Run — and monetize — GRC for all your clients, one console
The platform for GRC consultancies, MSSPs and integrators: strictly isolated clients, a reusable methodology pushed in one click, a portfolio cockpit that surfaces your next engagements, deliverables under your brand and a commission-based partner program.
How it works
One operator account, N isolated client tenants, a reusable methodology — and a portfolio that works for you.
- 1
One operator account
Your firm opens a single operator workspace — your control room.
- 2
N isolated client tenants
Each client is a separate organization — own data, roles and audit trail.
- 3
Define once, push to all
Frameworks, crosswalks and templates curated once, applied to any client in one click.
- 4
Run the portfolio
Switch client in a single login, benchmark them, and spot where to sell the next engagement.
Many clients, without duplicating or mixing
Built to run a portfolio: strictly separated data, a shared license, controlled consumption.
Fully isolated tenants
Each client stays a separate tenant: own data, roles and audit trail. Defense-in-depth isolation, re-asserted on every read.
One operator license
Buy each module ONCE at the operator price — it is shared across every managed client. One bill, to you.
Switch in a single login
A switcher moves you between clients without re-authenticating. Your consultants only ever see your portfolio.
Capped usage per client
AI credits and messaging (SMS/WhatsApp/voice) metered and hard-capped per client, with a free quarterly sandbox allowance.
Define once, deploy to every client
Your methodology becomes an asset: frameworks, crosswalks and templates pushed in one click, not rewritten each engagement.
Push your frameworks in one click
Curate frameworks, control catalogs and crosswalks once, then apply them to any managed client — as drafts, ready to review.
Assess once, comply many
The ISO 27001 + NIS2 + CYRA pack is cross-mapped: a single ISO assessment auto-reflects into NIS2 and CYRA posture.
Ready-made template libraries
~98 BCMS process templates, ~74 public-sector plan templates, ISMS policy templates and communication templates.
5 country packs
France, Belgium, Switzerland, INSARAG, SENDAI: hierarchies, roles, plan types, ICS models and legal citations adapted.
One-click prospect demo
The demo provisioner spins up clients with varied maturity profiles — your walkthrough tells a real story, instantly.
Guided training included
Per-module guided journeys help your consultants — and your clients — get up to speed on the platform.
Your portfolio surfaces your next engagements
The benchmark is built on averages and gaps within YOUR portfolio: you see who is ahead, who is falling behind, and where to focus — and sell — the next engagement.
What you hand the client, under your brand
Client-ready deliverables generated from the real data — no more manual formatting for every report.
White-label GAP report → PDF
Client-ready multi-framework report, branded with the client name (logo, colors) — one-click browser print.
Continuity plans → PDF & Word
Export plans (BCP, DRP…) to PDF and DOCX, ready to hand over or fold into your deliverables.
Auditor evidence bundle → ZIP
All BCMS/risk/compliance evidence formatted for the external auditor, filterable ISO 22301 / DORA / NIS2 / CRA.
DORA Register of Information → Excel/CSV
RoI (Art. 31) assembly and validation, Excel or CSV package export. (Official XBRL package coming.)
Board-ready DORA/NIS2 gap synthesis
Gap matrix and synthesis ready for the board, generated as PDF, DOCX and Excel.
Reports under your brand
Configurable logo, primary/secondary colors, company name and footer per report.
Turn ResiPlan into a revenue line
Beyond the engagement: commission on your clients, marketplace resale, trials provisioned from your own site.
Commission on every client
Earn a commission on the clients you bring — paid by transfer or netted against your operator license.
Dual attribution
Operator filiation (a client paying its own subscription) + referral codes (?ref=CODE) captured at signup.
Contractual white-label
The partner contract includes "reports under the partner's brand" — white-labelling is written into the deal.
Client trials from your own site
Provision paid trials from your showcase: a dedicated private org, 7-day all-modules, a conversion coupon.
Marketplace: 45 products to resell
DORA templates, audits, certifications, consulting engagements — a catalog ready to sell to your clients.
Automated commission statements
Idempotent per-invoice accrual, monthly statements with netting, and payment marking.
Trusted to handle your clients' data
Isolation, bounded access and a tamper-evident audit trail protect every client — and your liability.
Strict tenant isolation
Every operator read re-asserts client filiation (defense-in-depth beyond the index) — no data crossover.
Access bounded to the portfolio
Your staff only switch between your managed clients. Fail-closed: they cannot step outside your scope.
Tamper-evident audit trail
Every audit write is SHA-256 hash-chained: any edit breaks the chain and becomes verifiable.
EU hosting, impersonation reserved
Data hosted within the European Union. Impersonation is reserved to platform staff and fully audit-logged.
Operator licenses
Priced by number of operated clients. Monthly prices excl. VAT. 7-day operator trial with 2 demo clients.
op_starter
/ month — excl. VAT
op_pro
/ month — excl. VAT
op_scale
/ month — excl. VAT
op_plus
Custom pricing
Frequently asked questions
Is each client's data really isolated?
Yes. Each client is a separate tenant (own data, roles, audit trail). Every operator read re-asserts filiation, and your staff only switch between your managed clients. Only your operator workspace aggregates the portfolio.
Do I need one license per client, or one for all?
A single operator license, at the operator price, covers all clients up to your tier (3, 10, 50 or unlimited). You buy each module once and it is shared across every client. AI/messaging usage stays metered and capped per client.
Can I reuse my methodology across clients?
Yes. Curate frameworks, controls and crosswalks once, then push them to any client in one click. You also get ~98 process templates, ~74 public-sector plan templates, policy templates and 5 country packs.
What can I hand a client?
A white-label multi-framework GAP report (client-branded PDF), plans in PDF/Word, an auditor evidence bundle (ZIP), the DORA Register of Information (Excel/CSV), and board-ready gap syntheses (PDF/DOCX/Excel) — all configurable under your brand.
Do I earn on the clients I bring?
Yes. The partner program pays a commission on your clients (by transfer or netted against your operator license), with dual attribution (operator filiation + referral codes), automated monthly statements, and a 45-product marketplace to resell.
Can I try it before committing?
Yes. A 7-day operator trial auto-creates 2 demo clients so you can rehearse the real workflow, no credit card. Full white-labelling is an Enterprise+ / on-quote option (the white-label GAP report itself is included).
Your entire client base, one console.
Start the free operator trial or explore the operator hub to run and monetize GRC for all your clients.