GTM Glossary · Compliance & Legal
DORA (Digital Operational Resilience Act)
The EU regulation setting ICT risk and resilience requirements for financial entities and the technology providers they depend on.
[01]What It Means
DORA applies to banks, insurers, asset managers, payment institutions and their ICT third-party providers. Contracts must carry specific provisions: subcontracting controls, data location, audit rights, and documented exit strategies. Providers supporting critical functions face the heaviest scrutiny, including resilience testing obligations.
[02]Why It Matters
If your product touches an EU financial entity, DORA decides whether the contract can be signed at all. Sales cycles into that vertical stall permanently when the required clauses cannot be met, which is why readiness belongs in enablement material rather than in legal escalation.
[03]Where It Goes Wrong
[04]Related Terms