The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you

Does DORA reach you, and as what?

Three answers, read by the same determination our portal runs. The Regulation has applied since 17 January 2025.

Does DORA reach you, and as what?

Three answers, read by the same determination the portal runs. Nothing you pick is sent or stored.

Which are you under DORA?

A bank, insurer or investment firm owes the register and the incident clocks; a provider owes the contract clauses its customers ask for.

Answer each question and the reading appears here.

What each side carries

A financial entity (Article 2(1))

110 requirements in the determination, the register of information and the incident reports among them.

An ICT third-party service provider (Article 3(19))

10 in every ICT service contract, 8 more where the service supports a critical or important function, and 15 subcontracting terms where it may be subcontracted.

Questions about this page

What happens to the answers?

They stay in the page. The reading is computed in your browser, and nothing is sent or stored.

Do we need an account to read it?

No. The determination is free and open, with the articles named so you can check each one. An account is for running the system that keeps the answer current.

Is this legal advice?

No. It is the instrument's own scope rules read against your answers, from the catalogue our portal seeds.

Free tools