root@fr:~$ lexique/dora

DORA

Compliance and law

The Digital Operational Resilience Act (Regulation EU 2022/2554), applicable since 17 January 2025: it requires the financial sector - banks, insurers, asset managers, payment providers - to control its digital risks, including those of its providers. An AI vendor is an ICT third-party provider like any other: a framed contract (Articles 28 to 30), entry in the information register, reversibility and auditability on demand.

Also called Digital Operational Resilience Act, Résilience opérationnelle numérique, Règlement 2022/2554

Go furtherDORA and your AI provider: the register of information checklist

Related terms

Registre d'informations (DORA)

Compliance and law

The inventory Article 28(3) of DORA requires from every financial entity: all its contractual arrangements for ICT services, kept up to date in a register...

NIS2

Compliance and law

A European cybersecurity directive that extends risk-management and incident-reporting obligations to a wide range of essential and important sectors, with...

RGPD

Compliance and law

The General Data Protection Regulation, the EU framework in force since 2018 governing the collection and processing of personal data: lawful basis,...

Journal d'audit

Governance

A timestamped, tamper-evident record of what an agent did: requests, models called, sources cited and decisions. It makes AI use traceable and accountable,...

Résidence des données

Sovereignty

The physical and legal location where your data is stored and processed. Keeping it in France or Europe is a necessary condition for sovereignty, but not...

Does this notion touch your business?

Go from definition to deployment: a first agent on your data, in France, on a model you control end to end.

Sovereignty Let's talk about your AI