Montro

Origins

Why Montro exists

Montro was founded in Dublin in 2025 by a financial services compliance lead and an enterprise technologist. Third-party records were becoming what regulators read, and the tools on the market were built to watch suppliers, not to record the decisions made about them.

Timeline of the four frameworks that changed everything, GDPR, DORA, the EU AI Act and NIS2, ending with Montro's founding in Dublin
A Dublin waterfront building with a card showing where Montro lives: headquartered in Dublin, hosted in Frankfurt, read-only collection, penetration-tested

Where we are

Built in Europe, for Europe and the UK

Montro is headquartered in Dublin and hosted in the EU, in Frankfurt. EU and UK regulation is the design centre, not a layer added to a US product.

Data stays in Europe

Collection is read-only, scoped and revocable. Pen-tested, with ISO 27001 certification in progress.

Built from inside the regulatory cycle

A founding team from financial services compliance and enterprise technology. Article-level mapping is part of the product's design, not added on top.

Vision: a decision log showing Harbourline CRM BV accepted with a reason, with its owner, the articles it was decided on and the date

Vision

Third-party records are becoming decision logs.

The firms that get this right will be the ones that can show who decided, on what evidence, and when.

Mission: a register where every entry has an owner and a recorded decision, and nothing is left open

Mission

A record that holds up, kept by the people who own it

Know what you depend on, decide with evidence, and answer the regulator with confidence. People decide; we make them stronger.

Foundation

How we build and why it matters

Montro exists because regulated firms need a third-party record they can stand behind. Four commitments shape how we build it and how we work with our design partners.

People decide

Montro proposes and a person decides. We build to make that decision quick to make and easy to defend, never to take it away.

Nothing left open

Every change ends with a recorded outcome. An unresolved finding shows a firm knew and did not act, so nothing stays open.

An input, not a replacement

Montro feeds the tools you already run and replaces none of them. The register is yours, and it works alongside your GRC, procurement and security tools.

One job, done precisely

We do one thing: the third-party and AI record. Doing less lets us know the articles behind every field.

People

Built in Dublin

We have spent years transforming how large enterprises adopt technology and helping financial institutions do it compliantly. Montro exists because those two jobs have never been in the same room — until now.

Ankur Arora

Ankur Arora

Co-founder

15 years across enterprise SaaS, digital products and customer growth, at Amdocs, Godrej, Sodexo and Chartbeat. Built and shipped products at scale across telecom, consumer, hospitality and media.

Namita Razdan

Namita Razdan

Co-founder

15 years of financial services compliance, across HSBC, EY, Accenture and NTT Data. The article-level regulatory accuracy in Montro comes from her desk.

Get in touch

Questions about the pilot, our security or a regulation? Write to us and a founder will reply.

[email protected]+359 8798 9826

Montro.io (Outproduct Limited)

51 Bracken Road, Sandyford, Dublin, D18 CV48, Ireland

Third-party records are becoming decision logs. The firms that get this right will be the ones that can show who decided, on what evidence, and when.

  • Pen-test summary on request
  • Frankfurt hosting
  • Sample register
  • Expert Series guests
  • Cyber Ireland member

See it on your own suppliers

A read-only connection, about an hour to set up, and a named person who can say yes to a decision.

Priced to scope — never per seat, never per supplier. Upgrade only when the evidence earns it.

Montro register dashboard during the 30-day proof of concept

Questions

Everything you need to know about Montro and how we operate.

Because the regulations come first. Montro is built in Dublin around the articles of GDPR, the EU AI Act, DORA and NIS2, so each register field traces back to the rule that asks for it.

On AWS in Frankfurt. Montro stores the register itself (app names, owners, sources and decisions), not the data inside those apps. Our sub-processors, and the safeguards for any transfer, are listed on the Trust & Security page.

Through read-only connections to systems you already run: sign-in and OAuth grants, directory and licence data, finance systems and cloud estates, plus an optional browser extension that is off by default. What it finds is raised as candidates for your team to decide on.

Yes. AI services are recorded in the same register as your other suppliers, including AI a supplier switches on inside a product you already approved.

Most tools stop at telling you something changed. Montro keeps the record: each change arrives with its source, the supplier confirms it, a named person decides, and the decision stays on the register. It is built in Dublin for EU and UK regulation, and priced to scope rather than per supplier.