tprm.mlab.sh · DORA Pillar IV
Simple, transparent pricing
Start free with up to 5 providers. Unlock the full DORA register when you need it.
Plans
Compare Free & Licensed
Every feature, mapped to its DORA article and EBA template.
| Features | Free |
Full DORA register Licensed |
|---|---|---|
| Get Started Free | See plans & manage license | |
| Plans | ||
| Pricing | 0€ / month forever free |
Contact see plans on mlab.sh |
| Designed for | For small scopes evaluating their ICT third-party risk: manage providers, contracts, assessments and incidents. | Everything you need to produce and defend a real DORA register of information, unlimited, audit-ready. |
| Limits | ||
| ICT third-party providers | 5 max | Unlimited |
| Users | 3 max | Unlimited |
| Core governance | ||
| Dashboard | ||
| Provider management | ||
| Contracts | ||
| Risk assessments | ||
| Third-party incidents | ||
| Risk & resilience | ||
| Exit strategies (Art. 30) | ||
| Concentration risk | ||
| Business functions (B_06.01) | ||
| Subcontracting (B_05.02) | ||
| Due diligence (Art. 28(4)) | ||
| Audit tracking (Art. 28(5-6)) | ||
| Article 30 checklist | ||
| DORA register modules | ||
| Entity information (B_01.01) | ||
| Entities in scope (B_01.02) | ||
| Branches (B_01.03) | ||
| Intra-group links (B_02.03) | ||
| Register definitions (B_99.01) | ||
| Reporting & export | ||
| EBA export (15 templates, EBA codes) | ||
| Register validation | ||
| xBRL-CSV deposit package (.zip) | ||
| DORA register (Art. 28(3)) | ||
| Advanced analytics | ||
| CSV export (full / per template) | ||
| API | ||
| REST API | GET only | Full CRUD |
| Get Started Free | See plans & manage license | |
All plans
Both tiers include
Self-hosted
Your infrastructure
RBAC
Role-based access
DORA-specific
Mapped to articles
REST API
Token auth
Updates
Free upgrades
7 days offline
License resilience
FAQ
Frequently asked questions
- What does the Free tier include?
- Up to 5 ICT third-party providers and 3 users, with the dashboard, provider management, contracts, risk assessments and third-party incidents. The API is read-only (GET). Fully functional, no time limit.
- What does Licensed unlock?
- Unlimited providers and users, plus the full DORA register: exit strategies, concentration risk, due diligence, audits, Article 30, the entity/scope modules, EBA export of 15 templates, validation, the xBRL-CSV package, analytics and a full CRUD API.
- Is it really self-hosted?
- Yes, 100%. The only outbound call is an hourly license check. No provider, contract, assessment or register data ever leaves your infrastructure.
- Several entities, one license?
- Yes. A license covers as many instances as it has places, typically one per entity or branch, on the same key. It starts with one place; we add more on a quote or a contract.
- What if mlab.sh is unreachable?
- Your instance keeps a license signed by mlab.sh and verifies it itself, so it runs for 7 days if mlab.sh can't be reached. Beyond that it locks until outbound HTTPS to mlab.sh is restored. Your data stays put throughout.
- Can I export my data?
- On Licensed, yes: full CSV export (complete or per template), all 15 EBA ITS templates and the deposit-ready xBRL-CSV (.zip) package. Your data always lives on your own database.
- How do I upgrade?
- Manage your license at mlab.sh/orga/tprm/license. No reinstallation needed: the tier change applies within the hour.
Help me choose
Not sure which tier?
Two-minute questionnaire: we recommend Free or Licensed based on your scope and DORA obligations.