Articles in this section
-
Cyber security in Estonia
Cyber security guidance for companies operating in Estonia, written for English-speaking group finance, compliance and engineering teams. -
E-invoicing in Estonia
E-invoicing guidance for companies operating in Estonia, written for English-speaking group finance, compliance and engineering teams. -
The Estonian Cybersecurity Act and NIS2: what changed on 1 January 2026
Estonia's NIS2 transposition took effect on 1 January 2026, taking covered entities from about 3,500 to about 6,500. No management ban was adopted. -
E-invoicing in Estonia: what the law actually requires, and what it does not
Estonia has no general B2B e-invoicing mandate. Since 1 July 2025 a buyer registered as an e-invoice recipient can require one, and the seller must comply.
In practice
Contain the incident first, prove what happened second — inside the reporting window.
Reporting clocks run in hours, and management liability turns on whether controls were implemented and supervised, not merely approved. Barzel isolates credentials, cuts an agent off in one action and keeps signed receipts of what ran — the material a notification and a board report are written from.
In forceEstonian Cybersecurity Act (NIS2) in force since 1 January 2026
BarzelVault
The AI action firewall: decide what an agent may do before it does it.
- Approval thresholds and policy checks enforced before execution; human approvals that expire and escalate.
- Cryptographically signed audit receipts: trigger, inputs, policy version, approver, outcome.
- Credential isolation, spend and action limits, and an emergency kill switch.
Free tier: 10,000 calls a monthPaid plans from $199 a monthLive on MCPize
Barzel Central Gateway
The AI governance control plane: one inventory and one policy layer across every MCP server and agent.
- Registers and synchronises every tool; enforces identity, policy, region, cost and health per tool.
- Identity mapping through OIDC, Entra ID, Okta, SAML and SPIFFE, with credential brokerage.
- Trace and SIEM export (W3C trace context, OTLP) for the security team and the regulator.
Free tier: 1,000 calls a monthPaid plans from $10 a monthLive on MCPize
Enterprise: written quote by email within two business days. No sales call.
Markets in English
In local languages
- Polska
- Deutschland
- France
- Schweiz / Suisse
- United Kingdom
- United States
- Danmark
- Belgique / België
- Norge
- Slovensko
- Eesti
- Kenya