Each site, with its own
Sites work with the group's plan and quotas, but their data and their team are their own. A branch is the same company; a subsidiary is another company in the group.
Sites and group
Compliance for all your sites, in a single platform.
A main site manages its sites and subsidiaries, which keep their own data and their own team. You see the status of the whole group, share suppliers, policies and evidence without duplicating work, and assign access by site or region.
- Branches and subsidiaries
- Custom roles by site or region
- Multi-site ISO 27001 and group DORA
3 sites included on Premium, extendable in your contract
5 sites included on Diamond, extendable in your contract
3 levels of regions to organize your sites
5 languages, with each site's time zone and language
Why a group view
When every site keeps its own Excel file, nobody knows which site is doing worst.
NIS2, DORA or ISO 27001 apply to the whole group, but the work is done at each site. Without a shared platform, suppliers are assessed twice, policies are copied by hand and management doesn't see the full risk picture.
The main site, with everything
From the Group menu you see every site on a map, compare their compliance and share what makes no sense to repeat.
Each person, with what concerns them
Permissions are assigned by group, region or site, and everything you see about the group is calculated only from what you are allowed to see.
What's included
Manage the group without taking autonomy away from each site.
The main site shares and oversees; each site works with its own team, audits and evidence.
Sites and regions
Set up your group in minutes.
Setup wizard
Identity, location with a city search, frameworks suggested by country and sector, and region. Or import several sites from Excel or CSV with a row-by-row preview.
Region tree
Up to three levels. Before you move a site or a region, Audexa shows you who starts or stops seeing it.
Enter a site
From the switcher in the header, with a bar that reminds you where you are and takes you back to the group in one click.
Group overview
The whole group on a single screen.
Map, board and table
Indicators, alerts with your thresholds and a real map, a board by region or a table with each site's score, warnings and overdue tasks.
Cross-site analysis
Sites-by-framework matrix, ranking, site comparison and views by country and region.
Group reports
In PDF and Excel, respecting the filters you apply.
Shared resources
The main site shares, the sites use.
Suppliers, SaaS and contracts
Shared with the whole group or with the sites you choose, with licenses and a local owner, and a consolidated view with the DPA, contracts and spend per site.
Group policies
Mandatory or adaptable: each site adopts or adapts the policy and signs its own. If the main site publishes a new version, the adapted copies are flagged for review.
Evidence and templates
Evidence and questionnaire templates shared read-only, and duplicate detection with a preview of what gets merged.
Some features depend on your plan and active modules.
Custom roles
Each person sees the sites that concern them, and you know why.
Assign permissions across the whole group, a region or a site, with role templates or your own roles. Nobody can grant a permission they don't have.
- “What this person sees” view, with the origin of each permission
- Access with an end date: a warning 7 days before and automatic removal, ideal for external auditors
- Group-only people, who work only in the sites assigned to them
- A single weekly email per person, with a section per site
Group audits
Prepare the multi-site ISO 27001 audit from one place.
In the multi-site ISO 27001 audit, central controls are answered once at the main site and site controls are read from each site's latest audit. Audexa proposes a sample of sites based on phase and risk, and you can change it.
- Sample based on the phase: initial certification, surveillance or recertification
- Report with the scope statement; your certification body confirms the final sample
- Central controls answered once at the main site
- Site controls read from each site's latest ISO 27001 audit
Group DORA
The register of information for the whole perimeter, without duplicating suppliers.
Group › Group registers brings together the ICT providers and contracts of every site, with each company listed only once. The group DORA register shows each entity, its LEI and its status, and what each site still needs in order to report.
- The main site, the subsidiaries with their LEI and the branches under the main site's LEI
- Intragroup chains and non-EU subsidiaries that you can include or leave out
- Review Excel, the group's xBRL-CSV package and the register of each subsidiary
- It is an aid to prepare the register: validate it with your competent authority before submitting it
Aude across the group
Ask which site is doing worst and why.
Aude answers about the whole group with your permissions at each site. When it proposes the same change at several sites, you see one row per site, remove the ones you don't want and confirm it yourself.
- Sensitive actions, such as granting access or sharing, require two-step verification
- Aude never deletes data or sites, doesn't touch billing or keys, and doesn't approve or sign
- AI uses from every site in a read-only inventory, with immediate alerts for serious incidents
How it works
From one organization to a group, without starting from scratch.
Activate Sites and group
Audexa activates it on request. Your current organization becomes the main site and keeps everything it already has.
Add your sites
With the wizard or from Excel. An existing Audexa account can also become a site, with its owner's approval.
Share and oversee
Share suppliers, policies and evidence, assign access and follow the group from the overview.
Before and after
One Excel file per site vs. one platform for the whole group.
AreaOne Excel file per siteAudexa with Sites and group
Group view
Consolidating by hand every quarter
Overview with a map, ranking and comparison
Suppliers
Each site assesses its own
Shared, with a consolidated view
Policies
Copies that go out of date
Mandatory or adaptable group policies
Access
Shared or duplicate accounts
Roles by site or region, with expiry
ISO 27001 and DORA
Samples and registers done by hand
Multi-site audit and group DORA register
Frequently asked questions
What people usually ask us about GRC for groups and multiple sites.
What is the difference between a branch and a subsidiary?
A branch is the same company in another location, and a subsidiary is another company in the group. Both have their own data, team, time zone and language; what changes is how they are treated in DORA or in AI Governance, for example.
How many sites can I have?
Premium includes 3 sites and Diamond 5, and this can be extended in your contract. Audexa activates Sites and group at your organization's request.
Can one site see the others' data?
No. Each site keeps its own data. It only sees what the main site shares with it, with the Group label and read-only.
Can I turn an account I already have into a site?
Yes, with the approval of its owner and of Audexa, and with a preview of what changes. A site can also be split off later as an independent organization, keeping its data.
Does the multi-site audit replace certification?
No. It is guidance to help you prepare: Audexa proposes the sample of sites and generates the scope statement, but your certification body confirms the final sample and the certificate is issued by an accredited auditor.
What if my organization has no sites?
Nothing changes: Audexa works as always and nothing is activated unless you ask for it.
Request a demo
See Audexa with your group's structure.
In 30 minutes we look at your sites and subsidiaries, the frameworks that apply to each one and what your group overview would look like in Audexa.
- We go over how your group is organized and who needs to see what.
- We show you the group overview, shared resources and custom roles.
- We explain how Sites and group is activated on your plan.