DORA · Article 30 · ICT third-party contracts
Make DORA Article 30 contract reviews more efficient.
An AI-powered copilot that helps identify relevant contractual clauses, map them to regulatory requirements and highlight potential gaps. It runs on-premise, so sensitive contract data stays within your own environment and is never sent to external cloud AI models.
Description of functions and ICT services
Locations of service provision and data processing
Termination rights and minimum notice periods
Participation in threat-led penetration testing
Unrestricted rights of access, inspection and audit
Illustrative interface. Findings are suggestions for human review.
01 / The problem
Article 30 reviews are slow, manual and hard to evidence.
Reviewing ICT third-party contracts against DORA Article 30 is time-consuming. Teams manually search through lengthy contracts, interpret regulatory requirements clause by clause and document the evidence behind every conclusion.
Lengthy contracts
Relevant provisions are spread across master agreements, schedules, annexes and amendments, and have to be located by hand.
Interpretation
Each Article 30 requirement must be read against contractual language that rarely mirrors the regulation's wording.
Evidence
Reviewers need to record where each requirement is addressed, or not, in a form that can be checked and revisited.
02 / The solution
AI that does the searching, so reviewers can focus on judgement.
The copilot applies AI to the most repetitive parts of an Article 30 review and presents its findings with references back to the contract.
Identify requirements
Surfaces the DORA Article 30 requirements relevant to the contract, including those that apply to critical or important functions.
Scan contracts
Reads ICT contracts and their schedules to find the clauses that relate to each requirement.
Map clauses
Links each relevant clause to the specific requirement it addresses, so coverage is visible at a glance.
Highlight gaps
Flags requirements with no clear contractual coverage and keeps traceable evidence back to the source text for human review.
On-premise AI
The copilot runs inside your own environment. Contract text is processed there and is not sent to external cloud AI models.
03 / How it works
Three steps from contract to reviewed findings.
- 1
Discover requirements
Establish which Article 30 requirements apply to the ICT service and contract in scope.
- 2
Analyse contracts
The copilot scans the contract, locates relevant clauses and maps them to each requirement.
- 3
Review findings and potential gaps
Reviewers work through mapped clauses and flagged gaps, each linked to its source text.
04 / Human oversight
Built to support compliance professionals, not replace them.
The copilot accelerates the search and mapping work. Legal judgement and the final assessment of whether a contract meets DORA requirements remain with your team.
- Every finding links back to the exact contract text it is based on.
- Reviewers confirm, adjust or reject each mapping and flagged gap.
- The platform makes no automatic compliance decisions.
- Outputs support legal and compliance review; they are not legal advice.
05 / Demo