CELLAR
Cellar by Armagnac Consulting

Outsourcing and delegation due diligence for the entire fund-servicing chain

One platform to design, send, review, score and renew the operational due diligence that every party servicing a fund owes the others under CSSF 22/806.

Built to CSSF 22/806  ·  EU-hosted (Frankfurt)  ·  GDPR-compliant  ·  no passwords for recipients
The reality of CSSF 22/806

Everyone diligences everyone.

Every party servicing a fund must run outsourcing DD on the others, and answer theirs in return.

Management Company Fund Administrator Depositary Distributor ICT / IT Provider Legal & Compliance Corporate Secretary

Each link is a mutual due-diligence obligation. The same firm is both reviewer and respondent, many times over, and most run it on spreadsheets, email and shared drives — with a weak audit trail, and scoring and renewals all done by hand.

Why it works

Built for users

A clean and structured workflow. Focused on quality deliverables. Addressing regulations.

1

CSSF 22/806

The spine. Outsourcing arrangements for every CSSF-supervised entity, ICT and non-ICT. The regime that puts every party in the chain in scope.

2

CSSF 18/698

The fund-manager overlay. Governs both AIFMs and UCITS management companies, with risk-based renewal at 3 / 2 / 1 years.

3

DORA

The ICT-third-party overlay. Digital operational resilience for all financial entities, applied to technology providers across the chain.

What Cellar does

The whole DD lifecycle in one platform

1
Design the questionnaire
2
Secure outreach
3
Review & risk-score
4
Formal DD report
5
Ongoing monitoring & renewal
6
Governance pack
7
Compare

Recipients need no account and no password.

They answer through a single secure link, then everything routes back to you automatically, in one audit trail.

One platform, both roles

Run a due diligence — or respond to one

Under CSSF 22/806 every firm in the fund-servicing chain is due-diligenced by its counterparties and runs due diligence on its own delegates. Cellar serves both directions, from one login.

Run a due diligence

Design your questionnaires, send secure links to your delegates, review and four-dimension risk-score their answers, then keep a board-ready DD register, ongoing-monitoring trail and renewal reminders. The full supervisor workflow.

Respond to a due diligence

Pre-fill your own DDQ once, attach your documents and keep a reusable, versioned DD pack. When a counterparty asks, send a secure, time-limited link to a branded report — and monitor exactly which counterparty opened and downloaded what, and when.

Consistent, comparable, auditable

Four-dimension risk scoring, every DD

Every review ends with the same numeric risk profile, whatever questionnaire it ran on, auto-scored to an overall rating that drives the renewal date.

O
Operational
L
Legal / Regulatory
R
Reputational
F
Financial
LOW
3 years
MEDIUM
2 years
HIGH
1 year
The business case

Less time per DD, lower cost at volume

32 hrs → 8 hrs
staff time per delegate due-diligence review
up to 60%
lower total cost vs in-house, at 40 to 60 DDs / yr
Cellar removes roughly three-quarters of a DD that is administration, so your hours go to the judgment that cannot be automated. Break-even at roughly 5 DDs a year: at low volume you buy quality and auditability, a defensible methodology and a clean audit trail in place of ad-hoc spreadsheets. As volume grows, the staff-hour saving compounds, and an optional Managed DD service lets Armagnac run the review for you.
Pricing

Pricing shared on request

The full tier and options pricing is shared with prospects after an introductory call. Enter the access code you were given to unlock it.

Thomas Janneau
Why Armagnac

Built by a practitioner

Thomas Janneau · Founder, Armagnac Consulting · former Conducting Officer

25 years in Luxembourg fund services, including roles at Blackstone, Credit Suisse and J.P. Morgan.

CELLAR is the operational due-diligence experience of a working Conducting Officer, turned into user-friendly software.

  • EU-hosted (Frankfurt), GDPR-compliant
  • No passwords for recipients, by design
  • Inherits SOC 2 Type 2 infrastructure
  • Netlify DPA and DORA addendum on file

See it on your own delegate chain.

A 30-minute walkthrough, mapped to the parties you actually diligence.

Request a demo