The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read
Regulatory evidence
Kentik is the network intelligence platform for modern infrastructure
For each regulation, how many of the requirements it places on your vendors Kentik Technologies’s public evidence reaches. Open one for every item with its date and source.
What the vendor lists, typed; public items can be read now, the rest are available on request.
10 documents listed on Kentik Technologies’s trust centre
trust.kentik.comAnswers the vendor publishes to questions buyers ask, quoted with the link to where it says so.
Where data is hosted or processed
Where are your staff located?
“Largely in the US (roughly 70-80% of staff), however, we're an international company & maintain a presence in the EU. In addition to the US and EEA countries, we have a modest number of technical staff in the following countries: - Canada - Brazil - Australia - Kosovo - Malaysia If you have concerns or regulatory requirements around data access from specific countries, please let our Sales staff know so we can tak...”
Regions named: EU, US, Canada, Australia, Brazilas of 21 Sep 2026Source
Encryption
Do you encrypt data at rest?
“Yes - all data is encrypted at rest using AES-256 or better. We use self-encrypting hard drives that support OPAL 2.0 commands, so encryption keys are never directly accessible to our staff.”
as of 21 Sep 2026Source
Encryption
Do you encrypt data in transit?
“Yes - all Kentik-controlled data is encrypted in transit across public networks using TLS 1.2 or better (TLS 1.3 is supported). This includes access to our SaaS platform, API, and similar resources. The Kentik Platform ingests information from our customers, including netflow, SNMP, streaming telemetry, and similar data sent to our systems. We make sure to provide multiple mechanisms for customers to encrypt data...”
as of 21 Sep 2026Source
Incident and breach notification
Do you notify customers in the event of a data breach? How quickly?
“Yes, customer notification is included as a component of incident response. We notify customers consistent with the language in our signed DPAs & consistent with relevant data protection laws. We typically agree on notification within a maximum of 72 hours of a confirmed data breach.”
as of 21 Sep 2026Source
Data retention and deletion
How long do you retain data? Can this be modified?
“We keep data in alignment with retention periods specified in our signed contracts. Please see https://www.kentik.com/product/plans-pricing/ for the default retention periods available in our predefined plan tiers. Generally speaking, we agree to store full resolution network log data for 45 days, with derived statistics saved for 120 days. Data for our NMS product is typically stored for a year. Certain informati...”
as of 21 Sep 2026Source
Data retention and deletion
Can we retain copies of our data when wrapping up our Kentik contract?
“Yes, we provide customers with several means to retain copies of their data at the conclusion of services; please see https://www.kentik.com/pdfs/KentikCustomerDataExtractionOptions.pdf for more information about how this is done, or reach out to Support or Customer Success departments to get help with the process.”
as of 21 Sep 2026Source
Data retention and deletion
Are LLM providers allowed to use or retain customer data for their own purposes?
“Never - we ensure that any customer data is NOT allowed to be used for AI training, and we ensure that such data is promptly deleted from the provider's systems once the query is resolved and any anti-abuse or security review periods have elapsed.”
as of 21 Sep 2026Source
Solomon Amos · 7 Sep 2026 · 10 min read
CertReports Research · 18 Sep 2026 · 12 min read
This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.