Free Exposure Check · No Signup

Is your group exposed to DORA?

DORA is an EU law, but it reaches well beyond the EU. Answer 5 quick questions to see whether your group - including non-EU parents and their EU entities - is exposed, and through which route.

~2 minutes 5 questions Instant result No signup

Question 1 of 5

Where is your group headquartered?

DORA reaches non-EU groups indirectly; EU-based groups are usually directly in scope.

Question 2 of 5

Does your group include a subsidiary or branch authorised as a financial entity in an EU member state?

A bank, investment firm, payment/e-money institution, insurer, CASP, fund manager, etc. - the classic post-Brexit EU branch counts.

Question 3 of 5

Do you provide ICT services to EU financial entities?

Cloud, software, data, processing, analytics, trading or other technology services supplied to EU banks, insurers, investment firms, etc.

Question 4 of 5

Have EU clients asked you to sign DORA clauses, grant audit rights, or complete resilience questionnaires?

EU financial entities are legally required to push DORA contractual terms (Articles 28-30) onto their ICT providers.

Question 5 of 5

Are you a large, widely-used provider to the EU financial sector?

Hyperscalers and major data/analytics providers can be formally designated Critical ICT Third-Party Providers (CTPPs) under direct EU oversight.

Please answer every question for an accurate read.

Your exposure routes

EU entity
Group parent
ICT supplier
Client flow-down
CTPP risk

Indicative only. This tool is an educational aid, not legal advice or a formal regulatory determination. A non-EU parent is not itself a DORA entity, but its EU subsidiaries are, and ICT supply / contracts create separate obligations. For a definitive answer, get a written Scope Determination or consult a legal partner.

Your next step

Free tools that pick up where this one stops.

Supplier?Get the questionnaire your EU clients will sendThe Article 28-30 due diligence, from your side of the table, as a free Excel.Open the toolIn scope?Confirm the entity classificationExposure is not the same question as being a regulated financial entity.Open the toolBuying ICT?Score your own providersIf DORA reaches you, your providers reach you too.Open the tool
Keep your results

Email me my results + the DORA action checklist

We will send your results and the 75-control DORA compliance checklist to your work inbox. Unsubscribe anytime.

Practitioner tools for DORA compliance teams

Workbooks, playbooks and certifications built for EU financial entities. Add several to your cart: volume discounts apply automatically.

academy-bundle

DORA Certifications Bundle

399 € excl. VAT
academy

DORA for IT & Security Teams

199 € excl. VAT
academy

DORA for ICT Providers & Vendors

199 € excl. VAT
149
certificates issued
92
certified professionals
21
programmes awarded

Browse the full library · Excel toolkits · Certifications

How Compliant Is Your Institution?

Take our free 5-minute assessment and get an instant DORA compliance score with personalised recommendations.

Get Your Free DORA Score Join Free Monthly Webinar