Compliance
DORA
DORA (Digital Operational Resilience Act) is the EU regulation for digital operational resilience in the financial sector, in force since January 2025. LoyJoy is designed for DORA requirements and used by banks and insurers.
Also known as: Digital Operational Resilience Act
What DORA governs
DORA (Regulation (EU) 2022/2554) requires banks, insurers, investment firms, and other financial entities to demonstrably strengthen their digital resilience. IT third parties providing critical functions are in scope as well.
Core pillars
- ICT risk management with documented processes
- Incident reporting to the competent authority
- Resilience testing, including penetration tests
- Third-party risk management with mandatory contract clauses
- Information sharing on cyber threats
DORA at LoyJoy
LoyJoy is designed for DORA: documented backup and recovery processes, annual penetration test, contractual guarantees for financial customers, EU hosting, and GDPR-compliant processing.