Supervisors expect a complete, current overview of all outsourcing and third-party arrangements. With ENFORMITY the register is not a separate spreadsheet but part of every contract record.
The EBA Outsourcing Guidelines require institutions to document every outsourcing arrangement. The new EBA Guidelines on third-party risk extend this to all third-party arrangements, including intragroup ones, while DORA sets out its own register of information for ICT services.
When the register lives in a separate spreadsheet, it drifts away from the contracts it describes. In ENFORMITY, register information is captured on the contract itself, so dates, parties and classifications stay consistent, and every change is logged.
This works the same way for organisations outside the banking sector that need to keep track of their service providers and dependencies.
A register is only as good as its counterparty data. ENFORMITY stores LEI, VAT ID, company register number, ownership and board members for every service provider, and validates them against GLEIF, the EU VAT register (VIES) and the Austrian company register.
Responsibilities are documented as roles on the contract: contract owner, outsourcing manager, audit and more, each with start and end date.
Several institutions can work in one installation with strictly separated data, or share a central register. Access profiles decide who sees and edits which contracts: by contract party, by role in the contract, by contract list or by field condition.
The AI analysis can pre-fill register fields such as outsourcing relevance, DORA category, intragroup and cloud directly from the contract document, optionally with a local AI model operated in the EU. How it works
Information on regulatory requirements is general in nature and does not replace legal advice.
Request a test environment or a personal demo. We are also happy to arrange a reference call with one of our customers.