ProveStack by Seculogik
FR Contact us

ProveStack Pilot phase

Prepare for the CRA, ISO 27001, GDPR and SOC 2, and keep the evidence

ProveStack brings four frameworks and your security operations (incidents, vulnerabilities, notifications) into one evidence record. It guides, prepares and keeps; your people decide. Every customer gets their own isolated instance, hosted in Europe.

Ask for a demo See pricing

Dedicated instance, OVHcloud VPS in EuropePilot phaseNot legal advice

provestack / dashboardFictional data
ProveStack compliance dashboard with fictional data: for the CRA and ISO/IEC 27001, how many requirements are accepted, awaiting review, rejected, expired or without evidence, each with its denominator.

01 Modules

Four frameworks and your operations, in one record

Every module writes to the same evidence record and journal. Each capability shows its real status.

Available in the pilot today On request set up with you In development not usable yet

  1. Cyber Resilience Act, for your products

    • AvailableCRA orientation per product, obligation catalogue with legal references and dates, a reasoned applicability decision for each.
    • AvailableInventory (releases, CycloneDX SBOMs), advisories, actively exploited vulnerabilities, reporting preparation.
    CRA requirements

  2. ISO/IEC 27001

    • AvailableAnnex A catalogue in our own words, Statement of Applicability, target and achieved maturity.
    ISO/IEC 27001

  3. GDPR

    • Available35 requirements, applicability questionnaire, record of processing activities.
    GDPR

  4. SOC 2, Type 1 and Type 2

    • AvailableReadiness on 61 criteria, observation-period coverage. The SOC 2 report is issued by an independent CPA firm, not by ProveStack.
    SOC 2

  5. Operations

    • AvailableIncidents: notification decisions and deadlines (CRA Article 14, GDPR Articles 33 and 34), made and reasoned by a person.
    • AvailableVulnerabilities: remediation deadlines, history, CRA reporting path. Notification centre, with optional e-mail.
    Operations

02 How it works

Learn, assess, collect, review, renew, report

The same path in every module. The dashboard counts with denominators, never as a compliance percentage.

  1. Learn

    A documentation-led journey, knowledge checks and guidance for every requirement.

  2. Assess

    Applicability questionnaires and reasoned decisions, recorded with author and date.

  3. Collect evidence

    Files stored with their SHA-256, write-once.

    sha256write-once

  4. Review

    Another person reviews each piece of evidence; nobody approves their own.

    reviewer ≠ author

  5. Renew

    Evidence expires; ProveStack flags what to renew before the deadline.

  6. Report

    An auditor packet, exported with the evidence, the decisions and what is still open.

03 The interface

The product as it works today

Screenshots of the running product, with fictional data.

iso 27001 / annex AFictional data
ISO/IEC 27001 module: Annex A filters and one control with its applicability, maturity and evidence status, next to its guidance.
ISO/IEC 27001: Annex A controls with applicability and maturity.
gdpr / requirementsFictional data
GDPR module: requirements listed by article and, for the record of processing activities, what to do, the evidence to expect and the proposed applicability decision.
GDPR: each requirement with its expected evidence and a reasoned decision.
incidents / INC-2026-001Fictional data
A fictional data-leak incident: category, personal data, detection and awareness times, and the handling steps.
A fictional incident, with the timestamps that start the legal clocks.
vulnerabilities / registerFictional data
Vulnerability register: open, overdue, due within 7 days and actively exploited counts, then the list with severity, status, exploitation, owner and deadline.
Vulnerability register with deadlines and active exploitation.

04 Delivery

Your instance, in Europe

No shared platform: every customer has an isolated instance that we deploy and update.

Pilot phase: deployment is proven on test environments; no customer instance is in production yet.

  • AvailableDedicated instance on an OVHcloud VPS in Europe, deployed and updated by ProveStack.
  • In developmentHigh availability: active and standby instances in two OVHcloud data centres, 99.9 % availability target.
  • In developmentEncrypted evidence vault with retention lock, and a cold archive for older evidence.
  • On requestOn-premises installation, on your own infrastructure.
  • On requestAI companion: Ask AI and GRC skills, cited and watermarked drafts reviewed by a person, never applied automatically; model served through Ollama.

05 Pricing

Three offers, one monthly price

Prices in euros excluding VAT, per month, with an annual commitment. Without commitment: +20 %.

Standard

All four modules and operations, on your dedicated instance in Europe.

€390 / month excl. VAT

annual commitmentwithout commitment: €468 / month excl. VATup to 25 users

  • AvailableCyber Resilience Act, ISO/IEC 27001, GDPR, SOC 2 Type 1 and Type 2 readiness
  • AvailableIncidents, vulnerabilities, notifications, learning journey, auditor packet
  • AvailableEvidence files stored with their SHA-256, write-once
  • AvailableDedicated, isolated instance on an OVHcloud VPS in Europe, deployed and updated by ProveStack
  • In developmentBuilt-in high availability: active and standby instances in two OVHcloud data centres in Europe, database replication, automatic failover; 99.9 % availability target (a target, not a contractual SLA)
  • In developmentEncrypted, immutable evidence vault: write-once, retention lock, SHA-256 verified on every read; 100 GB of active storage included
  • In development500 GB cold archive included for older and superseded evidence, restored on request within hours (not instantly)
  • Up to 25 users
  • E-mail support
Ask for this offer

With AI

Everything in Standard, plus the AI companion to prepare drafts.

€590 / month excl. VAT

annual commitmentwithout commitment: €708 / month excl. VATup to 25 users

  • Everything in Standard
  • On requestAI companion: Ask AI and GRC skills. Cited, watermarked drafts reviewed by a person, never applied automatically
  • On requestHosted model, served through Ollama
  • Up to 25 users
  • E-mail support
Ask for this offer

On-premises

ProveStack installed on your own infrastructure.

On quote

  • On requestInstallation on your infrastructure, local AI model possible
  • Annual licence
  • Signed images
  • Support
Ask for this offer

Offer details, storage options and FAQ

06 News and resources

Regulatory watch, product news and articles

Nothing published yet.

All newsRSS feed

See ProveStack on your own questions

Write to us for a demo or a pilot. The public demo shows the CRA journey today, with fictional data.

Contact us Try the public demo