DORA is an EU law, but it reaches well beyond the EU. Answer 5 quick questions to see whether your group - including non-EU parents and their EU entities - is exposed, and through which route.
Your exposure routes
Indicative only. This tool is an educational aid, not legal advice or a formal regulatory determination. A non-EU parent is not itself a DORA entity, but its EU subsidiaries are, and ICT supply / contracts create separate obligations. For a definitive answer, get a written Scope Determination or consult a legal partner.
The Executive All-in-One bundle gives you every pillar playbook, the benchmark and an executive roadmap — or get a written Scope Determination from a legal partner.
We will send the 127-point DORA compliance checklist to your work inbox and keep you posted on RTS/ITS updates. Unsubscribe anytime.
Take our free 5-minute assessment and get an instant DORA compliance score with personalised recommendations.