Who submits the register?

You, as the financial entity. I deliver the register and the checks; submission and responsibility stay with you.

We are an ICT provider to banks or insurers, not a financial entity.

Then your customers keep the register, not you. They do have to list you in it and align their contracts with you with DORA. I can help you prepare the information and contract clauses they will ask you for.

Available from the first quarter of 2027

DORA register of information

The register of ICT contractual arrangements DORA requires, as structured data you can update every year.

For whom

Smaller financial entities under DORA that do not need a large consultancy.

Why now

Financial entities must submit a register of their ICT contracts and providers every year.
The register is data first: keeping it as data makes the yearly update simple.

What you get

Complete register of information following the European templates, checked for completeness and consistency.
A source you can update yourself, with a yearly update as an option.

Not included

Threat-led penetration testing (TLPT) and the ICT risk management framework itself.

Frequently asked questions

Who submits the register?: You, as the financial entity. I deliver the register and the checks; submission and responsibility stay with you.
We are an ICT provider to banks or insurers, not a financial entity.: Then your customers keep the register, not you. They do have to list you in it and align their contracts with you with DORA. I can help you prepare the information and contract clauses they will ask you for.