A DORA third-party register doesn't require its own software, but a configured evaluation grid on a platform that scores partners and business units anyway. How a register is mapped onto OpenScorecard — and why the audit mode changes in the process.
OpenScorecard evaluates partners, suppliers and business units across multiple levels — one platform, configurable scoring, self-service access for the evaluated side. Frameworks and questionnaires are configuration, not code. Apache 2.0, exit-ready, on-premise-capable.
Mosaic consolidates IT asset, security, vendor and SBOM data from over 20 sources into an auditable asset graph. With a built-in AI layer for correlation and compliance statements. Apache 2.0, exit-ready, on-premise-capable.
OpenFlightOps is the operational application layer for flight operations — with cross-source validation, a cryptographically anchored audit trail, real-time decision services and an ML layer. Apache 2.0 as the foundation, on-premise-capable, exit-ready.
When two corporations found a joint venture, the new entity needs its own IT foundation — on day one. Multi-tenant, data-sovereign, no vendor lock-in. We set it up: 100% open source, on-prem Kubernetes, several use cases on one base.
Asset inventory in twenty sources, scorings in scattered spreadsheets, compliance statements without a continuous audit path. A consolidated platform layer changes more than the effort — it changes the mode in which audits run.
In flight operations the captain constantly faces speed trade-offs: recover from delay, hit slots, save fuel, meet curfews. A real-time recommendation system quantifies the options — costs against costs — and delivers a concrete recommendation to the cockpit, with audit trail.
Radios, WhatsApp groups, paper lists — in many places operational coordination runs across island tools. A shared situational picture changes more than the response time; it turns verbal hand-offs into an audit-proof trail.
When validation rules are nailed into code, every change costs a release cycle. Low-code-configurable rule sets shift maintenance to where the domain knowledge sits — to the domain experts, without an engineering ticket.