# Regulations S3M supports, article by article

Source: https://s3msecurity.com/compliance/
Last updated: 2026-11-12

S3M Security maps fourteen regulations and standards, from KVKK and Law No. 5651 to NIS2, PCI DSS and NIST CSF 2.0, to the products that support them. Each regulation page lists the article, what it asks, how S3M supports it and which product does, so partners and security teams can cite it in tenders and audits.

Fourteen regulations and standards across Türkiye, the EU, regulated sectors, the Gulf and the United States.

## What “supports” means

A dot means at least one article of that regulation lists the product on its page. “Supports” means the product provides a technical control, or evidence, for that article. Meeting a regulation also takes policies, processes and people, and only your auditor or the authority decides whether you comply.

## Compliance

- [KVKK](https://s3msecurity.com/compliance/kvkk/): How S3M products support KVKK Article 12 and the KVKK Personal Data Security Guide: access by role, activity records and network separation.
- [Law No. 5651](https://s3msecurity.com/compliance/law-5651/): How SpotGate supports Law No. 5651 and the mass use provider regulation: identifying users by SMS and keeping access records for two years.
- [Information Security Guide](https://s3msecurity.com/compliance/information-security-guide/): How S3M products support measures of Türkiye’s Information and Communication Security Guide: device discovery, 802.1X, guest networks and isolation.
- [GDPR](https://s3msecurity.com/compliance/gdpr/): How S3M products support GDPR security articles 5(1)(f), 32 and 33(5): identity-based network access, guest separation and audit-ready records.
- [NIS2](https://s3msecurity.com/compliance/nis2/): How S3M products support NIS2 Article 21(2) risk-management measures and Article 23 reporting with network access control and audit-ready records.
- [DORA](https://s3msecurity.com/compliance/dora/): How S3M products support DORA Articles 8, 9, 10 and 17: asset identification, automatic isolation, access limits, detection and incident records.
- [ISO/IEC 27001](https://s3msecurity.com/compliance/iso-27001/): How S3M products support ISO/IEC 27001:2022 Annex A controls for asset inventory, access control, endpoints, logging, monitoring and networks.
- [PCI DSS](https://s3msecurity.com/compliance/pci-dss/): How S3M products support PCI DSS v4.0.1 requirements 1.3, 1.4, 1.5, 7.2, 8.2, 10.2 and 12.5.1 with segmentation, device identity and audit-ready records.
- [HIPAA](https://s3msecurity.com/compliance/hipaa/): How S3M products support HIPAA Security Rule sections 164.308 and 164.312: access control, audit controls, activity review and entity authentication.
- [IEC 62443](https://s3msecurity.com/compliance/iec-62443/): How S3M products support IEC 62443-3-3 system requirements for identification, authorization, segmentation, audit events, monitoring and inventory.
- [NCA ECC](https://s3msecurity.com/compliance/nca-ecc/): How S3M products support Saudi NCA ECC-2:2024 controls for asset management, access, network segmentation, wireless, BYOD and event logs.
- [SAMA CSF](https://s3msecurity.com/compliance/sama-csf/): How S3M products support SAMA Cyber Security Framework sections 3.3.3, 3.3.5, 3.3.8, 3.3.10 and 3.3.14 for financial institutions in Saudi Arabia.
- [NIST CSF 2.0](https://s3msecurity.com/compliance/nist-csf/): How S3M products support NIST CSF 2.0 subcategories in Identify, Protect and Detect: hardware inventory, authentication, access and monitoring.
- [NIST SP 800-207](https://s3msecurity.com/compliance/nist-sp-800-207/): How S3M products support the zero trust tenets of NIST SP 800-207: per-session access, dynamic policy, posture monitoring and micro-segmentation.

## Frequently asked questions

### Does S3M make my organization compliant with these regulations?

No product can. S3M supports specific articles with technical controls and records, as each regulation page shows. Policies, processes and the final assessment remain with your organization, your auditor and your counsel.

### How were the articles chosen?

We read each regulation in its official text and listed only the articles that an S3M product supports with a capability described on this site. Each page shows the date we checked the official text.

### Can partners use these pages in tenders?

Yes. Each regulation page has a stable address and a Markdown version for documents. Quote the article table together with the legal note under it.