Could you draw your ICT
supply chain right now?

The problem

Spreadsheets can't show you risk.

DORA holds you accountable for a supply chain most teams can't actually see.

• 🕸 You can't see the chain

  Rows in a spreadsheet don't show who depends on whom — or which fourth parties sit two tiers down, behind your direct suppliers.

• ⚠ Concentration risk stays hidden

  Five "different" suppliers all running on the same hyperscaler? You'd never spot it in a table — until it takes them all down at once.

• ⏳ Audit prep eats weeks

  Every information request becomes a manual scramble across files, owners and versions — and you're still not sure the register is complete.

No catch

No IT project required.

• 🚫 No server

  Runs in your browser or as a desktop app. Nothing to install or maintain on a server.

• 🔒 Your data stays yours

  Everything runs locally — no cloud, no upload. Your register never leaves your device.

• ✅ Regulator-ready

  Export is EBA DORA 4.0 (EUCLID) conformant — the exact format the submission expects.

• 📥 Use your register

  Already keep one in Excel or XBRL? Import it and see your whole chain on screen in minutes.

Key features

Everything you need. Nothing you don't.

From live graph editing to regulatory exports — DORAVISUAL covers the full third-party risk workflow in a single environment.

• See the whole chain — report only what counts

  Map your entire ICT ecosystem on one canvas — including financial counterparties and out-of-scope entities you need for context — while your DORA Register of Information stays clean. Only critical and non-critical ICT providers (and their contracts) flow into the register table, coverage analysis and EBA submission. Mark any node Financial or Non-DORA and it stays visible on the map but drops out of the register and export automatically. Import an XBRL register and every provider is classified critical or non-critical for you — so what you see and what you file never drift apart.

• Multi-tier network visualisation

  Map suppliers, partners, systems and dependencies across Tier 0 through Tier 4. A sector-based ring layout with BFS-assigned tiers and barycenter-optimised ordering keeps the structure readable at any scale.

• Dynamic 2D and 3D visualisation

  High-performance Canvas-based 2D and Three.js-powered WebGL 3D rendering. Rotate, zoom, present from any angle — and export the 3D view as a slide or GLTF model.

• Search, filter, cluster & spotlight

  Advanced search, filtering, clustering and spotlight functionality. Filter by tier, sector, process, or DORA / compliance status. Process filter centres the view automatically on visible nodes.

• Risk heatmaps & concentration analysis

  Surface critical suppliers, country concentration, sector exposure, and shared dependencies. Make hidden risks visible before the audit — or before they fail.

• Dependency, impact & process mapping

  Visualise direct and indirect dependencies, operational impact, and process- and service-chain mapping across third- and fourth-party relationships. See exactly which business processes break if a supplier fails.

• LEI & EUID validation

  One-click LEI validation via the GLEIF API. Auto-fill ultimate parent name and LEI, and walk the full ownership chain (up to 10 hops) with flags, status, and add-to-model buttons. EUID supported alongside.

• Contract Registry

  A dedicated registry of every contract across every connection — supplier pair, reference, DORA / non-DORA badge, expiry with traffic-light status, auto-renewal flag, notice period, ICT service category, and annual cost.

• Node Browser

  A full-screen overlay of every node as a rich card — independent of the canvas. Filter, search, and bulk-assign processes or sector to multiple nodes at once. Ideal for cleaning up freshly imported registers.

• Focus & comparison mode

  Isolate a single branch, or compare two branches side by side. Shared suppliers automatically reposition to the circular average of their parents. Escape returns to the full network.

• Multi-select & bulk operations

  Shift-drag a rubber-band lasso to select. Shift-click to toggle. Bulk delete with the FAB button or Delete key — with a live counter. The camera auto-frames the selection.

• Collapse subtree & shuffle

  Right-click any node to collapse its descendants behind a count badge — collapsed branches survive filter changes. One-click Shuffle recomputes tiers and minimises edge crossings with a smooth spring animation.

• Auto ball-size optimisation

  Node radius scales exponentially with annual contract cost — from €25K (size 1) to €10M (size 10). Ring radii expand automatically to prevent overlap; label font auto-fits the largest readable size.

• Undo / redo & quick save

  30 levels of undo and redo (Ctrl+Z, Ctrl+Y). Quick Save (Ctrl+S) writes directly to a fixed .xlsx location via the File System Access API — first time picks the file, subsequent saves are silent.

• Bulk editing & Excel import

  Import existing supplier, contract, and risk datasets via a 25-column Nodes sheet. Backward-compatible with files exported from older versions (21–24 columns). Bulk-edit operations make large registers manageable.

• Multi-format export

  Export to Excel (full register or verification report), PowerPoint (native editable shapes, 2D and 3D), PNG, GLTF 3D model, Visio, and a self-contained interactive HTML model with logos and contracts embedded.

• Keyboard-first workflow

  Press ? at any time for the keyboard shortcut overview. Power users move through large networks without ever reaching for the mouse.

Deployment

Open the HTML file. That's it.

DORAVISUAL is a single-file HTML application. No server. No installation. No cloud storage. Three distribution variants cover every scenario — from individual analysts to organisation-wide rollouts.

• Slim (~0.5 MB)

  Uses external lib/ folder — ideal when you control the hosting environment and want the smallest payload.

• Fat (~4.3 MB)

  All libraries inlined — fully self-contained. Works anywhere without companion files. Email it, drop it on a USB, host it on SharePoint.

• VIEWER (~4.3 MB)

  Same as Fat but read-only — editing, export and demo functions are no-ops. A 👁 VIEWER badge is permanently displayed. Perfect for distribution.

Run it locally with a double-click, host the single file on your own infrastructure for team-wide access, or install the native Mac desktop build.

• Local (Windows / Mac)

  Double-click the standalone HTML file — no install, no admin rights, no companion files.

• Self-hosted

  Drop the single file on any web host or inside your tenant (Azure, Cloudflare, intranet) — one URL, organisation-wide access, no install for end users.

• Teams & SharePoint

  Once hosted, link it from SharePoint or embed the URL as a tab in Teams for direct team-wide access.

• Mac desktop app

  Native Electron build for macOS — logos stored as files on disk, GLEIF API works without CORS restrictions, app data in ~/Library/Application Support/dora-visual/.

Use cases

One platform, many ways to use it

DORAVISUAL fits the workflows of procurement, risk, compliance, IT, audit, and executive teams — across regulated and unregulated industries alike.

• ICT supplier network mapping
• Third- and fourth-party risk management
• Concentration & country risk analysis
• Cloud & SaaS dependency mapping
• Contract registry & lifecycle tracking
• Critical supplier identification
• Vendor due diligence & onboarding
• Process & impact mapping
• DORA, NIS2 & sector compliance
• Procurement & outsourcing oversight
• Executive, audit & board reporting
• Auditor & regulator distribution (VIEWER)