ISO 27001 · A.5.9
Inventory of information and other associated assets, with an assigned owner.
Asset inventory · GRC
Keep your organization's assets audit-ready.
Almost every standard starts with knowing what you have. Audexa brings devices, software, SaaS, suppliers and contracts together in an inventory with owners, periodic reviews and alerts, connected to your controls, evidence and risks.
- Devices, software and SaaS
- Suppliers and contracts
- Alerts at 90, 60 and 30 days
5 asset types: devices, software, SaaS, suppliers and contracts
90/60/30 days' warning before each contract's notice deadline and end date
500 rows per CSV or Excel import, with headers in Spanish or English
2 inventory integrations: NinjaOne and SentinelOne
Why it matters
Without an inventory, every audit starts blind.
ISO 27001 requires an inventory of assets with owners. NIS2 and DORA require control over the supply chain and ICT providers. The GDPR requires knowing where personal data is.
NIS2 · Supply chain
The security of suppliers and service providers is part of the mandatory measures.
DORA · ICT third parties
A register of information covering all arrangements with ICT providers, plus exit strategies.
GDPR · Processors
Data processing agreements (DPAs) with suppliers that process personal data on your behalf.
ENS (Spain) · Inventory and configuration
Asset inventory and secure configuration of devices and systems.
Vulnerabilities
Knowing which versions you have installed is the basis for detecting exposure to known CVEs.
How Audexa helps
An inventory that works for your compliance.
It's not just a list of devices: every asset has an owner, review dates, a security status and links to controls, evidence, risks and tasks.
Inventory
Everything you use, in one place.
Devices and software
Import from Excel or CSV, or sync in read-only mode with NinjaOne and SentinelOne.
SaaS
Plan, users, cost, renewal, data location, SSO, MFA and AI features.
Suppliers and contracts
Legal name, tax ID, LEI, criticality, dependencies, contract type and key dates.
Control
What needs attention comes first.
Owner and review
A real owner for every asset and reviews based on criticality: every 6, 12 or 24 months.
SaaS and supplier posture
Personal data without a DPA, MFA not enforced, no SSO or no assigned owner.
Contract alerts
Alerts 90, 60 and 30 days before the notice deadline and the expiry date, also shown in the calendar.
Prove
Your inventory as evidence.
Compliance tab
Controls, evidence, risks and tasks related to each asset.
Documented disposals
Date, destination, data wiping and certificate of destruction as evidence.
Export to Excel
Summary, devices, software, SaaS, suppliers, contracts and the DORA register of information.
Some features depend on your plan and active modules.
SaaS
Uncover the SaaS your company already uses.
Register each application with its owner, the data it processes and where that data is hosted. Audexa flags critical applications without SSO or MFA, or with personal data but no data processing agreement.
- Bulk import from CSV or Excel
- Turn installed software into SaaS in one click
- A supplier's valid DPA covers all of its applications
- Shadow AI alert connected to AI Governance
CVE exposure
From your inventory to real vulnerabilities.
vRadar matches vendor, model, firmware, operating system and installed version against CVE intelligence, shows why each finding affects an asset and turns it into a remediation task.
- CVSS, EPSS, KEV, exploit and available-patch signals
- Confidence levels to reduce false positives
- A finding isn't closed until the new version is verified
- PDF and Excel export for management and technical teams
How it works
Your asset inventory, ready for audit.
Load your assets
Import from Excel or CSV, sync your tools or add SaaS and suppliers.
Assign and review
Give every asset an owner and let Audexa remind you about reviews and expiry dates.
Connect with compliance
Link assets to controls, evidence and risks and export everything for the auditor.
Before and after
An inventory in Excel vs. asset management in Audexa.
AreaExcelAudexa
Owners
A column nobody updates
Real users with periodic review
Contracts
Unwanted automatic renewals
Alerts before the notice deadline
SaaS
Unknown to IT
Security posture and DPA status at a glance
Audit
Inventory unrelated to the controls
Assets linked to controls and evidence
Vulnerabilities
A separate scanner
CVE exposure on the inventory itself
Frequently asked questions
What people usually ask us about Asset management.
Do I have to add devices manually?
No. You can import devices, software and SaaS from Excel or CSV using our template, or sync in read-only mode with NinjaOne and SentinelOne.
Do integrations overwrite what we've reviewed manually?
No. Fields validated by a person are never overwritten; conflicts are sent to a review inbox.
How many assets can I register?
It depends on the plan: 20 per section on Core, 200 per section on Premium and unlimited on Diamond. Only assets in use count.
Does it work for the DORA register of information?
Yes. Contracts with ICT providers capture the data DORA requires, and the Excel export includes the “Register of information (DORA)” sheet.
Can I print labels for devices?
Yes. Audexa generates QR labels to identify the devices in your inventory.
Request a demo
Let's organize your inventory in a demo.
In 30 minutes we show you how devices, SaaS, suppliers and contracts are loaded and how they connect to your audits.
- We look at where your inventory comes from today.
- We show you alerts, reviews and security posture.
- We explain which plan fits your asset volume.