ChaptersEventsBlog

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for RAVENCORD OÜ

Listings for RAVENCORD OÜ

Ravencord (RAVENCORD OÜ) is an EU-based software company registered in Estonia, specializing in secure institutional software for regulated environments. We build decision-support systems and regulatory intelligence platforms for organizations operating in mission-critical sectors including financial regulation, construction compliance, and municipal governance. Our flagship products include Finlex Pro (EU financial regulation search platform covering MiCA, DORA, AML, PSD2, and 2,400+ indexed documents) and APEX Regulation Guide (UAE construction regulatory research platform with 18,000+ articles across Dubai Building Code, DEWA, and 59+ official sources). Our technology stack leverages cloud-native architecture with Next.js, FastAPI, and managed cloud services (Vercel, Render, Qdrant Cloud), secured with Clerk authentication, Stripe payments (PCI DSS Level 1), and end-to-end TLS encryption. We follow security-by-design principles with GDPR compliance, documented data processing agreements with all sub-processors, and comprehensive security policies covering all CSA CCM domains. This CSA STAR Level 1 self-assessment demonstrates our commitment to cloud security transparency and best practices.

APEX Regulation Guide

APEX Regulation Guide is a SaaS regulatory intelligence platform for the UAE construction industry, developed and operated by Ravencord OÜ (Estonia). The pl...

Listed Since: 2026-02-26

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

FinlexPro

FinlexPro is a SaaS regulatory intelligence platform for EU financial regulation, developed and operated by Ravencord OÜ (Estonia). The platform provides in...

Listed Since: 2026-02-27

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).