Line4

In forceAll sectors: ICT third-party registers (EU, ESAs)Last checked 11 November 2026

DORA register of information, ICT third-party contracts (DORA_ROI)

A regulatory return listed by the National Bank of Belgium (NBB), Belgium.

The register of all contractual arrangements on the use of ICT services provided by third-party providers, required by the Digital Operational Resilience Act. The NBB collects it through OneGate domain DOR and passes it to the European Supervisory Authorities only where the entity has no higher level of consolidation in another Member State (Circular NBB_2026_05). In practice it has replaced the list of outsourced critical functions (NBB_2025_19, A.9). Source

Official title: DORA_ROI

The facts

Who files
Financial entities supervised by the NBB: less significant credit institutions and Belgian branches of third-country credit institutions, stockbroking firms, payment and e-money institutions (including limited-size ones), insurers and reinsurers (with stated exceptions), central securities depositories, central counterparties, crypto-asset service providers authorised under MiCA and issuers of asset-referenced tokens (Circular NBB_2026_05). Significant banking groups send their banking entities' registers to the ECB and only the others to the NBB. A group parent may submit on behalf of its entities. Source
How often
Submitted on the NBB's call: reference date 31/03/2025 (deadline 30/04/2025), then reference date 31/12/2025 (deadline 13/03/2026) (DOR page). NBB_2025_19 says the register is kept up to date on a continuous basis. Source
Deadline
13 March 2026 for the register with reference date 31/12/2025; firms were asked to pass all NBB and European checks in the OneGate test environment first (DOR page news of 28/01/2026). Source
Format
Web form, CSV, XBRL-XML, xBRL-CSV. Data entry, CSV upload, XBRL-XML upload or xBRL-CSV upload in OneGate domain DOR, based on the EBA reporting framework 4.0; the reporting entity is identified by its company number (CBE) with an .IND or .CON extension. Source
How it is filed
Filing routes recorded for the NBB: OneGate; NBB Supervision. See how firms file with the NBB.
Status
In force
Legal basis
Group
All sectors: ICT third-party registers (EU, ESAs)

Templates (0)

The library lists no templates for this return.

EU return: the templates and instructions are defined by the EBA. See the library's EBA entry eba/dora (docs/eba/dora.md). Belgian firms use the EBA's templates and taxonomy. The register is common to the three ESAs; the EBA publishes its taxonomy. Source

Validation rules

The NBB publishes the checks it runs on this return. They could not be counted from the published material. Software can run them exactly as published. Source

How they are written: EBA validation rules in the EBA reporting framework (see the EBA entry); OneGate taxonomy checks.

The rules are the ESAs' (EBA taxonomy). The NBB asks firms to pass all validation checks of the NBB and the European authorities in the OneGate test environment before submitting in production.

How they were counted

Not counted here: the EBA's validation rules apply (see eba/dora).

Counts are in the NBB's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. No data from this return published by the NBB was found on the pages checked. Source

Official documents (5)

The NBB's own files, with the size and SHA-256 fingerprint of each as downloaded on 11 November 2026, so anyone can tell whether a copy is the same version.

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's text and records here are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The regulators' documents, forms, taxonomies, rules and data belong to them: see NBB's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text.

Source: National Bank of Belgium (https://www.nbb.be). Documents copied here are unchanged and are available free of charge on the NBB's website. The plain-English summaries are Line4's own; the NBB does not endorse this library.

Last checked 11 November 2026.