Coverage statementWritten · no call
Describe what you run. You receive a written statement: the numbered controls of CIR (EU) 2024/2690 Quanovio would evidence in your environment, the ones it would evidence partly, and the ones that are documentary and will stay that way.
Work it out yourself01 — 04
You do not need us to start. Four questions decide most of it, and you can answer all four from what you already know about your own environment. Send us the answers and we will tell you what they add up to.
A system is anything Quanovio would read from: a server, a workstation, a firewall, a cloud tenant. People are not counted and neither are events. Count the machines and the tenants, not the users — that number sets the price band, and a rough count is enough to get a real figure.
Almost everything does. Microsoft 365 and Google Workspace record sign-ins and sharing; servers and workstations record file changes and configuration; firewalls record what they let through. Write down which of these you run. Each one advances a specific set of numbered controls, and anything that already sends its records somewhere is easier again.
Roughly a third of the numbered controls of the implementing regulation are about what a system does, and those can be measured continuously. The rest are about what your organisation has decided — policies, roles, training, supplier terms. No product can evidence those by watching, and a product that claims otherwise is selling you a problem.
This is the part worth doing before anyone sells you anything. Multi-factor authentication cannot be evidenced without an identity source connected; privileged account use cannot be evidenced without the servers. Where you have no source, the honest report says so and leaves the line visible instead of blank.
The assistant on this page answers from the site itself — what Quanovio reads, which controls a given source advances, what the Directive actually requires, and what it costs. It replies in whatever language you write in. It cannot see your environment, so what it cannot do is tell you your own answer: that comes from the form below.
Five lines is enough, and a rough answer beats a precise one that took a month. It reaches the sales team at VDR Tech, who reply in writing with your coverage statement and a figure. There is nothing to pay and nothing to install to find out.
There is no checkout on this site and no card is taken anywhere. Every engagement is scoped and agreed with a person, because the price depends on what you actually run.
No call is required. The exchange is written, which is also how you will have it in front of you when someone else asks what was agreed.
