Skip to content

Frequently asked questions

Frequently asked questions

Your questions before a first assessment

Do we have to give Ekera access to our information system?

Not for the initial assessment: it works from your documents and exports, with no direct access to your IT and no admin rights. To keep the map up to date, read-only connectors or a collector installed on your premises can be used afterwards, on terms agreed with your IT team.

Where do the euro figures come from?

From a calculation engine independent of the language model, which applies explicit rules to your data, including accounting data, and to displayed assumptions. They are estimates given as ranges, to discuss with your teams, not a guarantee of the actual cost of a future incident.

Is the NIS2 assessment a certification?

No. Ekera identifies the gaps against the ten Article 21 measures, organises the evidence and prepares a roadmap; it issues neither a certification nor a compliance certificate.

Does Ekera change our tools?

Only what you have decided, after approval by an authorised person and through the process agreed with you. Every write is logged, and Ekera never deletes anything.

Where is our data processed?

The AI models are open-weight models served in France; no customer data is sent to American services. Hosting is in Paris, as you choose: on the isolated platform, where data is kept separate for each customer and encrypted with a key specific to each customer, or on a dedicated instance, a server reserved for you alone, with its own keys and backups.

Does Ekera lower the cyber insurance premium?

No: Ekera promises neither a lower premium nor an insurability score, and takes no part in pricing or cover terms, which remain the insurer’s responsibility. No data from your company goes to an insurer without your written consent; you can share your report yourself with your broker or insurer.

Isolated platform or dedicated instance: which one to choose?

The isolated platform suits SMEs, mid-sized companies and partners: you use it on a self-service basis, your data is kept separate from other customers’ data and encrypted with your own key; at the end of the contract, it is made unreadable within 30 days. The dedicated instance is for regulated mid-sized companies, operators of vital importance, defence and customers who require it: a server reserved for you alone, in Paris, with its own keys and backups; at the end of the contract, the instance is destroyed and you receive an erasure certificate.

How much does a first assessment cost?

€3,500 excl. VAT on the isolated platform, €4,900 excl. VAT on a dedicated instance, setup included; subject to validation of the scope, prioritisation included. The monitoring subscription starts at €290 excl. VAT a month on the isolated platform and at €690 excl. VAT a month on a dedicated instance. The “tools included” option (CISO Assistant, Mercator and GLPI, installed and kept up to date), reserved for the dedicated instance, costs €150 excl. VAT a month. Installation on your premises or qualified hosting are quoted on request.

Request an assessment

A first 30-minute call: framing your need, the possible scope and the list of information needed for the assessment. The initial assessment starts from your documents and exports, with no direct access to your information system.

Read next