DORA · Regulated finance
Your DORA register of information, built from your contracts.
Juritas reads your ICT third-party contracts, builds the register, checks it against the EBA’s validation rules, and checks each contract against Article 30.
The obligation
A register that has to be right, every year.
- Register
Every ICT arrangement, recorded
Providers, the services they deliver, the functions they support and the entities that use them, in the EBA’s templates. - Validation
Checked before it’s accepted
Submissions are checked against the EBA’s validation rules. Errors found by the authority cost time you rarely have. - Contracts
Article 30 in every contract
ICT contracts must contain specific provisions, with more required where the service supports a critical or important function.
How Juritas helps
From contracts to a register you can submit.
Register of information
Built from what your contracts actually say.
Juritas fills the register’s templates from your ICT contracts: providers, services, functions, dates, notice periods and locations. Where a contract is silent, it shows the field and the contract, so the gap is answered rather than guessed.
- Templates filled from the contracts themselves
- Every value traced to its source
- Missing information listed, by contract
app.juritas.com
Register of information
B_02.01 · Contractual arrangements
- 42 arrangements read from contracts
- Notice period for 3 arrangements not stated in the contract
- Governing law and dates traced to their clauses
Illustrative example
EBA validation
Checked against the EBA’s rules before you submit.
Juritas runs the register through the EBA’s validation checks and explains each failure in plain language, with what to change. Then it prepares the reporting package in the EBA’s format, for your review.
- The EBA’s validation rules applied
- Each failure explained, with the fix
- Reporting package prepared for review and submission
app.juritas.com
Validation
Before submission
- B_05.01: provider identifier missing for one provider
- B_02.02: end date before start date on one arrangement
- All other checks passed
Illustrative example
Article 30
Each contract checked, and the gaps drafted.
Every ICT contract is checked against Article 30(2), and against 30(3) where it supports a critical or important function. Juritas quotes the clause that meets each requirement, marks what’s missing, and drafts the amendment.
- Article 30(2) for all ICT services
- Article 30(3) for critical or important functions
- Amendments drafted and tracked to signature
app.juritas.com
DORA Art. 30(2)
Cloud hosting agreement
- (a) Description of functions and services
- (b) Locations of services and data processing
- (f) Assistance in ICT incidents
Illustrative example
Supplier changes
Subcontractor changes, seen as they happen.
Juritas watches your providers’ subprocessor and terms pages, and tells you when something material changes, with the contractual right and deadline to respond.
- Provider pages watched daily
- Material changes flagged
- Your right and deadline to object shown
app.juritas.com
Supplier change
Cloud provider · subprocessors
- New subprocessor added for support services
- Right to object within 30 days
Illustrative example
Beyond DORA
The same checks for GDPR and NYDFS.
- GDPR Art. 28
Processor terms
Contracts with processors checked against Article 28(3), with sub-processor conditions and audit rights included. - NYDFS 500.11
Third-party service providers
For New York-regulated firms, contracts checked for the provisions Part 500 expects of third-party service providers.
Questions
DORA, answered.
- Who is DORA for?
- The Digital Operational Resilience Act applies to banks, insurers, investment firms, payment and e-money institutions and other financial entities in the EU. Each must keep a register of information on its ICT third-party arrangements and report it to its competent authority.
- Does Juritas replace our own review?
- No. Juritas reads the contracts and does the checking and assembling; your team reviews what it found, settles anything the contracts don’t say, and approves the register before it is submitted.
- What if a contract doesn’t say what the register needs?
- Juritas shows exactly which fields it could not fill from the contract, so the gaps can be answered by the people who know, rather than discovered by the validation rules at submission.
Get started
See your ICT contracts against DORA.
Walkthroughs arranged personally · Contract Audit: Free · 2–5 contracts under mutual NDA · Reply within 48 hours