Security-critical products assessed by NCSA-FI at the Finnish Transport and Communications Agency (Traficom)
Various authorities and companies have a need to submit critical products (security-critical products) for independent assessment in relation to different services and networks. Such product include various boundary protection products, products related to the lifecycle management of information, such as those for overwriting and destroying data, as well as firewalls. Similarly, companies manufacturing security-critical products have shown increasing interest in submitting their products for assessed by the Finnish Transport and Communications Agency.
When implementing security-critical products, it is important to note that the assessment report may include additional conditions. When planning new systems or in unclear situations, it is recommended to contact Traficom´s NCSA function. For products evaluated to protect nationally classified information, key management solutions are also included in the assessment, either as part of the SAA´s system approval process or through separate procedures.
The list includes security-critical products assessed by Traficom´s Cyber Security Center, which can be used as part of systems that process classified information. The products on the list have been approved for protecting the confidentiality and integrity of information in high-threat environments.
Guidance on applying the products on the list to other threat levels in existing systems can be obtained from Traficom´s NCSA function if needed.
Latest changes:
18.12.2024: INSTA Gateway version 2.2.1 assessed. Older versions with expired approval have been removed from the list.
14.2.2025: Digia Linja yhdyskäytävä version 25.1.0 added to the list.
10.4.2025: Reaktor CDG version 3.1.1 and Navielektro L2 Data Diode added to the list.
6.6.2025: Digia Kevyt Linja yhdyskäytävä version 25.1.0 added to the list.
2.9.2025: Reaktor CDG version 3.2.1 added to the list.
27.2.2026: Navielektro enGuard CDS 1.5.0 added to the list.
Open all
Lifecycle management (overwriting products)
Product
Security classification level
Manufacturer
Type
Accredited versions
Validity
Conditions
PiceaServices Volume Eraser
Piceasoft Oy
Destruction of information with security classification level IV on Android and Apple iOS mobile devices
4.17.2.35
Until further notice (granted 21 December 2021)
A usage policy has been prepared for the product in connection with the assessment. For the approval to be valid, the product must be used in accordance with the policy.
YouWipe
AllWipe Oy
Destruction of information on magnetic hard disks and SSDs, and on Android and Apple iOS mobile devices (TL IV)
4.1.29
Until further notice (granted 15 June 2020)
A usage policy has been prepared for the product in connection with the assessment. For the approval to be valid, the product must be used in accordance with the policy.