Pricing

Essential manages DORA. Growth automates it.

Transparent plans based on the size of your ICT provider portfolio and the automation you need. Enterprise adds multi-entity scale, governance and integrations.

Book a Demo

Essential

Get your DORA third-party risk program out of spreadsheets.

€299/month

50 ICT providers · 5 users

ICT provider inventory, service mapping and criticality
Vendor Qualification Register
Vendor assessments and vendor portal
Evidence management with expiry tracking
Risk register
Contract repository and basic Article 30 Gap Register
DORA Register of Information
Basic resilience testing programme
DORA Management Body Report
Audit trail and standard reports

Book a Demo

Growth

Enterprise

Scale DORA third-party risk across complex organizations.

Custom

Custom providers · custom users

Everything in Growth, plus:
Custom provider and user limits
SSO / SAML sign-in
SLA and dedicated support
Planned: multi-entity and group-level Register, SCIM, API, enterprise integrations, custom retention, workflows and reporting

Contact Sales

Comparison

Compare all features.

Every capability across Essential, Growth and Enterprise.

Capability	Essential · €299/mo	Growth · €799/mo	Enterprise · Custom
Plan limits
ICT providers	50	250	Custom
Users	5	25	Custom
ICT provider management
ICT provider inventory
ICT service mapping
Criticality classification
Critical/important function mapping
Countries and data locations
CSV / XLSX provider import
Vendor assessments
Vendor assessments
Assessment templates	Standard	Standard	Standard
Vendor self-service portal
Evidence requests
Assessment reminders
Custom questionnaires		Planned	Planned
Conditional questions		Planned	Planned
Evidence management
Evidence management
Evidence library
Expiration tracking
Evidence reminders
AI document extraction
Vendor qualification
Vendor Qualification Register
Qualification checklist and decisions
Immutable qualification history
Conditional approvals and review scheduling
Contracts and Article 30
Contract repository
Article 30 Gap Register	Basic	Advanced	Advanced
AI contract clause review
Human-review workflow and remediation
Resilience testing
Testing programme	Basic	Advanced	Advanced
Test findings linked to risks
Critical-function coverage analytics
Management body reporting
DORA Management Body Report
Versioning and approval workflow
Executive read-only view
Scheduled reports		Planned	Planned
Custom reporting
Risk management
Risk register
Risk scoring
Findings and remediation
Custom risk methodology		Planned	Planned
Approval workflows		Planned	Planned
DORA Register of Information
Register of Information
Register validation	Basic	Basic	Basic
Advanced Register validation		Planned	Planned
Completeness score
Missing-data detection
Data lineage
Register export
Multi-entity Register			Planned
Contracts
Contract management
Contract repository
Renewal tracking
AI contract review	Limited
DORA clause mapping
Contract gap detection
AI assistance
AI assessment review	Limited
AI findings	Limited
AI risk suggestions
AI evidence analysis	Limited
Human review workflow
ICT supply chain
Subcontractors	Basic
ICT supply-chain mapping
Concentration-risk views
Dashboards & reporting
Dashboard
DORA readiness score
Advanced analytics		Planned	Planned
Custom dashboards			Planned
Reports	Standard	Standard	Standard
Custom reporting			Planned
PDF export (print)
Excel / CSV exports	Planned	Planned	Planned
Scheduled reports		Planned	Planned
Governance & security
Audit trail
Advanced audit export		Planned	Planned
Custom retention			Planned
RBAC	4 roles	4 roles	4 roles
Advanced / custom RBAC			Planned
MFA
SSO / SAML
SCIM			Planned
Integrations & support
API access			Planned
Webhooks		Planned	Planned
Jira / ServiceNow			Planned
Microsoft Teams / Slack		Planned	Planned
Support	Email	Priority	Dedicated
Customer Success Manager
SLA

FAQ

Frequently asked questions

Can we import existing ICT providers?: Yes. Providers and ICT services can be imported from a structured file and enriched afterwards in the platform.
Can vendors answer assessments without creating a full account?: Yes. Vendors respond through a dedicated vendor portal link and only see their own assessment and evidence requests.
Is the DORA Register included?: Yes. The Register of Information, completeness scoring, missing-data detection, lineage and export are included in every plan. Growth and Enterprise add advanced validation.
Can we manage multiple legal entities?: Multi-entity Registers are on the Enterprise roadmap alongside SCIM, API access and custom retention; SSO/SAML sign-in is available today. Ask us for current timelines before you rely on any of them.
What happens if we exceed our provider or user limit?: Essential includes 50 ICT providers and 5 users, Growth includes 250 providers and 25 users. You can upgrade at any time, or agree custom limits on Enterprise.
Where is data hosted?: Customer data is hosted in the European Union.
Can we export our data?: Yes. Providers, assessments, evidence metadata, risks and the Register can be exported in structured formats.
Is SSO supported?: SSO / SAML is available on the Enterprise plan.
Can AI features be disabled?: Yes. AI assistance can be turned off at workspace level, and all AI suggestions remain subject to human review.

Get your ICT third-party risk under control.

See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.

Book a Demo Explore the Platform