Built to be audited

Isolated. Permissioned. Logged.

A compliance tool is itself evidence. Resilyo is built so that the workspace, the roles and the trail would survive the inspection they help you prepare for.

Tenant isolation · one workspace per organisation, a hard boundary Field-level RBAC · per tenant, per framework, per field Append-only audit trail · who, what, when Microsoft Entra ID sign-in · guest access by invitation Full JSON export · on demand, throughout Partner branding · your name in the chrome, not ours

For regulated organisations

Banks and credit institutions, insurers, payment and e-money firms, investment firms, ICT providers to financial entities, critical-infrastructure operators, and mid-sized companies inside a regulated supply chain.

For the firms that advise them

Multi-tenant by design: each client is its own workspace with its own data, roles and trail, one click apart. Deliver gap assessments on Resilyo and leave the client a workspace that keeps living after the engagement.

For the management body

Personal accountability for resilience wants a defensible picture, not reassurance. The readiness report shows what is evidenced, what is partial, what is missing and who owns it.

ASP.NET Core 10 · Azure Cosmos DB · Microsoft Entra ID · Claude and ChatGPT models · English, Bulgarian, German, Greek, Italian

Is Resilyo for you?

Built for organisations that answer to a supervisor.

You are the core case if…

  • You fall in scope of DORA, NIS2, the EU AI Act, MaRisk, NYDFS 500, SOX or FCA operational resilience, or you are not sure whether you do.
  • You hold or are working towards ISO 27001, 22301, 9001 or 42001, PCI DSS, SOC 2 or NIST CSF 2.0.
  • You face more than one regime and keep answering the same obligation in different spreadsheets.
  • An audit, inspection or client questionnaire is coming, the evidence exists, and nobody can produce it quickly.

You are a consultancy if…

  • You deliver compliance work for several clients and need a hard boundary between them.
  • You want the client to see your name in the product, with your own logo and colours.
  • You want the findings of an engagement to outlive the engagement.
  • You would rather sell judgement than maintain spreadsheets.

Signs it is the wrong tool

An unhappy pilot helps nobody, so be honest about these.

  • You want a certificate. Resilyo prepares you for an audit; it performs none and issues no opinion.
  • You want the tool to decide applicability for you. It shows Direct, Conditional or Out of scope with the reasoning; your people still judge.
  • You have no documents and nobody to own controls.
  • You need offline access. Resilyo is online-only, by design.
  • You want a single-user personal tracker. One person with a spreadsheet is cheaper.

Ask to see roles and permissions against your own three-lines structure.