Third-party & technology resilience for regulated organisations.

What it does

Today Ventry runs your third-party register and produces your regulatory returns: the UK Material Third Party Register for the FCA, PRA and Bank of England, and the DORA Register of Information as an Excel intermediate and xBRL-CSV package. Ventry Evidence gives you a reusable, immutable evidence library, and Ventry Assurance tracks your readiness toward ISO 27001, SOC 2 and Cyber Essentials. Ventry Watch tells you when identity, dependency, regulatory or evidence facts actually change, so you find out before the next review rather than during it. Every action writes to an insert-only evidence log, so what you hand an auditor is a record, not a reconstruction. Free for 10 third parties, hosted in the EU.

Third-party assurance does not end when the questionnaire is complete; it ends when the dependency is safely removed. That's the question Ventry is built to answer: what does your organisation depend on, what risk does that dependency introduce, and can you prove you are managing it?

Available now

• Third-party register — Free tier: 10 active third parties
• Ventry Port — CSV / XLSX import with mapping, dry run, deterministic dedupe
• Contractual arrangements, service lines, business functions & impact tolerances
• Explicit materiality determinations; dated risk / audit / financial DD / cyber DD assessments
• UK Material Third Party Register (FCA / PRA / Bank of England) — official workbook generation
• DORA Register of Information — 15 official EBA templates
• Verified entity identity — LEIs corroborated against GLEIF, with dated immutable evidence
• Ventry Risk — living risk register with controls, treatments & time-bound risk acceptance
• Ventry Evidence — reusable, immutable, SHA-256-hashed evidence library
• Ventry Assurance — readiness tracking for ISO 27001, SOC 2 and Cyber Essentials
• Ventry Watch — identity, dependency, regulatory and evidence change detection
• Insert-only evidence log; EU hosting; private, access-scoped downloads

Build and prove assurance

Collect evidence once — a policy, a test result, a certificate — and reuse it across every framework it genuinely supports, without re-uploading it for each one. Ventry does not issue certificates, certify your organisation, or replace an accredited assessor: this is assurance readiness and evidence operations, not certification.

Know when something changed

Your third-party estate keeps changing. Ventry Watch helps you see when identity, dependency, regulatory or assurance facts change — and understand what those changes may affect before the next annual review, audit or incident. Watch never decides anything for you: every change ends in a human review, not an automatic verdict.

The dependency lifecycle

Discover → Assess → Launch → Risk → Watch → Exit — all six stages available now. Starting a supplier relationship creates a dependency — Ventry Launch helps organisations understand what they are about to depend on, what risk and evidence remain unresolved, and who approved the decision before that dependency goes live. Ending a contract does not always end a dependency — Ventry Exit helps organisations prove that access, data, integrations, risks and downstream dependencies have actually been removed, transferred or consciously retained.

Pricing

Paid tiers are on the way — billing isn't live yet. Join the waitlist to be notified.