DORA mandatory clauses are contractual provisions that financial institutions must agree with ICT third-party service providers in accordance with Articles 28–30 of DORA. These include, among others, audit and access rights, rules on subcontracting and exit strategies.
Yes, as a modern cloud platform, Leno allows for No-Code configuration.
Yes, as a modern cloud platform, Leno allows for No-Code configuration. The solution is highly scalable and can be flexibly adapted to your internal structures, processes, and permission sets without any programming effort.
Leno eliminates manual errors through high-level automation and integrated AI
Leno eliminates manual errors through high-level automation and integrated AI. Structured workflows and built-in regulatory expertise replace tedious email-based coordination and static lists with a modern, digital process.
Yes, Leno eliminates fragmented data silos by seamlessly linking vendors directly to their corresponding contracts, risks, and mitigation measures.
Yes, Leno eliminates fragmented data silos by seamlessly linking vendors directly to their corresponding contracts, risks, and mitigation measures. This seamless integration prevents redundant data entry and ensures full transparency.
Leno is a modular GRC platform designed to digitalize and automate Governance, Risk & Compliance.
Leno is a modular GRC platform designed to digitalize and automate Governance, Risk & Compliance. It serves as a central hub for Third-Party Risk Management (TPRM), Contract Lifecycle Management (CLM), Information Security (ISM), and BCM.
DORA mandatory clauses are contractual provisions that financial institutions must agree with ICT third-party service providers in accordance with Articles 28–30 of DORA. These include, among others, audit and access rights, rules on subcontracting and exit strategies.
Thanks to pre-defined GRC templates and expert onboarding support, you can achieve a rapid "Go-Live".
Thanks to pre-defined GRC templates and expert onboarding support, you can achieve a rapid "Go-Live". We guide you from initial data migration to full production to ensure a smooth transition.
All contracts with ICT third-party providers that fall under the scope of DORA must be reviewed for compliance with DORA-mandated clauses—both existing and new contracts.
Yes, Leno supports English and German as standard.
Yes, Leno supports English and German as standard. Additional languages for international GRC teams can be added upon request to support your global compliance operations.
Security is ensured through Single Sign-On (SSO) and role-based access control (RBAC).
Security is ensured through Single Sign-On (SSO) and role-based access control (RBAC). Leno provides hosting and support directly from Germany, adhering to the highest security standards and architectural requirements.
Leno uses generative AI to automatically analyze contracts. Missing clauses, contradictions, and deviations from DORA requirements are systematically identified and documented in a structured manner.
Leno TPRM (Third-Party Risk & Outsourcing), Leno CLM (Contract Management), and Leno ISM (Information Security & BCM).
Leno is modular and fully integrated. We offer specialized modules: Leno TPRM (Third-Party Risk & Outsourcing), Leno CLM (Contract Management), and Leno ISM (Information Security & BCM). All modules work together to form a holistic GRC ecosystem.
No. Leno supports legal and regulatory reviews but does not replace them. The AI serves as an efficient analysis and support tool to identify relevant gaps and risks.
All audit results are documented in a traceable manner and can be accessed at any time. This allows institutions to consistently and auditably demonstrate the DORA compliance of their contracts.
Our TPRM and outsourcing management software enables compliant, transparent, and efficient lifecycle management of outsourcing arrangements, ICT services, and onward outsourcing in accordance with DORA, EBA Guidelines, and MaRisk. AI-driven automation delivers excellent usability, high data quality, and complete audit readiness.
Our AI-powered, user-friendly, and automated software für contract lifecycle management (CLM) provides a dynamic hierarchical representation of all contract documents, continuous compliance with regulatory requirements, and transparent search and filter functions, including approval workflows and deadline monitoring.
Map a complete information ecosystem and connect all assets in real time. Our information security and Business Continuity Management (BCM) software enables you to conduct protection needs analyses, business impact analyses, and risk assessments, forming a fully integrated information risk management and BCM system.