Software that keeps watch, and documentation that stays compliant. Together they cover what a mature financial organisation or software company actually needs.
A GRC application: ten modules on a single signal engine. GDPR, DORA, NIS2, AI Act, ISO 27001, ISO 22301, ISO 31000, Risk Engine and Maturity, all on a shared data core.
A complete set of policies, procedures and analyses aligned with the standards. You are not buying a one-off folder of templates that will be out of date within a year ; this is living documentation that we update after real supervisory recommendations and share with all clients. See how it works.
General overview. The full document catalogue will be published soon; the current version is built on deployments in financial organisations and software houses.
Information security policies, 93 Annex A controls, Statement of Applicability (SoA), operational procedures.
Business continuity: Business Impact Analysis (BIA), BCP and DRP plans, scenarios, testing schedule.
Risk management methodology, risk register, ISO 27005 assessment, residual risk, treatment plans.
Secure software development policy, secure coding, code review, threat modelling, vulnerability management.
Response plan, roles and responsibilities, runbooks, reporting paths (the Polish DPA, CSIRT), lessons learned.
Data protection policy, records of processing activities, data processing agreements, DSR and breach handling procedures.
We update documents after supervisory recommendations and share them with all clients ; learn about our model. Want early access or a specific policy? Get in touch.
30 minutes, demo on real data. We will show you the platform and walk through the documentation package.