EU and UK frameworks,
managed on one record

GDPR, NIS 2, DORA, the EU AI Act, Cyber Essentials and NCSC CAF sit in the library with ISO 27001, SOC 2 and more. Work done for one counts towards the others where controls overlap.

Find your frameworks
7 entries
GDPR, NIS 2, DORA, EU AI Act, Cyber Essentials (two versions), NCSC CAF
Versioned
Each version listed separately
Cross-framework
One task, many frameworks
Partner-friendly
MSSPs serving EU clients

The situation

What EU and UK organisations face

Overlapping regimes with their own timelines.

GDPR

Personal data and data-subject rights.

NIS 2

Cyber security for essential and important entities.

DORA

Digital operational resilience in finance.

EU AI Act

Obligations for AI systems.

Cyber Essentials

A UK baseline, often asked in supply chains.

NCSC CAF

Assessment of critical infrastructure.

The difference

Overlap managed once

Several regimes, much shared work.

The usual way

  • Each regime a separate programme
  • Evidence duplicated
  • Third-party registers kept apart

In Netra

  • One record, shared controls
  • Evidence credited across frameworks
  • Third-party risk in the same system

From scoping to evidence

Enable the regimes that apply to you.

  1. 1

    Select regimes

    GDPR, NIS 2, DORA and others.

  2. 2

    Assign owners

    Controls as tasks.

  3. 3

    Evidence

    Held once.

  4. 4

    Third parties

    Assessed on the same record.

  5. 5

    Audit

    Evidence ready.

Quiet audits. Loud confidence.

Whichever regime is being examined, evidence is already attached to the control and traceable to its source.

See the Audit Centre

Outcomes

What changes

Less duplication across regimes.

Shared work

Credit across overlapping controls.

Clear status

For each regime.

Supplier visibility

Third-party dependencies in view.

Frameworks

Europe and UK frameworks

Each opens a page on what it covers.

GDPR

Personal data.

NIS 2

Critical and important entities.

DORA

Financial entities.

EU AI Act

AI systems.

Cyber Essentials v3.2

UK baseline.

NCSC CAF v3.2

Critical infrastructure.

In the platform

The modules behind this page

Every module works on the same record, so a task done once is counted wherever it applies.

Compliance Centre

Status for every framework, derived from the work.

Task Engine

Every requirement as an owned task with evidence.

Third-Party Risk

Vendors discovered, assessed and reported to the board.

Audit Centre

Internal, external, certification and regulatory audits end to end.

Policy Hub

Policies generated, scored and kept current.

Dashboard and Reports

A live posture score and one-click board reports.

The detail: reporting, engagement and what to prepare

Questions we are asked

Does it cover DORA and NIS 2?

Yes. Both are in the library.

Can I run several regimes at once?

Yes. Controls that overlap share work and evidence.

Can a partner deliver it to EU clients?

Yes. Partners deliver Netra as a managed service.

See Netra for Europe and the UK

A demo built around your frameworks and your kind of organisation, not a generic tour.