DORA Compliance

1. 1. Declaration of Compliance with DORA:
      DataTracks affirms its compliance with the Digital Operational Resilience Act (DORA) and its commitment to ongoing adherence to its regulatory requirements. This compliance encompasses adherence to regulatory standards for IT risk management, incident handling, operational resilience, and third-party oversight as mandated by the Act.
   2. Operational Resilience Assurance: DORA Article 8 & 9:
      DataTracks affirms that it has implemented comprehensive measures to ensure operational resilience, including:

      (a) A robust IT risk management framework designed to identify, monitor, and mitigate IT-related risks effectively.

      (b) Tested and documented incident response plans to promptly address and resolve disruptions or cyber threats.

      (c) Business continuity and disaster recovery protocols to minimize the impact of operational disruptions.

   3. Commitment to Regulatory Standards:
      DataTracks warrants that all digital operations, systems, and processes are maintained in accordance with DORA requirements, including:

      (a) Compliance with data security and protection standards.

      (b) Alignment with regulatory reporting and transparency obligations.

      (c) Implementation of regular internal reviews and audits to validate ongoing compliance.

   4. Third-Party Risk Management:
      As part of its DORA compliance, DataTracks ensures that:

      (a) DataTracks exercises due diligence to ensure that third-party service providers align with DORA-compliant operational resilience standards and are regularly assessed to mitigate risks to critical services.

      (b) Regular assessments and monitoring of third-party providers are conducted to mitigate risks to critical services.

   5. Incident Notification:
      In compliance with DORA, DataTracks has an established process to:

      (a) Notify our clients/partners promptly in the event of a significant operational or cybersecurity incident affecting the delivery of services.

      (b) Provide a detailed incident report within specified time frames outlining the root cause, impact, and resolution measures taken.

   6. Ongoing Compliance Obligations:
      DataTracks remains committed to ongoing compliance with DORA, including

      (a) Adapting to any updates or changes to the Act.

      (b) Regular training for personnel on operational resilience and IT risk management in line with DORA.

These measures demonstrate DataTracks’s proactive approach to safeguarding the resilience and security of our digital operations

By adhering to DORA, we are not only ensuring compliance with EU regulations but also demonstrating DataTracks’s commitment to providing secure, resilient, and reliable digital services to DataTracks clients and partners.

This declaration is based on DataTracks’s current interpretation of DORA, as of 17^th January 2025. DataTracks will continuously monitor regulatory developments and update its policies and practices as necessary to ensure ongoing compliance.