Light checks
Internal data, internal users only.
Signs off
The app owner
NIS2 asks you to know your assets. Here are the apps your teams built with AI
Operations and engineering teams build applications with AI. NEKOD lists them, shows what data each one touches, and sends the ones that matter to your CISO for approval.
Backed and supported by
Rijksoverheid
Let your teams build, with approval you can show
Business teams keep their speed. You get one view, a clear approver for each application and a record of every decision.
- A list of every application your teams built, who owns it and what data it touches
- The asset-inventory question answered with a list, not a guess
- Your CISO approves only the applications that matter
- Tools connected to grid, network or plant OT get a closer look
Reports use your terms: NIS2, Asset inventory, OT, Essential service, ISO 27001, IEC 62443, ISO 27019. NEKOD checks applications against your own policy and does not certify against any framework.
Tiers follow criticality and data sensitivity
Energy and telecom start from a base of NIS2 and ISO 27001. Tiers follow criticality and data sensitivity, and your own rules sit on top.
Standard checks
Personal or confidential data, or external users.
Signs off
A security review
Full checks and a person
Customer-facing with personal data or decisions about people, or connected to grid, network or plant OT.
Signs off
The CISO
Signs off
The app owner
Signs off
A security review
Signs off
The CISO
Rules your policy can set
Rules an energy or telecom policy usually adds. Your policy decides which apply.
- An owner and a data classification for every application
- OT security rules for grid, network and plant tools
- Change control on grid or network tools
- Telecom security rules for network-facing applications