All sectors

Software and tech

Prove your security before the customer asks.

Banks, insurers, hospitals and larger firms have to check the software they rely on. Eurus reads your code, cloud and sign-ins, and keeps the answers ready with their proof.

eurus.ie/issuesSample data
Eurus To do on a sample business: issues grouped by what they need, such as fixing a system, each with the system it came from and why it matters.
To do on a sample software company: the gaps its code, cloud and sign-ins show, each with the system it came from and the fix.

What Eurus finds

What Eurus finds in a business like yours.

Connect the systems you already use. Eurus reads them, drafts the registers for a person to confirm, and puts each gap on the To do list with its fix.

  1. 01

    Code and cloud settings

    Repositories with security updates switched off, access keys left in use too long, and databases open to the public.

  2. 02

    AI tools your team signs into

    Coding assistants and chat tools found in sign-ins, each kept on the AI register with its class under the AI Act.

  3. 03

    Every supplier that touches customer data

    Drafted from the systems you connect, with its data processing agreement, contract dates and next review.

  4. 04

    People and access

    Two-step sign-in on every account, leavers who can still sign in, and access reviews signed off.

What it reads

  • Sign-in and identity
  • Email and calendars
  • Files and documents
  • Accounts and payments
  • HR and people
  • CRM and enquiries
  • Cloud and code
  • Website forms

Which laws apply

Which laws apply, and why.

Eurus works out which of the five apply to your business from what it reads and what you tell it. Here's why each one reaches this sector.

GDPR

You process personal data for your customers, so each one needs an Article 28 contract with you, and you keep a record of what you process for them.

Regulation (EU) 2016/679, Articles 28 and 30

NIS2

A customer in scope has to secure its supply chain, so its questions reach you. A medium or large cloud or managed service provider can be in scope itself.

Directive (EU) 2022/2555, Article 21(2)(d) and Annex I

DORA

Sell to a bank, insurer or payment firm and you're its ICT third-party provider: its contract with you carries set terms, and you sit on its register.

Regulation (EU) 2022/2554, Articles 28 and 30

EU AI Act

Using AI tools at work brings the AI literacy duty. A chatbot in your own product brings the transparency duties.

Regulation (EU) 2024/1689, Articles 4 and 50

ISO 27001

What enterprise customers and tenders ask for. Eurus keeps each Annex A control with the checks and evidence behind it.

ISO/IEC 27001:2022

See Eurus on a sample business.

Try Eurus live first: the full app with a demonstration business, no account needed.