{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2025-07-09","gaps":[],"covered":["EBA Q&A 2025_7414 — Q&A — Dora agreements - ICT service supports a CIF [Rejected question] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif","url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif","title":"EBA Q&A 2025_7414 — Q&A — Dora agreements - ICT service supports a CIF [Rejected question]","family":"l3","work_id":"spaces/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif","status":"rejected question","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 9 July 2025","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"34c8f6d31c690915","change_date":null,"nearest_versions":["2025-07-09"],"first_text_date":null,"correction_applies":false,"versions":["2025-07-09"],"version_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif/versions/2025-07-09","revision_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif/versions/2025-07-09/rev/34c8f6d31c690915","versions_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif/versions","relations_url":"https://www.headlesslaw.com/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif/relations","source_line":"Question published in the EBA Q&A tool · no answer · not legislation · published 9 Jul 2025 [Rejected question]","attribution":{"prepared_by":"not stated in the document","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_question","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2025-07-09","question_submitted_on":"2025-04-11","locators":{"published_on":"EBA Q&A register entry 2025_7414, field 'Rejected publishing date'","question_submitted_on":"EBA Q&A register entry 2025_7414, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/dora/level-3/q-and-a/eba/eba-qa-2025-7414-dora-agreements-ict-service-supports-a-cif.md","body_sha256":"216541378c518ed51d67729f73738ab4acdf125ba7f6105edf9ba427075bae9e"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2025_7414 — Q&A — Dora agreements - ICT service supports a CIF [Rejected question]\"\nshortTitle: \"EBA Q&A 2025_7414 — Q&A — Dora agreements - ICT service supports a CIF [Rejected question]\"\nanswer_id: EBA_QA_2025_7414\nstatus: \"Rejected question\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: withdrawn\nregulation: \"DORA\"\ndora_level3: true\nmica_level2: false\nlegal_basis: \"Article 3(21) DORA\"\ndate: 9 July 2025\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414\nlifecycle: \"Rejected question\"\ntext_version: \"EBA Q&A register, 9 July 2025\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"not stated in the document\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Law firm\"\n    locator: \"EBA Q&A register entry 2025_7414: no answer; the register names only the 'Type of submitter'\"\ndocument_type: \"qa_question\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2025-07-09\"\n  question_submitted_on: \"2025-04-11\"\n  locators:\n    published_on: \"EBA Q&A register entry 2025_7414, field 'Rejected publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2025_7414, field 'Submission date'\"\nlifecycle_label: \"Rejected question\"\n---\n\n**Question published in the EBA Q&A tool · no answer · not legislation · published 9 Jul 2025 [Rejected question]**\n\n*Rejected question · EBA Q&A register, 9 July 2025 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2025_7414 — Q&A — Dora agreements - ICT service supports a CIF \\[Rejected question\\] |\n| **Prepared by** | Not stated in the document |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2025_7414 |\n| **Document type** | Q&A |\n| **Legal nature** | No answer · not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 9 July 2025; question submitted 11 April 2025 |\n| **Legal basis** | [Article 3(21)](https://www.headlesslaw.com/dora/articles/3) DORA |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Dora agreements - ICT service supports a CIF**\n\n### Question\n\nWhen an ICT Service supports a Critical and Important Function (CIF) within a financial entity, providers must sign DORA agreements with their suppliers if the supplier:\n\na) Provides an ICT Service (as per the DORA definition).\n\nb) Critically underpins the ICT Service, meaning its disruption could affect security or continuity (based on ITS on Register of Information, Article 3(2)(b)).\n\nIs this interpretation correct? Or must DORA agreements be signed with all critical suppliers, even those that do not provide ICT Services?\n\n### Background\n\nN/A\n\n***\n\n### Answer\n\nThis question has been rejected because it has not sufficiently identified a provision of a legal framework covered by this tool that creates uncertainty and for which an explanation is merited in terms or practical implementation or application.\n\nThe Single Rule Book Q&A tool has been established to provide explanations and non-binding interpretations on questions relating to the practical application or implementation of the provisions of legislative acts referred to in Article 1(2) of the EBA’s founding Regulation, as well as associated delegated and implementing acts, and guidelines and recommendations, adopted under these legislative acts.\n\nFor further information on the purpose of this tool and on how to submit questions, please see 'Additional background and guidance for asking questions'.\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2025_7414)\n\n## Related Level 1 articles\n\n- [Article 3 — Definitions](../../../articles/3.md)\n"}