Simple, transparent pricing
Start free with up to 5 providers. Unlock the full DORA register when you need it.
- 5 ICT providers max
- 3 users max
- Dashboard & provider management
- Contracts & risk assessments
- Third-party incidents
- Read-only API (GET)
- Unlimited providers & users
- Everything in Free
- Exit strategies, concentration risk & audits
- Due diligence, business functions, subcontracting
- Article 30 checklist & entity/scope modules
- EBA export of 15 templates + validation
- xBRL-CSV deposit package & DORA register
- Advanced analytics, full CSV export, full CRUD API
Both tiers include
Compare Free & Licensed
Every feature, mapped to its DORA article and EBA template.
| Feature | Free | Licensed |
|---|---|---|
| Limits | ||
| ICT third-party providers | 5 max | Unlimited |
| Users | 3 max | Unlimited |
| Core governance | ||
| Dashboard | ||
| Provider management | ||
| Contracts | ||
| Risk assessments | ||
| Third-party incidents | ||
| Risk & resilience | ||
| Exit strategies (Art. 30) | ||
| Concentration risk | ||
| Business functions (B_06.01) | ||
| Subcontracting (B_05.02) | ||
| Due diligence (Art. 28(4)) | ||
| Audit tracking (Art. 28(5-6)) | ||
| Article 30 checklist | ||
| DORA register modules | ||
| Entity information (B_01.01) | ||
| Entities in scope (B_01.02) | ||
| Branches (B_01.03) | ||
| Intra-group links (B_02.03) | ||
| Register definitions (B_99.01) | ||
| Reporting & export | ||
| EBA export (15 templates, EBA codes) | ||
| Register validation | ||
| xBRL-CSV deposit package (.zip) | ||
| DORA register (Art. 28(3)) | ||
| Advanced analytics | ||
| CSV export (full / per template) | ||
| API | ||
| REST API | GET only | Full CRUD |
Frequently asked questions
What does the Free tier include?
Up to 5 ICT third-party providers and 3 users, with the dashboard, provider management, contracts, risk assessments and third-party incidents. The API is read-only (GET). Fully functional, no time limit.
What does Licensed unlock?
Unlimited providers and users, plus the full DORA register: exit strategies, concentration risk, due diligence, audits, Article 30, the entity/scope modules, EBA export of 15 templates, validation, the xBRL-CSV package, analytics and a full CRUD API.
Is it really self-hosted?
Yes, 100%. The only outbound call is an hourly license validation HMAC. No provider, contract, assessment or register data ever leaves your infrastructure.
What if mlab.sh is unreachable?
A 48-hour grace window keeps your instance running if the license server can't be reached. Beyond that it locks until outbound HTTPS to mlab.sh is restored. Your data stays put throughout.
Can I export my data?
On Licensed, yes — full CSV export (complete or per template), all 15 EBA ITS templates and the deposit-ready xBRL-CSV (.zip) package. Your data always lives on your own database.
How do I upgrade?
Manage your license at mlab.sh/orga/tprm/license. No reinstallation needed — the tier change applies within the hour.
Not sure which tier?
Two-minute questionnaire — we recommend Free or Licensed based on your scope and DORA obligations.