The EU Digital Operational Resilience Act is mandatory since January 2025 for banks, insurers, fintechs, and crypto providers. Check your AWS and Azure infrastructure against all DORA ICT risk requirements in minutes.
✓ 1 free scan/month✓ No credit card✓ Hosted in Germany
DORA applies to banks, insurers, fintechs, payment processors, and crypto exchanges. ConformScan maps every check to the exact DORA article.
Manual DORA readiness assessments take weeks. ConformScan scans your entire cloud infrastructure in under 2 minutes.
Generate DORA compliance reports in German, French, or English with article-level evidence for your regulator.
Your data never leaves the EU. 100% GDPR-compliant infrastructure on Netcup, Karlsruhe — critical for financial entities.
The Digital Operational Resilience Act (DORA, EU 2022/2554) entered into force on January 17, 2025. It establishes a comprehensive ICT risk management framework for financial entities operating in the EU.
Who is affected? Around 20,000 entities including banks, insurance companies, investment firms, payment institutions, electronic money institutions, crypto-asset service providers, and critical ICT third-party providers (CTPPs).
Key pillars: ICT risk management (Art. 5-16), incident reporting (Art. 17-23), operational resilience testing (Art. 24-27), and ICT third-party risk management (Art. 28-44).
Penalties: Up to €10 million or 5% of total annual worldwide turnover. Periodic penalty payments and public disclosure of violations are also possible.
DORA and NIS2 share approximately 40% of requirements, particularly around ICT risk management and incident reporting. However, DORA is lex specialis — it takes precedence over NIS2 for financial entities.
DORA goes further than NIS2 in several areas: mandatory operational resilience testing (TLPT), detailed ICT third-party risk management contracts, and specific incident classification timelines for financial regulators (ECB, EBA, ESMA, EIOPA).
ConformScan scans for both NIS2 and DORA simultaneously — you can see which requirements are shared and which are DORA-specific in a single scan.
1 free scan/month. No credit card. Results in minutes.