Frameworks
Run the annual risk management programme for authorised agents with the WRV
Running the Werkprogramma Risicobeheersing Volmachten in spreadsheets makes every annual review a reconstruction.
Tidal turns the WRV into a managed programme. Assign every task in the work programme, record the outcome of each check, and give your accountant and insurers current evidence.
These companies run their compliance on Tidal Control
The WRV in depth
The WRV sets out what an authorised agent has to check each year to keep the risks of its authority under control: how risks are accepted and priced, how the portfolio is managed, how claims are handled, how the financial administration is kept, and how the organisation, its information security and its compliance are arranged.
When the programme lives in a spreadsheet, the checks are done in a rush before the deadline and the evidence is scattered across mailboxes and shared drives. The next year starts from scratch.
In Tidal each task has an owner and a schedule, so checks are spread over the year and the record of each one is kept with the task.
How Tidal helps you get certified
Hit the ground running
Start with our pre-built controls, policies, and risk assessment templates.
Our platform guides you through establishing your ISMS scope, identifying assets, and implementing right-sized controls that match your business needs.
Why Tidal Control
We understand your challenges because we've been there. Our team of GRC experts and security professionals built Tidal to solve the real problems compliance teams face every day.
Made in Europe
Built and hosted in Europe. Your compliance data stays in the EU for full control and peace of mind.
Continuous automation
Automated evidence collection from cloud providers and development tools working 24/7 for you.
Real security
Build secure systems that protect your business and satisfy auditors, not just check compliance boxes.
Go beyond the WRV
Explore frameworks that support authorised agents and insurers.
DORA
Working with insurers in the EU? DORA sets the ICT risk management requirements that insurers pass on to the parties they rely on.
GDPR
Processing policyholder data? The GDPR tasks in the WRV build on the obligations of data protection law.
ISO 27001
Want a certifiable information security foundation? An ISO 27001 ISMS covers the information security tasks of the WRV.
ISO 9001
Strengthening quality control? ISO 9001 gives structure to the internal quality checks the WRV asks for.
Integrate with your existing tools
Testimonials
What our customers say
With a single click, one Tidal test checks dozens of disks for encryption. Doing that manually would take a lot of time.
Frequently asked questions
The Werkprogramma Risicobeheersing Volmachten (WRV) is the risk management work programme for authorised insurance agents (gevolmachtigd agenten) in the Netherlands. It is published by the Verbond van Verzekeraars and the NVGA. The 2026 edition was assessed by COPRO on 15 April 2026 (26008).
Authorised agents, who accept risks, set premiums and handle claims on behalf of insurers, run the WRV as their annual risk management programme. The outcome is reported to the insurers that granted the authority, and the accountant reports on it as well.
The tasks of the WRV 2026 are listed in Annex 1 and grouped into acceptance, portfolio management, claims handling, financial administration, information security and automation, and the organisation as a whole, including quality control, fraud, complaints, GDPR and outsourcing. Tidal holds every task with its code, so the structure matches the protocol.
The WRV tasks are seeded in Dutch, the language the protocol is published in. The rest of the platform works in English as well as Dutch.
Each WRV task in Tidal has an owner, a schedule and a record of the checks performed and their outcome. When the accountant asks for the evidence behind a task, it is attached to the task itself, with the date, the person who did the check and the follow-up of any finding.
The information security and GDPR tasks of the WRV overlap with what DORA and the GDPR ask of financial entities and processors of personal data. Tidal lets you link those tasks to the same controls, so evidence for information security or data breaches counts for each framework.