What is DORA? The EU rules on tech resilience for financial firms
By SendPay Business · · 2 min read
- 1Add your photo ID
- 2Add proof of address
- 3Checked and verified
DORA, the Digital Operational Resilience Act, is an EU law that makes financial firms prove they can withstand and recover from IT problems and cyber attacks. It has applied since 17 January 2025 and covers banks, payment and e-money institutions, crypto firms, insurers and more.
DORA's five main areas
Tap to explore
Tap each one to see what it means.
ICT risk management
firms need a framework to identify, protect against and recover from tech risks.
Incident reporting
major IT incidents must be classified and reported to regulators.
Resilience testing
systems must be tested regularly, with advanced testing for larger firms.
Third-party risk
contracts with tech suppliers, such as cloud providers, must meet set standards.
Information sharing
firms are encouraged to share threat information with each other.
Tech suppliers are in scope too
DORA lets EU authorities directly oversee tech providers judged critical to the financial sector, such as major cloud platforms. That's new, as rules used to apply only to the financial firms themselves.
Try it
Name your platform and watch it come to life
Type a name, tap a colour and pick what it does. The phone changes as you go.
Colour
What it does
Design and preview your whole platform free, then launch when you are ready.
What it means for fintechs
Fintechs serving EU customers need clear records of their systems and suppliers, tested recovery plans and a way to report serious incidents quickly. Working with partners who already meet these rules takes much of that load off.
Where SendPay fits
SendPay lets you launch your own branded platform with GBP, EUR and USD accounts, transfers and branded Visa cards, powered by licensed partners.
How it works
Your own money app- 1Name it and pick your colours
- 2Choose what it does
- 3Launch when you are ready
Why sign up
Create your free SendPay account
It's all about creating your own financial platform with ease. Start with a free account today.
- 🪪A free business accountOpen it in about a minute with your business name, email, password and mobile. No card and no documents to start.
- 💳Get paid from day oneTake card payments, and share your own payment link and invoices so customers pay in a click.
- 🌐A free business websiteFree to build, free to publish and free to keep, with unlimited visits.
- 🚀Your own financial platformDesign and preview your whole platform free, then launch when you are ready.
SendPay Business is a technology company, not a bank. Accounts, cards and payments are powered by licensed partners.
Questions people ask
Read next
Spotted a mistake or something out of date? and we'll fix it. How our guides are made
This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. Other companies named in this guide are reference points only and are not affiliated with SendPay Business.