ResiPlan or Formalize
Formalize is a well-funded Danish GRC vendor, available in French and Dutch. ResiPlan is a younger Belgian vendor specialised in continuity. If continuity is only part of your need, Formalize deserves your attention.
Formalize's strengths
What we acknowledge first.
Proof of trust
ISO 27001 (stated scope: its whistleblowing solutions), ISAE 3000 Type 2, a yearly penetration test, 99.75% availability with credits, and a published DORA addendum.
A workflow engine
A documented builder: steps, conditions, waits, task creation and a run log. We have no free-form equivalent.
Answering with no account
A questionnaire goes to a non-user by unique link, with adjustable authentication, and updates the process record.
A network and a trial
More than 8,000 organisations and more than 850 firms according to the vendor, and a 14-day trial with no card, with limits.
ResiPlan's strengths
Continuity as native objects
RTO, RPO and MTPD, eight plan families, BIA campaigns, methodology frozen at launch: nothing to build yourself.
Facilitated exercises
Triggers, roles, a scoring grid, decisions with consequences and a crisis game. Your corrective actions follow from them.
The crisis and its trail
Crisis room, chained decision log, runnable call tree, cost of recovery simulated over time.
Public prices and tooled CyFun
Prices on the website (€199–€2,999/month (billed yearly)), the arithmetic of the CyFun 2025 workbooks reproduced, and a workbook in the CCB format.
Line by line
For Formalize, according to its public pages. We have not tried its product.
| Topic | Formalize | ResiPlan |
|---|---|---|
| Continuity | Its product page announces BIA, plans and exercises. Of the 64 articles in its public help collection, one has this topic in its title: a BIA built with a scored questionnaire, custom fields and a workflow. | Dedicated screens for BIA, eight plan families, exercises and crisis. |
| RTO and MTPD | Recovery priorities and acceptable downtime are announced. RTO and MTPD do not appear in its BIA article or its public API. | Native RTO, RPO and MTPD, carried to the process when the BIA is approved. |
| Answering with no account | Unique link to a non-user, adjustable authentication. | For supplier questionnaires, yes. For the BIA, an account is still needed. |
| Automation | A documented workflow builder, criticality by formula and thresholds. | No free-form builder: fixed rules, scheduled reports and signed webhooks. |
| Exercises | Announced with results tracking; the mechanism is not documented in its public pages. | Facilitated exercises with triggers, roles and a scoring grid, and a crisis game. |
| Crisis and alerting | Email, Teams and Slack through workflows. Call tree and alert SMS are not documented in its public pages. | Crisis room, chained decision log, call tree. Email, Slack and Teams; SMS and voice not active yet. |
| Impact and cost | A dependency map is announced, with calculated fields. Simulation over time is not documented in its public pages. | Supplier failure simulation, processes affected and cost of recovery. |
| CyFun | A dedicated page. Maturity uses custom fields and the result is carried over to the CCB tool. | Calculation taken from the CyFun 2025 workbooks, workbook generated in the CCB format. |
| Data import | Documented import: 2,000 rows per file, processes included, preview and error correction. | BIA import with preview, unknown columns kept and rollback. |
| Price | On quotation, billed yearly. No public amount found. | €199–€2,999/month (billed yearly), 14-day trial. |
| Proof | ISO 27001, ISAE 3000, penetration test, published DORA addendum, customers and firms named on its website. No continuity reference found in its pages. | No certificate or public reference yet. |
| Hosting | AWS Frankfurt for data and backups. | European Union, sub-processors listed on our legal page. Some are American. |
Formalize may be enough if…
- Your priority is broad GRC (GDPR, ISO 27001, NIS2) with some continuity.
- Your procurement requires a vendor certificate, an availability commitment with credits or a published DORA addendum today.
- You want to design your own workflows.
- You work through a firm already trained on Formalize.
ResiPlan fits if…
- Continuity is the core of your need: BIA, plans, exercises, crisis.
- You must demonstrate your recovery objectives and keep a trail of your decisions.
- You prefer a ready-to-use method to a tool to configure.
- You want to know the price before talking to a salesperson.
What ResiPlan does not do today
- Answering the BIA with no account.
- A free-form workflow builder.
- Alerts by SMS and by call.
- A vendor certification and an availability commitment with credits.
Frequently asked questions
Is this comparison neutral?
No. ResiPlan wrote it, from Formalize's public pages, without trying its product. An absence only means the topic is not documented in those pages: only a trial settles it. If a line is wrong, write to contact@resiplan.eu and we will correct it.
What should I check during a Formalize trial?
Ask to see a recovery plan, an end-to-end exercise and an RTO calculation. Ask ResiPlan the same.
Is ResiPlan certified?
No, not today. If a vendor certificate is a condition of your purchase, Formalize presents one and we do not. Check that it covers the scope you are buying.