Article 28(3) of DORA requires financial entities to maintain and keep up to date a Register of Information in relation to all contractual arrangements on the use of ICT services provided by third-party service providers. The RoI module in Venvera is your central hub for managing this register.

Overview Page

Overall Completeness Score

At the top of the RoI overview page, a completeness progress bar shows how fully populated your register data is. The bar changes colour based on completeness:

  • Green — completeness ≥ 70%
  • Orange — completeness ≥ 40% and < 70%
  • Red — completeness < 40%

This score is calculated by checking required fields across all four data categories: ICT Providers, Contractual Arrangements, Business Functions, and Risk Assessments.

Metric Cards

Four metric cards are displayed below the completeness bar:

CardShowsAction
ICT ProvidersTotal number of registered providersClick to navigate to the providers list
Contractual ArrangementsTotal number of contractsClick to navigate to contracts
Business FunctionsTotal number of defined functionsClick to navigate to functions
Risk AssessmentsTotal number of completed assessmentsClick to navigate to assessments

Pre-Export Validation

Before exporting your register for regulatory submission, the RoI module runs a comprehensive validation pass. The validation section is collapsible and shows:

  • Error count — issues that must be resolved before a valid export can be generated
  • Warning count — issues that will not block export but may affect data quality

Each issue in the detailed list shows:

  • A severity icon (red circle for errors, amber triangle for warnings)
  • The template code (e.g., [B_05.01]) indicating which ESA table the issue relates to
  • The field name that is missing or invalid
  • The record name of the affected entity
⚠️
If validation errors exist when you attempt an export, a warning modal will appear confirming that the export will contain incomplete data. You may still proceed, but the exported files may not pass the regulator's validation checks.

Section Cards

The four main data categories are displayed as a 2×2 grid of cards. Each card contains:

  • An icon representing the category
  • The section title (e.g., "ICT Providers")
  • A brief description of what the section covers
  • The current record count
  • A "View all" button to navigate to the full list
  • An "Add" button to create a new record

CSV Import

The RoI module supports bulk data import via CSV files. To import data:

Step 1: Select the data type

Use the dropdown to choose which type of data you are importing: Providers, Contracts, or Functions.

Step 2: Choose your file

Click the file input and select a .csv or .txt file from your computer.

Step 3: Review column format

Ensure your CSV columns match the expected format for the selected data type:

  • Providers: display_name, legal_name, lei, country, provider_type, criticality, contact_name, contact_email
  • Contracts: contract_reference, provider_name, contract_type, start_date, end_date, annual_cost, currency, status
  • Functions: function_name, business_line, criticality_level, description, rto, rpo
Step 4: Import and review results

After clicking Import, you will see a results summary showing the number of records imported, skipped (duplicates), and errors (invalid data).

💡
Use UTF-8 encoding for your CSV files and ensure date fields are in ISO 8601 format (YYYY-MM-DD) for best results.