Ampel

Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.

Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.

DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.

All evidence artefacts for an entity with hashes and expiry dates.

Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.

List all registered regulated entities.

Register a new regulated entity.

Chain-linked audit log with integrity check.

Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.

Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.

Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.

Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.

Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.

Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.

Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.

Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.

Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.

Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.

AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.

Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.

ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.

LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.

Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.

Server + DB status.

Quick connectivity test.

Oracle Event Bus status: events, cross-refs, connected oracles.

Get findings, SLA breaches, escalation status per entity.

Trigger escalation engine: auto-create findings, check SLA, escalate.

Simulate provider failure: which articles/checks are affected, score impact, risk level.

Simulate stale evidence: what happens if a check stays stale for N days.

Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.

Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.

Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.

Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.

Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.

DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.

Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.

Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.

Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.

Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.

Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.

Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.

Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.

Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.

Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.

Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.

Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.

Create temporary trial entity (48h) for self-service DORA assessment. No login needed.

Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.

Generate watermarked trial report with score, gaps, and CTA.