For Regulated Entities

Cloud Outsourcing Risk Management

Cledara is the world’s only fully integrated risk management solution for cloud outsourcing risk management that embeds compliance in the day-to-day operations of the business for banks, electronic money and payment institutions and banks.

Woman sitting on desk working on laptop
These great companies use Cledara
Logo FlorenceLogo PaidLogo RailsbankLogo ClicksoLogo PlanableLogo Unmind
Compliance for Cloud Software

We make compliance with EBA Outsourcing to Cloud Providers Regulations easy

Cledara embeds the key steps required by the regulation into your company’s regular cloud software purchasing and management process, so that you can ensure that all software purchases have followed the correct procedure before and after purchase, are properly documented and included in the cloud software register for monitoring and reporting.

We’ve distilled the requirements of the EBA Guidelines on outsourcing arrangements (EBA/GL/2019/02) and Guidelines on ICT and security risk management (EBA/GL/2019/04) that relate to cloud software into a simple to use 5-step process with one-click report generation, a real-time Cloud Software register and automatic reminders to ensure that you never miss a scheduled review.

Image of London city by night
Business Case Template
Risk Assessment Template and Critical or Important Classification
Exit Plan for Critical or Important cloud outsourced functions
Contract Review Checklist
Ongoing monitoring
Icon data file with money symbol

Business Case

Benefits and cost assessment, documentation of key functional and non-functional requirements.

Icon data bars checked

Risk Assessment

Documented risk ratings, comments and mitigations for 23 different regulatory requirements.

Icon document shield

Critical or Important

Documented classification, enhanced due diligence and risk assessment template, Exit Plan.

Icon business contract

Contract Review

Contract review template for the 7 different regulatory requirements, plus enhanced contract review for Critical or Important functions with a further 23 regulatory checks.

Icon shield monitor


Automatically generated Cloud Software register with the 10 fields required by the regulations updated in real time and a further 9 fields required for cloud software classified as Critical or Important.

EBA Cloud Outsourcing guidelines come into effect December 2021.