DORA Compliance Checklist
Get the clarity you need to navigate DORA — and the structure to act on it — with our step-by-step checklist.
Pass your DORA filing with 0 guesswork.
Find out exactly what is missing from your register in under 60 seconds.
Drop your ICT contracts in. We map all 101 fields, flag exactly what is missing, and give you the verbatim proof for what is there. No guessing, no ChatGPT hallucinations, zero lock-in.
We do the work if the software fails. Upload one supplier’s contracts today and get your ranked gap report plus a formatted export file, free. If our software misses a required field that is clearly stated in your contract, our founders will manually audit your next three suppliers by hand, over the weekend, at no charge.
- Stored and processed in the EU.
- Isolated per tenant.
- Never used to train AI models.
- Deleted on request.
You are flying blind until the regulator rejects you.
Your DORA register was filed. The contracts behind it did not stop moving. An amendment is signed, a renewal comes through, a new vendor is onboarded. Each one sends you back into master agreements, SLAs and order forms, hunting again for 101 columns spread over 15 ITS templates that have to reconcile with one another.
101 columns across templates B_01.01 to B_07.01. EBA annotated table layout, DORA reporting framework 4.0.Commission Implementing Regulation (EU) 2024/2956, Article 3(1). Templates and instructions at Annex I.Financial entities shall use the templates set out in Annex I to IV to maintain and update the register of information in accordance with Article 28(3) of Regulation (EU) 2022/2554, at entity level, or at sub-consolidated and consolidated level.
Maintain and update. Not file once. If you guess, or if you let a general purpose chatbot guess for you, the register drifts away from your contracts and the next file gets rejected. You lose months, and you attract supervisory attention you do not want.
After you file
Register filed
It reflects the contracts you held then.
Amendment signed
Service levels or exit terms change.
Contract renewed
A new term and a new order form.
New vendor onboarded
A new provider, with its own subcontractors.
Supervisor asks for the register
It has to match the contracts you hold today.
Every step in between means reading the master agreement, the SLAs and the order forms again.
Evidence
Do not trust AI. Trust the exact sentence in your contract.
Click through a real LeDora run below. The gap report lists what is missing, and clicking any answer highlights the exact sentence in the original PDF that it came from.
LeDora by Letzscale
- 1 Upload
- 2 Read
- 3 Report
Documents
Google Cloud EMEA Limited
This vendor’s contracts are uploaded. Read them, and LeDora fills its register.
Your documents
4 ready · 11 pages
DocumentKindPagesStatus
meridian_gcp_master_agreement.htmlHTML—Ready
meridian_gcp_order_form.pdfPDF1Ready
meridian_gcp_sla.pdfPDF4Ready
meridian_gcp_dpa.pdfPDF6Ready
An interactive demo built from a real LeDora run. The contracts are synthetic.
AI reads. Rules check. Every answer cites the sentence.
LeDora uses AI to read your contracts, then checks every answer against fixed DORA rules. Nothing is guessed: each finding links to the exact clause and page it comes from, so your team can verify it in seconds.
Process
We do not replace your system. We feed it.
You do not need a heavy GRC platform, and you do not need to change how you work.
- 1
You upload.
Drop your supplier PDFs into LeDora.
- 2
We audit.
We map your documents against the exact CSSF and EBA specifications.
- 3
You export.
We hand you a byte-faithful export file that plugs straight into the spreadsheet or compliance tool you already use.
We built this for independent, mid-sized Luxembourg financial firms.
Who this is for
- Mid-sized ManCos, AIFMs, UCITS management companies and payment institutions supervised by the CSSF or the CAA.
- Firms managing DORA in spreadsheets that barely survived the first filing cycle.
- Consultancies and fiduciaries processing 30 client portfolios who want it done in a fraction of the time.
Who this is not for
- Tier-1 global banks looking for a multi-year IT integration.
- Firms that want an AI to guess their compliance answers without proof.
What LeDora does not do
- Not a filing tool. It stops at the export file. You file it.
- Not a replacement. It feeds your GRC platform, your spreadsheet or your adviser.
- Not a chatbot. It answers the regulation’s questions, not the contract’s.
Questions
Questions your IT and procurement teams will ask
Does my data leave the EU?
No. Your documents are stored and processed in EU data centres in Frankfurt, Germany, isolated per tenant, and deletable on request.
Will this train AI models?
Never. Your contracts are never used to train any AI model, by us or by any provider in our processing chain. That is contractual, not a setting.
Do I need IT to install anything?
No. LeDora is a secure web application. There is no software to deploy and no six-month onboarding cycle.
How is LeDora priced?
Pricing is deterministic and calculated strictly on the number of ICT vendor contracts reviewed, starting at €9,967 for up to 100 contracts. We do not charge variable fees based on your assets under management or firm headcount.
See the pricing matrixDoes Letzscale provide legal advice or certify compliance?
No. LeDora provides a software-driven evidentiary audit trail. We extract verbatim contractual clauses and compare them against published ESA taxonomies. We never assert legal compliance on your behalf; we provide the definitive evidence layer for your internal compliance team or external counsel to act upon.
What happens if our vendor inventory exceeds our vendor limit?
You do not need to move up an engagement if you slightly exceed your limit. You can expand capacity in fixed blocks of 10 contracts for €1,500 per block, giving you complete cost control without contract disputes.
Why is the Register Validator Suite included for free?
A register that passes CSSF portal validation can still be materially inaccurate if the underlying vendor contracts lack mandatory Article 30 protections. We bundle the validator to ensure your register is both technically compliant and legally verifiable.
Can we purchase the Validator separately?
Yes. If your contracts have already undergone a thorough manual legal review, you can license the automated validation engine for €2,000 per year to verify formatting, GLEIF data, and cross-template consistency prior to submission.
Can we upgrade from the Standalone Validator to LeDora?
Yes. If file validation reveals inconsistencies or if your team requires statutory contractual reconciliation, 100% of your €2,000 validator fee is credited directly toward a Core or Enterprise engagement.
How does the Free Audit work without sharing sensitive data?
You submit a single, non-critical ICT vendor contract under a mutual non-disclosure and data processing agreement. We run our statutory parsing engine and return a concrete gap report with verbatim clause citations within 24 hours, proving the engine's precision before any commercial commitment.
Run your free Gap AuditResources
Learn more about DORA
Short, practical explainers on what DORA asks for and how to close the gaps.
How does DORA impact Luxembourg entities: key implications to consider
What the regulation means for CSSF- and CAA-supervised firms and their ICT providers, with practical guidance on where the gaps usually sit.
Map ICT contracts to the DORA Register of Information — without guessing
LeDora maps ICT contracts to the DORA register fields, flags what is missing, and cites the verbatim contract text for what is there.
Stop guessing on your compliance. Your next filing cycle is coming.
Get absolute certainty on your DORA register today, without changing how you work.
Demo
Request a demo
Tell us a little about your setup. We reply within one business day.