{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2025-09-23","gaps":[],"covered":["EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","title":"EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]","family":"l3","work_id":"spaces/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting","status":"rejected question","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 23 September 2025","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"f9d61d51c9e5ae02","change_date":null,"nearest_versions":["2025-09-23"],"first_text_date":null,"correction_applies":false,"versions":["2025-09-23"],"version_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions/2025-09-23","revision_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions/2025-09-23/rev/f9d61d51c9e5ae02","versions_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/versions","relations_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting/relations","source_line":"Question published in the EBA Q&A tool · no answer · not legislation · published 23 Sep 2025 [Rejected question]","attribution":{"prepared_by":"not stated in the document","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_question","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2025-09-23","question_submitted_on":"2025-02-07","locators":{"published_on":"EBA Q&A register entry 2025_7332, field 'Rejected publishing date'","question_submitted_on":"EBA Q&A register entry 2025_7332, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/dora/level-3/q-and-a/eba/eba-qa-2025-7332-subcontracting.md","body_sha256":"f53592b5d820d035c337a00fb9567ad132a944d723a4d0ac4ac8576ba48e10d5"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]\"\nshortTitle: \"EBA Q&A 2025_7332 — Q&A — Subcontracting [Rejected question]\"\nanswer_id: EBA_QA_2025_7332\nstatus: \"Rejected question\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: withdrawn\nregulation: \"DORA\"\ndora_level3: true\nmica_level2: false\nlegal_basis: \"Article 30 DORA\"\ndate: 23 September 2025\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332\nlifecycle: \"Rejected question\"\ntext_version: \"EBA Q&A register, 23 September 2025\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"not stated in the document\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Other\"\n    locator: \"EBA Q&A register entry 2025_7332: no answer; the register names only the 'Type of submitter'\"\ndocument_type: \"qa_question\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2025-09-23\"\n  question_submitted_on: \"2025-02-07\"\n  locators:\n    published_on: \"EBA Q&A register entry 2025_7332, field 'Rejected publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2025_7332, field 'Submission date'\"\nlifecycle_label: \"Rejected question\"\n---\n\n**Question published in the EBA Q&A tool · no answer · not legislation · published 23 Sep 2025 [Rejected question]**\n\n*Rejected question · EBA Q&A register, 23 September 2025 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2025_7332 — Q&A — Subcontracting \\[Rejected question\\] |\n| **Prepared by** | Not stated in the document |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2025_7332 |\n| **Document type** | Q&A |\n| **Legal nature** | No answer · not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 23 September 2025; question submitted 7 February 2025 |\n| **Legal basis** | [Article 30](https://www.headlesslaw.com/dora/articles/30) DORA |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Subcontracting**\n\n### Question\n\nShould a vendor be identified as a \"subcontractor\" simply because the ICT intra-group service provider to whom it provides services is part of a European financial group, even though the ICT services provided by the vendor are not connected to the ICT services provided by the intra-group service provider to FEs in their group.\n\n### Background\n\nCompany A licenses payments software to Company B. Company B is not an FE, but is part of a financial group including EEA-regulated FEs as well as financial institutions in non-EEA jurisdictions. Company B provides ICT services in support of these FEs' CIFs and is therefore an intra-group ICT service provider. Company B also supports the financial institutions in the non-EEA jurisdictions.\n\nThe software provided by Company A to Company B is only used to support the operations of the non-EEA financial institutions; it is not used to support the operations/CIFs of any EEA FEs.\n\nCompany B insists that Company A is a subcontractor subject to DORA because Company B's group is a consolidated financial group and focuses on ICT risk management from a group perspective.\n\n***\n\n### Answer\n\nThis question has been rejected because it is considered that EBA guidance or clarification is not needed with regard to the issue that it raises. For example, this can be the case where it is considered that the existing regulatory framework is sufficiently clear and unambiguous, or where different practices may be possible but it is not currently necessary to harmonise these further through the Q&A process.\n\nThe Single Rule Book Q&A tool has been established to provide explanations and non-binding interpretations on questions relating to the practical application or implementation of the provisions of legislative acts referred to in Article 1(2) of the EBA’s founding Regulation, as well as associated delegated and implementing acts, and guidelines and recommendations, adopted under these legislative acts.\n\nFor further information on the purpose of this tool and on how to submit questions, please see “Additional background and guidance for asking questions”.\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7332)\n\n## Related Level 1 articles\n\n- [Article 30 — Key contractual provisions](../../../articles/30.md)\n"}