Your Register of Information, assembled and checked.
ResiPlan assembles the register from your suppliers, contracts and critical functions, then checks it before submission: mandatory fields, LEIs, cross-template references. Excel and CSV exports, plus a draft xBRL-CSV package to validate on your authority's test environment.
# xBRL-CSV ITS 2024/2956
b_05.01|id_provider|lei_provider|country|type
PRV-001|529900T8BM49AURSDO55|DE|cloud_iaas
PRV-002|213800WAVVOPS85N2205|FR|cloud_saas
PRV-003|7245006GZ4Z2X8N9F123|IE|datacenter
✓ 5 templates · 247 rows · 0 validation errors
→ Draft package — test it on your authority's homologation platformWhy your spreadsheet fails ITS 2024/2956
xBRL-CSV is not Excel
Submission is an xBRL-CSV package checked against the EBA validation rules (zero errors). A spreadsheet's 'Save as CSV' does not produce that package.
Inter-linked tables
A contract cited in B_07.01 must exist in B_02.01; a provider in B_02.02 must be declared in B_05.01. A spreadsheet cannot enforce these references.
Audit trail is mandatory
Supervisors ask 'who changed this CIF flag, when, and why?'. Spreadsheets store last-modified, not full history.
Annual = quarterly in practice
Material changes (new vendor, M&A, contract amendment) require register updates throughout the year. With a spreadsheet, every submission becomes a rebuild.
Spreadsheet vs ResiPlan: what changes
| Task | Excel + manual | ResiPlan |
|---|---|---|
| Build the initial register | Re-keyed from procurement, IT and continuity | Assembled from your suppliers, contracts and critical functions |
| xBRL-CSV package | Hand conversion, error-prone | Package generated for the covered templates, to validate on your authority's test tool |
| Cross-table validation | Trial & error, hours per cycle | Built-in checks, real-time |
| Annual update | Re-do most of it | The register follows your contracts as they change |
| Audit trail (per-cell history) | None | Per-cell, timestamped, attributed |
| Multi-user collaboration | Conflicts, version drift | Concurrent edits, role-based |
| Subcontracting | Manual notes | Recorded per contract (use, approval required) |
| Concentration risk view | Pivot tables, fragile | Live dashboard (provider/geo/tech) |
| Supervisor export | Filename guessing | One-click ZIP with the implemented templates |
← Scroll horizontally →
From contract list to a checked register in 5 steps
- 1
Import
Upload your existing service catalogue (Excel/CSV) or connect via API.
- 2
Auto-mapping
ResiPlan classifies each service into the implemented ITS 2024/2956 templates. Manual override for edge cases.
- 3
CIF flagging
The CIF Evaluation Module applies Article 3(22) materiality. Each row inherits its criticality flag.
- 4
Validation
Cross-table integrity rules run live. Errors are flagged inline, not at the submission stage.
- 5
Export
Excel and CSV exports, plus an xBRL-CSV ZIP package for the covered templates, to test on your authority's homologation platform before any filing.
5 of 15 ITS 2024/2956 templates implemented
Entities within the scope of the register
Contractual arrangements — specific information
ICT third-party service providers
Functions identification
Assessment of ICT services supporting critical or important functions
All 15 templates, their columns and a filled example: DORA register of information template (free Excel).
Built for the auditors who matter
What an auditor can check: cross-template validation, an audit trail on every change, and an export in the European Supervisory Authorities' format.
Current coverage: 5 of 15 templates. The others are on the roadmap; check them before you plan a submission to your supervisor.
Frequently asked questions
How long does setup take?
It depends mostly on the state of your data: contracts, provider LEIs, critical functions. You can import an existing Excel/CSV register instead of starting from scratch.
Does ResiPlan work with our existing GRC platform?
Through CSV or Excel import from any tool. There is no native connector for Archer or OneTrust.
What about NIS2?
The same data feeds NIS2 supply-chain security obligations. One source of truth.
Do you support multi-entity groups?
Yes. The consolidated group register merges each entity's register: every member appears once in B_01.02 (keyed by LEI) and a shared provider once in B_05.01, with conflicts reported.
How is the data hosted?
In the EU: database on Convex's EU deployment (AWS eu-west-1, Ireland), web servers at OVHcloud in France. A GDPR Art. 28 DPA with a DORA Art. 30 annex can be downloaded from our legal pages.
Can we white-label or embed the RoI?
Enterprise plan only. Contact sales.
What if the ITS schema changes?
We maintain the schema centrally. New version = automatic upgrade for all customers.
Stop fighting your spreadsheet. Prepare your submission calmly.
7 days free, full RoI module, no credit card.
Import your existing register on day one of the trial and see its validation errors.