DORA Register of Information
Effective 2026-04-14
This register summarises the ICT third party service providers supporting the Orkestra platform, in a shape consistent with the Register of Information required under Regulation (EU) 2022/2554 (DORA). It is made available to financial entity customers to support their own supervisory filings and third party risk management.
| ID | Function | Provider | Criticality | Exit plan |
|---|---|---|---|---|
| DR_001 | LLM inference for regulatory analyst | Anthropic PBC Claude API (Haiku, Sonnet, Opus) | critical | Abstraction layer in lib/anthropic.ts permits fallback to alternative vendor within fifteen working days. Mock mode preserves read only availability. |
| DR_002 | Application hosting and compute | Scaleway SAS Instances, managed PostgreSQL, object storage | critical | Infrastructure as code (Terraform) with portable containers. Target rebuild time on alternate EU provider: ten working days. |
| DR_003 | Transactional email | Resend Inc. SMTP and API email delivery | supporting | Standard SMTP interface, swap to AWS SES EU or Postmark in under two days. |
| DR_004 | Error reporting | Functional Software Inc. (Sentry) Application error monitoring | supporting | Self hosted Sentry or alternative (GlitchTip) deployable within five working days. |
Concentration risk, substitutability, and detailed exit assistance terms are described in the DPA and in the written agreements with each provider. A fuller register in spreadsheet form is available on request for supervisory purposes.