The bank sent a DORA addendum. Answer it signed.
If you supply software or IT services to a financial entity, the addendum on your desk almost certainly demands more than the regulation does. DORA sets a floor of contractual terms — much of what arrives sits well above it. We read every clause against that floor and hand you a signed position you can negotiate from: required, over-reach, or abusive.
Supervisors have moved from remediation to enforcement, and the subcontracting standards reopened contracts that were already “done”. Banks answer that pressure by pushing maximal addenda downstream — and the supplier who signs as-is takes on duties the regulation never imposed: unconditional audit rights, subcontracting vetoes, “comply with all of DORA” clauses written for the bank, not for you.
Built for
SaaS and software vendors, IT service providers, data and cloud businesses whose customers are banks, insurers, funds or payment institutions — anywhere in the EU.
What lands back on their desk
The addendum, decoded
Every clause the bank sent, sorted into three buckets: required by the regulation, over-reach to be trimmed back to the floor, or abusive and to be resisted. No bucket is a guess — each call is cited.
The position memo
Pin-cited both ways: the bank's exact wording against the regulation's actual floor and our playbook position. With an annotated redline you can send back as-is — signed by counsel, 72 hours.
The negotiation pack
When the bank pushes back: a fallback ladder per clause — ideal, acceptable, walk-away — and a 45-minute call to rehearse the hard points. The upgrade, not the default.
Method: grep-grounded AI over our supplier-side DORA playbook, then an expert human eye on every call — nothing leaves unsigned. Larger suppliers running this review at scale can ask us to deploy the same harness internally — single model or convergent orchestration, on the same transparency. How we use AI · Read the analysis behind this service
Scope
The review is EU regulatory analysis provided by a practising Romanian avocat; where your underlying contract is English-law, the reading is comparative analysis by a solicitor (non-practising), not English-law advice. Every matter opens the standard way — conflict check, KYC, engagement letter — before the addendum is touched.