Outsourcing Register
Manage outsourcing compliance in the browser or fully offline on your own machine. Track providers, criticality and risk assessments, and contracts in alignment with CSSF 22/806 and EBA GL/2019/02, with built-in dashboards and reporting.
The Outsourcing Register is a tool for financial institutions operating in Luxembourg to manage their outsourcing arrangements in full compliance with CSSF Circular 22/806 and the EBA Guidelines on Outsourcing (GL/2019/02). It ships in two delivery modes off the same register model: a hosted browser version you can open and start using immediately, and a desktop version that runs entirely offline on your laptop or company server. Both modes cover the same ground — from initial criticality assessment through ongoing monitoring — with automated compliance checks, dashboards, and reporting that reduce the manual workload on compliance and outsourcing officers. Choose the browser version for speed and zero setup; choose the desktop version when the data must never leave your environment.
- Two delivery modes — browser-based with no installation, or fully offline on your own machine
- Service and Cloud outsourcing register aligned with section 4.2.7 of the CSSF Outsourcing Circular
- Monitoring of pending, due and soon-due outsourcing deliverables (e.g. Criticality, Risk Assessment)
- Structured criticality and risk classification
- Comprehensive reporting and export capabilities
- Desktop mode has no cloud dependencies and transmits no data
Financial institutions in Luxembourg face significant challenges in managing outsourcing arrangements. Manual tracking using spreadsheets is error-prone and time-consuming, making it difficult to maintain compliance with evolving regulatory requirements like CSSF 22/806 and EBA GL/2019/02. There is also a real tension between accessibility and data sovereignty — many cloud-based solutions require uploading sensitive outsourcing data to third-party servers, while a purely offline tool is a barrier for teams that just want to get started. This tool resolves that tension by offering both. The browser version needs nothing but a browser. The desktop version keeps every record on your own machine or company server. Either way, the register is structured to regulatory requirements and the compliance checks are automated.
Status
LiveRegulation
CSSF 22/806Format
Step-by-step guide to get started with this project.
View GuideThis tool's source code is public. Read it, check what it does with your data, modify it, or run your own build.
View source on GitHubBuilt for risk & compliance teams in regulated firms.