A document store answers what you hold. A review asks what you knew, when you knew it, what changed, what you did about it and who decided. IQON records those answers as the work happens, so the evidence describes the process and not just its attachments.
Reconstruction is where compliance work becomes expensive and uncertain. Someone goes back through inboxes, shared drives and memory to assemble a defensible account of a decision made eighteen months ago.
If the record is written as the decision is taken, there is nothing to reconstruct.
Every screening result, document, task and decision on the relationship, in sequence.
The conclusion, the person who reached it and the reasoning that supported it.
What changed, when it was detected and what happened as a result.
What the relationship looked like on a given date, not just how it looks today.
Where each piece of information came from and when it was last confirmed.
A structured account for an auditor, a regulator or an internal review.
DORA (EU) and vendor risk
Financial institutions are required to manage and monitor ICT third-party risk under DORA.
IQON supports this by providing:
structured vendor data
ownership and UBO visibility
continuous monitoring and alerts
risk classification and audit trail
IQON can be used as part of a broader DORA framework for third-party risk management.
IQON automates the preparation of a decision, never the decision itself. Screening runs automatically. Documents are chased automatically. Risk is calculated and presented. The conclusion belongs to a person, and the record says who.
That is what makes the evidence defensible: not that a system did the work, but that a responsible individual made a judgement on a complete picture, and it can be shown.