Line4

In forceAll sectors: ICT third-party registers (EU, ESAs)Last checked 11 November 2026

Register of information on ICT third-party arrangements (DORA RoI)

A regulatory return listed by the French Prudential Supervision and Resolution Authority (Autorité de contrôle prudentiel et de résolution) (ACPR), France.

Financial entities send the ACPR their register of information on contracts for ICT services from third-party providers (DORA article 28(3), Annex I of Implementing Regulation (EU) 2024/2956), so that the ACPR can pass it to the European Supervisory Authorities. Source

Official title: Déclaration des registres d'information (ROI)

The facts

Who files
Banking sector: less significant credit institutions, payment institutions, account information service providers, e-money institutions, investment firms, issuers of asset-referenced tokens and central counterparties. Insurance sector: Solvency II insurers and reinsurers, insurance group companies, mixed financial holding companies, occupational retirement providers (ORPS) and insurance intermediaries that are not micro, small or medium enterprises (instruction 2025-I-12, article 1). Significant institutions send the register directly to the ECB through its CASPER tool instead of OneGate. Source
How often
Annual: register with a 31/12/N reference date. Source
Deadline
31 March N+1 for the 31 December N reference date. Source
Format
CSV. Plain-CSV (xBRL-CSV 'plain CSV' package in the OneGate envelope) per the 2026 file format note; OneGate domains 'DRB' (banking) and 'DRA' (insurance). Source
How it is filed
Filing routes recorded for the ACPR: OneGate (Banque de France reporting portal); ACPR online survey forms; ECB CASPER (registers of information of significant institutions). See how firms file with the ACPR.
Status
In force
Legal basis
Group
All sectors: ICT third-party registers (EU, ESAs)

Templates (0)

The library lists no templates for this return.

EU return: the templates and instructions are defined by the EBA. See the library's EBA entry eba/dora (docs/eba/dora.md). French firms use the EBA's templates and taxonomy. Source

Validation rules

The ACPR publishes the checks it runs on this return. They could not be counted from the published material. Software can run them exactly as published. Source

How they are written: EBA validation rules in the EBA reporting framework (see the EBA entry); OneGate checks each file and returns a processing report.

How they were counted

Not counted here: the EBA's validation rules apply (see eba/dora).

Counts are in the ACPR's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. No data from this return published by the ACPR was found on the pages checked. Source

Official documents (8)

The ACPR's own files, with the size and SHA-256 fingerprint of each as downloaded on 11 November 2026, so anyone can tell whether a copy is the same version.

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's text and records here are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The regulators' documents, forms, taxonomies, rules and data belong to them: see ACPR's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text.

Last checked 11 November 2026.