DORA Compliance Checklist
Get the clarity you need to navigate DORA — and the structure to act on it — with our step-by-step checklist.
Pass your DORA filing with 0 guesswork.
Find out exactly what is missing from your register in under 60 seconds.
Drop your ICT contracts in. We map all 101 fields, flag exactly what is missing, and give you the verbatim proof for what is there. No guessing, no ChatGPT hallucinations, zero lock-in.
We do the work if the software fails. Upload one supplier’s contracts today and get your ranked gap report plus a formatted export file, free. If our software misses a required field that is clearly stated in your contract, our founders will manually audit your next three suppliers by hand, over the weekend, at no charge.
- Stored and processed in the EU.
- Isolated per tenant.
- Never used to train AI models.
- Deleted on request.
You are flying blind until the regulator rejects you.
Right now you are assembling your DORA register by hand in a spreadsheet. You are hunting across master agreements, SLAs and order forms for 101 columns spread over 15 ITS templates that have to reconcile with one another.
101 columns across templates B_01.01 to B_07.01. EBA annotated table layout, DORA reporting framework 4.0.Commission Implementing Regulation (EU) 2024/2956, Article 3(1). Templates and instructions at Annex I.Financial entities shall use the templates set out in Annex I to IV to maintain and update the register of information in accordance with Article 28(3) of Regulation (EU) 2022/2554, at entity level, or at sub-consolidated and consolidated level.
If you guess, or if you let a general purpose chatbot guess for you, the file gets rejected. You lose months, and you attract supervisory attention you do not want.
Evidence
Do not trust AI. Trust the exact sentence in your contract.
Drop in a supplier's contracts. The gap report lists what is missing, and clicking any answer highlights the exact sentence in the original PDF that it came from.
This is the real demo of the system, and not AI generated. The data used are synthetic.
We do not use chatbots. Chatbots are built to guess.
Letzscale maps ICT contracts to the DORA register fields. It runs on deterministic regulatory rules. If the data is not in your contract, the system flags the field as Missing and tells you exactly who to ask to get it. Every answer we provide is backed by a verifiable quote from your document.
Process
We do not replace your system. We feed it.
You do not need a heavy GRC platform, and you do not need to change how you work.
- 1
You upload.
Drop your supplier PDFs into Letzscale.
- 2
We audit.
We map your documents against the exact CSSF and EBA specifications.
- 3
You export.
We hand you a byte-faithful export file that plugs straight into the spreadsheet or compliance tool you already use.
We built this for independent, mid-sized Luxembourg financial firms.
Who this is for
- Mid-sized ManCos, AIFMs, UCITS management companies and payment institutions supervised by the CSSF or the CAA.
- Firms managing DORA in spreadsheets that barely survived the first filing cycle.
- Consultancies and fiduciaries processing 30 client portfolios who want it done in a fraction of the time.
Who this is not for
- Tier-1 global banks looking for a multi-year IT integration.
- Firms that want an AI to guess their compliance answers without proof.
What Letzscale does not do
- Not a filing tool. It stops at the export file. You file it.
- Not a replacement. It feeds your GRC platform, your spreadsheet or your adviser.
- Not a chatbot. It answers the regulation’s questions, not the contract’s.
Questions
Questions your IT and procurement teams will ask
Does my data leave the EU?
No. Your documents are stored and processed in EU data centres in Frankfurt, Germany, isolated per tenant, and deletable on request.
Will this train AI models?
Never. Your contracts are never used to train any AI model, by us or by any provider in our processing chain. That is contractual, not a setting.
Do I need IT to install anything?
No. Letzscale is a secure web application. There is no software to deploy and no six-month onboarding cycle.
How is LeDora priced?
Pricing is deterministic and calculated strictly on the number of ICT vendor contracts reviewed, starting at €9,967 for up to 100 contracts. We do not charge variable fees based on your assets under management or firm headcount.
See the pricing matrixDoes Letzscale provide legal advice or certify compliance?
No. Letzscale provides a software-driven evidentiary audit trail. We extract verbatim contractual clauses and compare them against published ESA taxonomies. We never assert legal compliance on your behalf; we provide the definitive evidence layer for your internal compliance team or external counsel to act upon.
What happens if our vendor inventory exceeds our vendor limit?
You do not need to move up an engagement if you slightly exceed your limit. You can expand capacity in fixed blocks of 10 contracts for €1,500 per block, giving you complete cost control without contract disputes.
Why is the Register Validator Suite included for free?
A register that passes CSSF portal validation can still be materially inaccurate if the underlying vendor contracts lack mandatory Article 30 protections. We bundle the validator to ensure your register is both technically compliant and legally verifiable.
Can we purchase the Validator separately?
Yes. If your contracts have already undergone a thorough manual legal review, you can license the automated validation engine for €2,000 per year to verify formatting, GLEIF data, and cross-template consistency prior to submission.
Can we upgrade from the Standalone Validator to LeDora?
Yes. If file validation reveals inconsistencies or if your team requires statutory contractual reconciliation, 100% of your €2,000 validator fee is credited directly toward a Core or Enterprise engagement.
How does the Free Audit work without sharing sensitive data?
You submit a single, non-critical ICT vendor contract under a mutual non-disclosure and data processing agreement. We run our statutory parsing engine and return a concrete gap report with verbatim clause citations within 24 hours, proving the engine's precision before any commercial commitment.
Run your free Gap AuditResources
Learn more about DORA
Short, practical explainers on what DORA asks for and how to close the gaps.
How does DORA impact Luxembourg entities: key implications to consider
What the regulation means for CSSF- and CAA-supervised firms and their ICT providers, with practical guidance on where the gaps usually sit.
Map ICT contracts to the DORA Register of Information — without guessing
Letzscale maps ICT contracts to the DORA register fields, flags what is missing, and cites the verbatim contract text for what is there.
Stop guessing on your compliance. Your next filing cycle is coming.
Get absolute certainty on your DORA register today, without changing how you work.
We will process one of your suppliers completely free. You get the exact gap report and the export file. There is zero lock-in: if you want to take the file and walk away, you can. If our software misses a required regulatory field that is clearly stated in your contract, we will manually audit your next three suppliers by hand, for free.
Gap Audit
Run your free Gap Audit.
Drop one supplier’s ICT contracts in. We map all 101 fields, flag exactly what is missing, and send back the ranked gap report plus a formatted export file. No commitment, zero lock-in.
- One supplier processed free
- Ranked gap report plus formatted export file
- Reply within one business day