DORA Article 30 clauses — check ict contract clauses in your files

Lints ICT vendor contracts kept in your repo against the mandatory clauses of DORA Article 30 (EU 2022/2554), and flags audit caps, billable incident support and open-ended data locations. Runs entirely in your browser — nothing is uploaded.

# Master Services Agreement — Helvetia Ledger Systems AG

Financial entity: Aurora Bank Ireland DAC. Function supported: core payment processing, classified as a critical or important function. This Agreement is concluded in writing between the parties.

## 1. Services
A clear and complete description of all the functions and ICT services to be provided is set out in Annex A. Conditions for subcontracting are set out in Annex D: subcontracting is permitted only with the prior written consent of the financial entity.

## 2. Hosting
The provider may host, process and store financial entity data at any location worldwide, using the infrastructure it considers most suitable.

## 3. Data protection
The provider shall ensure the availability, authenticity, integrity and confidentiality of all data processed under this Agreement.

## 4. Data return
On termination or on discontinuation of the provider's business operations, the provider guarantees access, recovery and return of all financial entity data in an easily accessible format.

## 5. Service levels
Service level descriptions are set out in Annex B with precise quantitative and qualitative performance targets: 99.9 percent monthly availability, RTO of eight hours.

## 6. Support during incidents
Upon an ICT incident related to the services, the provider shall assist the financial entity on a best-efforts basis during business hours.

## 7. Authorities
The provider shall fully cooperate with the competent authorities
The provider shall fully cooperate with the resolution authorities of the financial entity.

## 8. Termination
Either party may terminate this Agreement with a minimum notice period of thirty days.

## 9. Training
The provider shall participate in the financial entity's ICT security awareness programmes once per contract term.

## 10. Reporting
The provider shall report any development that might have a material impact on its ability to deliver the services.

## 11. Resilience
The provider shall implement and test business contingency plans and shall maintain ICT security measures, tools and policies.

## 12. Audit
The financial entity holds rights of access, inspection and audit; the financial entity may carry out one audit per calendar year on thirty days written notification.

as of

Free here: Lint one open ICT vendor contract and get every missing DORA Article 30 clause named, with the article reference and the wording to paste in. In the editor: Scan every contract in the repository in one pass and export the per-vendor, per-clause evidence table your Q4 audit and register of information need. — that part asks for a licence key.

Same engine as the VS Code extension, byte for byte.