Can we import existing ICT providers?

Yes. Providers and ICT services can be imported from a structured file and enriched afterwards in the platform.

Can vendors answer assessments without creating a full account?

Yes. Vendors respond through a dedicated vendor portal link and only see their own assessment and evidence requests.

Is the DORA Register included?

Yes. The Register of Information, completeness scoring, missing-data detection, lineage and export are included in every plan, the difference between plans is scale and automation, never regulatory capability.

Can we manage multiple legal entities?

Multi-entity Registers are on the Enterprise roadmap alongside SCIM, API access and custom retention; SSO/SAML sign-in is available today. Ask us for current timelines before you rely on any of them.

What happens if we exceed our provider or user limit?

Essential includes 50 ICT providers and 5 users, Professional includes 100 providers and 15 users. You can change plan at any time, or agree custom limits on Enterprise.

Where is data hosted?

Customer data is hosted in the European Union.

Can we export our data?

Yes. Providers, assessments, evidence metadata, risks and the Register can be exported in structured formats.

SSO / SAML is available on the Enterprise plan.

Can AI features be disabled?

Yes. AI assistance can be turned off at workspace level, and all AI suggestions remain subject to human review.

Pricing

Essential runs DORA. Professional automates it.

Every plan runs a complete DORA programme. What changes is the size of your provider portfolio and how much of the work the platform does for you.

Start Free

Essential

For smaller regulated entities

€149 / month

Excluding VAT, added at checkout where it applies

Run your DORA programme properly.

50 ICT providers · 5 users

DORA Register of Information
ICT provider inventory, service mapping and criticality
Vendor Qualification Register
Vendor assessments and vendor portal
Evidence management with expiry tracking
Risk register
Article 30 contract gap register
Resilience testing programme
Management Body reporting
Audit trail, exports and retention controls

Start Free

Professional

Enterprise

For complex and multi-entity organisations

Custom

Scale it across a group.

Custom providers · custom users

Everything in Professional, plus:
Custom provider and user limits
SSO / SAML sign-in
SLA and dedicated support

Contact Sales

All plans run a complete DORA programme. 14-day free trial · no implementation fee · cancel any time.

A trial that ends does not lock you out. The workspace continues on Starter, keeping 5 ICT providers and 2 users, for as long as you want. Nothing you have entered is taken away, and nothing is charged.

Comparison

Compare all features.

Every capability across Essential, Professional and Enterprise.

Capability	Essential · €149/mo	Professional · €399/mo	Enterprise · Custom
Plan limits
ICT providers	50	250	Custom
Users	5	25	Custom
ICT provider management
ICT provider inventory
ICT service mapping
Criticality classification
Critical/important function mapping
Countries and data locations
CSV / XLSX provider import
Vendor assessments
Vendor assessments
Assessment templates	Standard	Standard	Standard
Vendor self-service portal
Evidence requests
Assessment reminders
Evidence management
Evidence management
Evidence library
Expiration tracking
Evidence reminders
AI document extraction
Vendor qualification
Vendor Qualification Register
Qualification checklist and decisions
Immutable qualification history
Conditional approvals and review scheduling
Contracts and Article 30
Contract repository
Article 30 Gap Register	Basic	Advanced	Advanced
AI contract clause review
Human-review workflow and remediation
Resilience testing
Testing programme	Basic	Advanced	Advanced
Test findings linked to risks
Critical-function coverage analytics
Management body reporting
DORA Management Body Report
Versioning and approval workflow
Executive read-only view
Custom reporting
Risk management
Risk register
Risk scoring
Findings and remediation
DORA Register of Information
Register of Information
Register validation	Basic	Basic	Basic
Completeness score
Missing-data detection
Data lineage
Register export
Contracts
Contract management
Contract repository
Renewal tracking
AI contract review	Limited
DORA clause mapping
Contract gap detection
AI assistance
AI assessment review	Limited
AI findings	Limited
AI risk suggestions
AI evidence analysis	Limited
Human review workflow
ICT supply chain
Subcontractors	Basic
ICT supply-chain mapping
Concentration-risk views
Dashboards & reporting
Dashboard
Coverage reporting: register, contracts, testing, evidence
Reports	Standard	Standard	Standard
PDF export (print)
Governance & security
Audit trail
RBAC	4 roles	4 roles	4 roles
MFA
SSO / SAML
Integrations & support
Support	Email	Priority	Dedicated
Customer Success Manager
SLA

FAQ

Frequently asked questions

Can we import existing ICT providers?: Yes. Providers and ICT services can be imported from a structured file and enriched afterwards in the platform.
Can vendors answer assessments without creating a full account?: Yes. Vendors respond through a dedicated vendor portal link and only see their own assessment and evidence requests.
Is the DORA Register included?: Yes. The Register of Information, completeness scoring, missing-data detection, lineage and export are included in every plan, the difference between plans is scale and automation, never regulatory capability.
Can we manage multiple legal entities?: Multi-entity Registers are on the Enterprise roadmap alongside SCIM, API access and custom retention; SSO/SAML sign-in is available today. Ask us for current timelines before you rely on any of them.
What happens if we exceed our provider or user limit?: Essential includes 50 ICT providers and 5 users, Professional includes 100 providers and 15 users. You can change plan at any time, or agree custom limits on Enterprise.
Where is data hosted?: Customer data is hosted in the European Union.
Can we export our data?: Yes. Providers, assessments, evidence metadata, risks and the Register can be exported in structured formats.
Is SSO supported?: SSO / SAML is available on the Enterprise plan.
Can AI features be disabled?: Yes. AI assistance can be turned off at workspace level, and all AI suggestions remain subject to human review.

Get your ICT third-party risk under control.

See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.

Try the Demo Explore the Platform