← Back to the main pageData retention

A legal duty that finally gives something back

You have to retain traffic and location data anyway. With us, data retention runs on the same data as monitoring and attack detection – one system instead of two.

How we do it

The data never leaves your network

The operator is responsible for retained traffic and location data. For data retention we therefore recommend your own server in your rack.

  • The server is yours. Purchase or lease; the device is your asset.
  • Connected off the main path. The appliance sits on a mirror port. If it fails, your customers stay online.
  • A failed disk is never sent back. It stays with you, data included, so retained records never reach a third party.
  • Disks run in RAID. Losing one of them means neither an outage nor data loss.
  • Managed remotely. We deliver, connect and configure it, then manage it remotely. We handle warranty claims with the manufacturer for you.

Server details, minimum requirements and pricing are on the Technical solution page.

Experience

We have done this for years

At protectiONE Solution we have been building data retention for internet providers for years: probes and collectors, passive connection via taps and mirroring as well as active in-line deployment.

Requests from the police

We know what such a request looks like and what the system must be able to evidence, because we have dealt with it for years.

One dataset, two uses

An operator who already has probes and a collector in the network is sitting on data that reveals far more than who talked to whom and when. The same data serves traffic monitoring and attack detection.

Included in the Start plan

Data retention to the statutory minimum is part of the basic plan. Pricing

Export at any time

Routine export from the console is free and you know the price of a full archive export in advance. Export pricing

More topics

Technical solution

The same platform, the same features, the same dashboard. All that differs is where the system runs and who owns the hardware. Learn more →

NIS2

The Czech Cybersecurity Act (No. 264/2025) applies to every ISP regardless of size. The system walks you through what it asks of you – from determining your regime to the final report. Learn more →

DDoS protection

The system recognises an attack, names it and can stop it before it fills your link – via RTBH or FlowSpec at your upstream peer. Learn more →

Flow monitoring

Collection from NetFlow v9, IPFIX and port mirroring, with context from the ASN database and global threat sources. All on the same data, on one screen. Learn more →

Pricing and SLA

A subscription sized to your network, hardware sized to the disk array, and clearly stated prices for SLA and data export. Learn more →

Online walkthrough

We show you the system on your network, not on a generic demo

Forty-five minutes, online, no commitment. We go through what the platform would look like at your organisation — how many systems it would replace, how NIS2 reporting would work for you, and what it would mean for your team. Walkthroughs are one-to-one, so the answers are specific rather than generic.

Book a walkthrough Pricing and SLA