DORA Compliance
We bring you into compliance with DORA (Regulation (EU) 2022/2554), the directly applicable regulation for the EU financial sector and critical ICT providers. We prepare the documentation package and advise during implementation
Why Us
Because FinTech companies need to meet DORA requirements
Cybersecurity lawyers who know exactly which document, with what content, each of DORA's five pillars and the relevant RTS/ITS require
-
Certified privacy professionals: CISSP, CIPP/E, CIPP/US, CIPM, CIPT, FIP.
-
We know exactly what the law requires
A combination of legal, technical and business experience -
Working with corporations
We build governance for market leaders and international companies -
CIPT and CISSP on the team
We see which controls actually work as evidence of compliance

We'll help create new procedures and revise existing ones, to meet business goals and comply with DORA while taking regulators' requirements into account
Our Services
-
Applicability and the proportionality principle
First we establish whether you fall within the scope of the Regulation. DORA covers roughly 20 types of financial entities + critical ICT providers. Result: an applicability conclusion + the number and description of obligations. -
ICT Risk Management Framework
We create the framework and processes for risk management: a resilience strategy (approved by management), information security policy, access/MFA policies, cryptography, network, change management, vulnerability management, etc. Result: ICT RM Framework + policy package. -
Register of Information and third-party inventory
The Register of Information is a register of all ICT contracts, submitted annually, a policy for ICT services supporting critical functions, exit strategies. Result: Register of Information + third-party management policies.
Certified ExpertsCertified Experts
Our team holds certifications in privacy and cybersecurity
Internationally Recognised Expertise
Relevant and Practical Articles
- Data protection officer
- AI compliance officer
- Data privacy compliance
- Diia.City
- Digital Millennium copyright Act
- Trademark in IT
We Write About What We Practise
ІP, GDPR, contracts and disputes, as well as the legal aspects of implementing technologies such as artificial intelligence and best practices for implementing specific legal solutions.