Your DORA programme runs itself
Nobody creates a compliance task by hand anymore. The ResiPlan engine reads your data — critical functions, contracts, incidents, tests, register — derives the obligations, assigns them to the right people, chases them, and closes every task the moment the data is fixed.
Watch the engine work
Activation, task derivation, Art. 19 watchdog, self-resolution — the full cycle in 30 seconds.
01 · Activation
One click. The backlog appears.
Map providers of CIF-PAY-01
Complete Art. 30 clauses — ARR-014
Plan the TLPT of CIF-TRD-02
Activate. The backlog appears. It resolves itself.
One click creates the programme, its regulatory milestones and the full task set derived from your data.
- 1
1. Activate the programme
Milestones created (April 30 RoI submission, annual review), approval workflows and DORA test scenarios provisioned.
- 2
2. The engine derives
19 rules across the 5 pillars scan your data nightly: Art. 30 clauses, testing, TLPT, due diligence, concentration, register…
- 3
3. Everyone knows what to do
Tasks auto-assigned to owners, regulatory due dates computed, D-7 and overdue reminders, escalation, deep link to the screen.
- 4
4. It closes itself
Fix the data — the task closes on the next pass. The cockpit tracks resolution per pillar, auditor-ready.
The whole regulation, as self-managing tasks
Every DORA pillar is covered by dedicated rules — all that's left to humans are the decisions.
Third-party risk (Art. 28-30)
Missing Art. 30 clauses blocked before renewal (D-90), stale due diligence, missing exit strategies, Art. 29 concentration flagged per provider.
Incident reporting (Art. 17-23)
Classification assistant (Del. Reg. 2024/1772), hourly watchdog on the 24 h / 72 h / 1 month phases, authority notification template, incidents touching a critical function auto-flagged.
Resilience testing & TLPT (Art. 24-27)
Annual test per critical function, plan test schedules, 3-year TLPT cycle with one-click recording, exercise findings turned into auditable CAPAs.
Register of Information (Art. 31)
D-90 campaign, completeness and validation tasks, xBRL-CSV on the official EBA DORA 4.0 entry point, submission sign-off workflow.
Governance (Art. 5-16)
Policy review cycles, periodic reviews, DORA control testing, CAPA deadlines — every governance artefact chased automatically.
Reminders everywhere
In-app, email, Slack, Teams and n8n webhooks. Weekly digest to the programme owner. Escalation on critical overdue items.
A cockpit that proves compliance
What your board sees — and what you hand the auditor.
Resolution per pillar
Live share of detected obligations already resolved, programme health, overdue count, D-count to the RoI deadline.
Regulator bundle
One ZIP: programme state, full task history, TLPT positions, register snapshots, board-ready DORA report (PDF/Word) from your real maturity ratings.
Decisions, not chores
Approval workflows for major-incident sign-off, compliance exceptions and register submission — everything else is automatic.
Frequently asked questions
How are tasks created?
A rules engine continuously reads your critical functions, contracts, incidents, tests, policies and register of information, and derives the tasks DORA requires: missing Art. 30 clause, overdue annual test, unsubmitted Art. 19 report phase, RoI campaign at D-90… Each task is assigned to the entity owner, with a due date computed from the regulatory constraint and a deep link to the exact screen.
What happens when the data is fixed?
The task closes itself. Nobody grooms the backlog: tick the missing clause, record the test, submit the report — the orchestrator detects the resolution on its next pass and closes the task. Closing a task by hand is a durable dismissal: it will never be recreated.
How are Art. 19 deadlines (24 h / 72 h / 1 month) kept?
An hourly watchdog tracks every report phase of major incidents: alert on entering the 24 h window, 2 h before the deadline, then once overdue — in-app, by email and to Slack/Teams/n8n, with a ready-made authority notification template.
Is the Register of Information (Art. 31) included?
Yes. At D-90 before the annual deadline the programme opens the campaign automatically: completeness tasks, validation-error fixes, then submission. The xBRL-CSV export references the official EBA DORA 4.0 taxonomy entry point with the parameters.csv and FilingIndicators.csv companions.
And TLPT (Art. 26)?
Every critical function in TLPT scope is tracked on its 3-year cycle: automatic planning task, one-click test recording, and evidence exported in the regulator bundle.
Free your teams from DORA chores
Activate the programme, watch the backlog appear — then resolve itself. 7-day trial, no credit card.
Works with your existing data: critical functions, contracts, incidents, exercises, register of information.