Line4

Search line4.ai

UpcomingFinancial sector firms: digital operational resilience (EU, EBA)Last checked 13 November 2026

DORA register of information, ICT third-party contracts (RoI)

A regulatory return listed by the Finanstilsynet (Financial Supervisory Authority of Norway), Norway.

Every entity covered by the Digital Operational Resilience Act (DORA) must keep a register of all its ICT third-party service contracts (article 28(3)), including which are critical or important. Groups keep a register at sub-consolidated and consolidated level too. Finanstilsynet can ask to see the register in full or in part at any time, and must itself report Norwegian registers on to the European Supervisory Authorities (ESAs) each year. Source

The facts

Who files
Entities covered by DORA article 2(1)(a) to (t). A firm outside a group reports individually; a firm whose ultimate parent is outside the EEA with no EEA parent reports individually; firms in a group report at the highest consolidated EEA level; firms in a cooperating group or alliance (not a single corporate group) report individually. Source
How often
Annual, covering the period 1 January to 31 December. Source
Deadline
15 March 2027 for the first filing to Finanstilsynet. Finanstilsynet must in turn report the register to the ESAs by 31 March each year, and a list of firms assessed as systemically critical (other than credit institutions) by 31 January. Source
Format
xBRL-CSV, Web form. Filed through e-Reg. The format is XBRL-CSV; e-Reg also plans to offer a web form for entering the register manually. Source
How it is filed
Filing routes recorded for the Finanstilsynet: e-Reg (e-Regulatory); Altinn; Transaction Reporting System (TRS). See how firms file with the Finanstilsynet.
Status
UpcomingThe production system for filing opens 1 February 2027; the first deadline for firms is 15 March 2027. Source
Legal basis
Group
Financial sector firms: digital operational resilience (EU, EBA)

Templates (0)

The library lists no templates for this return.

EU return: the templates and instructions are defined by the EBA. See the library's EBA entry eba/dora (docs/eba/dora.md). Norwegian firms use the EBA's templates and taxonomy. Source

Validation rules

The Finanstilsynet publishes the checks it runs on this return. They could not be counted from the published material. Software can run them exactly as published. Source

How they are written: EBA validation rules and filing rules, as applied by e-Reg.

How they were counted

Not counted here: the EBA's validation rules apply (see eba/dora).

Counts are in the Finanstilsynet's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. No data from this return published by Finanstilsynet was found on the pages checked. Source

Official documents (2)

The Finanstilsynet's own files, with the size and SHA-256 fingerprint of each as downloaded on 13 November 2026, so anyone can tell whether a copy is the same version.

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's text and records here are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The regulators' documents, forms, taxonomies, rules and data belong to them: see Finanstilsynet's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text.

Last checked 13 November 2026.