DORA · Art. 28 Features / DORA · Register of Information

DORA · Register of Information (RoI)

The Register of Information, submission-ready — no more spreadsheet consolidation before the deadline. Built directly from your supplier and asset data, versioned and sealed.

What is DORA · Register of Information

The RoI, built straight from the register.

The Register of Information under EBA ITS 2024/2956 (Annex III) consists of several tables — including T02 (ICT third-party providers) and T04 (data storage locations). ReportAct builds these tables directly from the maintained supplier and asset register, instead of assembling them manually in a spreadsheet.

Any state can be saved as a version and cryptographically sealed — including a chain hash. Marking a version "submitted" freezes it internally as filed (WORM); that's not a transmission to the supervisor, but the sealed internal record of what was submitted. The actual submission is handled through the XBRL export.

Because the register builds on the same supplier data used for concentration-risk analysis and vendor questionnaires, there's no duplicate data entry — one register, several purposes.

Core capabilities

What the register of information delivers.

T02 / T04 straight from the vendor register

ICT third-party and data-storage-location tables are built from the maintained supplier and asset data, not entered manually.

Versioning with chain hash

Any state can be saved as a version; each version gets its own cryptographically chained hash.

XBRL export for submission

The machine-readable format for the actual transmission to the supervisor.

"Submitted" seals internally (WORM)

Freezes the version as documented-as-filed — immutable, but distinct from the actual regulatory transmission.

Concentration-risk metrics included

Critical suppliers and concentration flags appear directly in the register — no separate analysis needed.

Process

From register to submission.

Four steps from the running supplier register to a submission-ready RoI.

1. Maintain suppliers & assets

Record ICT third-party providers with criticality, LEI code, contract data and data storage locations in the running register.

2. Derive RoI tables automatically

T02 and T04 are built directly from the current register state — no parallel maintenance in a spreadsheet.

3. Create & seal a version

A snapshot of the current state is saved as a version and cryptographically signed.

4. Export & submit

XBRL export for the regulatory submission; marking as "submitted" documents the state internally as a WORM record.

How it works

How DORA · Register of Information works.

Maintain the register

Record ICT third-party providers and data storage locations in the running supplier and asset register.

Seal a version

Save a snapshot of the current state as a version — cryptographically signed with a chain hash.

Export

XBRL export for submission; marking as "submitted" flags the version as WORM-documented internally.

Connected regulations

A core building block for these regimes.

DORA

Register of Information under Art. 28 — the basis of every RoI submission.

Regulation in detail →
EBA ITS 2024/2956

Implementing technical standards for the format and content of the register (Annex III).

Regulation in detail →
ISO/IEC 27001

Asset and supplier data aligns with the inventory required under A.5.9 / A.5.19.

Regulation in detail →
Next step

Your next RoI submission without spreadsheet consolidation.

We'll show you how your existing supplier register turns into a submission-ready RoI.