Skip to content

Assessment Methodology

How we assess ICT contract compliance with DORA Article 30 requirements

DORA Article 30 Requirements

DORA Article 30 establishes mandatory elements that must be included in contracts between financial sector entities and ICT service providers.

📋

Service Level Agreements

Specific and measurable service levels for availability, performance and support

🚪

Exit Strategy

Clear terms for contract termination and data migration

🔍

Audit Rights

Access for auditing and inspection of ICT systems

🚨

Incident Reporting

Obligation to report ICT incidents and their impact

🔒

Data Protection

Data location and processing conditions

🔗

Subcontracting

Terms for using and notifying about subcontractors

📍

Location Requirements

Service provision and data processing locations

⚖️

Termination Terms

Grounds and procedures for contract termination

Assessment Process

1

Contract Upload

Upload your ICT contract in PDF or DOCX format. The file is processed securely.

2

Automated Analysis

The system analyzes the contract against all DORA Art. 30 requirements, searching for matching clauses.

3

Results Generation

You receive a detailed report of found, partially found, and missing clauses with recommendations.

4

Suggested Clauses

For missing requirements, we provide suggested contract clauses that you can use.

Scoring Methodology

The compliance score is calculated based on found requirements. Partially found requirements give half points.

80-100%

Compliant

50-79%

Partially Compliant

0-49%

Non-Compliant