk.
Operational Resilience
CRDT-based multi-datacenter sync and standby gateways for disaster-recovery failover support business continuity under DORA.
Data Sovereignty
On-premise deployment keeps keys and secrets in your own infrastructure, with optional HSM/KMS protection for CA keys.
Regulatory Reporting
A hash-chained, tamper-evident audit log with SIEM streaming gives traceability for internal and external audits.
NIS2 & Cybersecurity Act (CZ)
Identification of technical measures required by NIS2. MazeVault helps address encryption of data at rest and the integrity of digital identities.
- Elimination of manual key export procedures
- Centralized lifecycle for multi-cloud deployments
- Automated compliance reporting (SIEM integration)
- Role-based access control for keys, certificates and secrets
Strategic Impact
"Automating the cryptographic lifecycle replaces manual key and certificate handling with policy-driven, auditable workflows."
Regulatory Alignment
"MazeVault is built to support the requirements of DORA, NIS2, ISO 27001 and GDPR. Keys can be protected by optional HSM/KMS integration, including FIPS 140-2 Level 3 validated HSMs."
MAZEVAULT s.r.o.
IČO: 24517194
DIČ: CZ24517194
Registered Seat: Kubelíkova 1258/43, Žižkov, 130 00 Prague 3
Registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File No. 441375
Authorization
Email: info@mazevault.com | Tel: +420 775 633 534
This document is electronically generated and valid without signature for presentation purposes.
Technical Data
Encryption at rest
Audit log
SIEM rule sets
Compliance reports
Regulatory Compliance
Audit trail and role-based access control
AES-256-GCM at rest, TLS in transit, optional HSM/KMS key protection, PCI DSS report
Encryption, access control and a GDPR compliance report
Control evidence and an ISO 27001 compliance report