A legal duty that finally gives something back
You have to retain traffic and location data anyway. With us, data retention runs on the same data as monitoring and attack detection – one system instead of two.
The data never leaves your network
The operator is responsible for retained traffic and location data. For data retention we therefore recommend your own server in your rack.
- The server is yours. Purchase or lease; the device is your asset.
- Connected off the main path. The appliance sits on a mirror port. If it fails, your customers stay online.
- A failed disk is never sent back. It stays with you, data included, so retained records never reach a third party.
- Disks run in RAID. Losing one of them means neither an outage nor data loss.
- Managed remotely. We deliver, connect and configure it, then manage it remotely. We handle warranty claims with the manufacturer for you.
Server details, minimum requirements and pricing are on the Technical solution page.
We have done this for years
At protectiONE Solution we have been building data retention for internet providers for years: probes and collectors, passive connection via taps and mirroring as well as active in-line deployment.
Requests from the police
We know what such a request looks like and what the system must be able to evidence, because we have dealt with it for years.
One dataset, two uses
An operator who already has probes and a collector in the network is sitting on data that reveals far more than who talked to whom and when. The same data serves traffic monitoring and attack detection.
Included in the Start plan
Data retention to the statutory minimum is part of the basic plan. Pricing
Export at any time
Routine export from the console is free and you know the price of a full archive export in advance. Export pricing
Technical solution
The same platform, the same features, the same dashboard. All that differs is where the system runs and who owns the hardware. Learn more →
NIS2
The Czech Cybersecurity Act (No. 264/2025) applies to every ISP regardless of size. The system walks you through what it asks of you – from determining your regime to the final report. Learn more →
DDoS protection
The system recognises an attack, names it and can stop it before it fills your link – via RTBH or FlowSpec at your upstream peer. Learn more →
Flow monitoring
Collection from NetFlow v9, IPFIX and port mirroring, with context from the ASN database and global threat sources. All on the same data, on one screen. Learn more →
Pricing and SLA
A subscription sized to your network, hardware sized to the disk array, and clearly stated prices for SLA and data export. Learn more →
We show you the system on your network, not on a generic demo
Forty-five minutes, online, no commitment. We go through what the platform would look like at your organisation — how many systems it would replace, how NIS2 reporting would work for you, and what it would mean for your team. Walkthroughs are one-to-one, so the answers are specific rather than generic.