How it works
The validator is designed to help you verify and troubleshoot your full DORA Register of Information reporting.
It runs 117 validation checks
This ensures data accuracy and provides detailed feedback on any issues that need to be addressed before submission to your local regulatory authority.
The validator is free to use and does not require registration.
Data is analyzed in real time and deleted immediately after processing.
Last updated in February 2025, the validator is regularly maintained to provide reliable checks and accurate error reporting across markets.
To use it, upload a ZIP file containing all 15 reports in the official XBRL-CSV format.
What can you expect?
After submission, you will receive a summary along with a detailed list of any errors in your reports, including references and error types.
It verifies
XBRL structure
Checks data completeness
Validates LEI-numbers
Ensures consistency across reports
Aligns with European Supervisory Authorities (ESAs) guidelines
Detailed error and warning reports help address issues before submission.
After the European Banking Authority announced that its validator was no longer up to date and would no longer be maintained, we saw need to step in—not just for our customers, but for the entire industry.
Maria Carrillo - Formalize
Frequently asked questions
What is DORA Register of Information
The Digital Operational Resilience Act (DORA) requires financial entities and ICT service providers in the EU to maintain a Register of Information, which consists of up to 15 interdependent reports covering ICT risk management, third-party dependencies, and resilience measures. These reports collectively provide regulators with a structured overview of an organization's operational resilience and risk exposure. Maintaining an accurate and complete Register of Information is essential for compliance and ongoing regulatory reporting.
What format is supported in the validator
Our validator supports the upload of Register of Information files in xBRL-CSV format as specified by the ESAs. This ensures that all interdependent reports are included in a structured manner, as required by regulators. Before uploading, please ensure your ZIP file follows the official naming conventions and includes all necessary files.
More information about the official EU format can be found here:
www.eba.europa.euHow can I get started with Register of Information for my company?
At Formalize we have hosted a virtual event on how to prepare for the Register of Information. Find the virtual event here:
Virtual webinarYou can also reach out to us here in order to learn about our proven process for DORA compliance.
What is the difference between single- and multi-entity submissions?
Under DORA, financial entities must maintain and submit a Register of Information at different levels, depending on their corporate structure:
Applies to standalone financial entities that are not part of a group.
Each entity submits its own individual Register of Information.
Applies to financial groups operating within the EU.
A parent entity submits a single consolidated report covering the entire financial group at the highest level of consolidation.
This submission is required when all subsidiaries are under one supervisory authority for DORA compliance.
Applies when a financial group spans different sectors or jurisdictions within the EU.
Each financial entity within the group submits its own Register of Information, unless consolidated reporting is mandated.
Supervisory authorities for different sectors (e.g., banking, insurance, investment firms) may require separate submissions based on their regulatory scope.
Entities should verify whether their competent authority requires a consolidated or individual submission, as variations may exist across EU member states and different financial sectors.
For more details, refer to the EBA's official FAQ on DORA Register of Information reporting:
www.eba.europa.euWhat happens if my submission has errors?
If errors are detected during validation, our tool provides a detailed error report, highlighting the specific issues and affected fields. This allows you to identify and correct errors before submission, reducing the risk of compliance issues.
Submitting an inaccurate or incomplete report to regulators can have serious consequences. Authorities may request clarifications or require a resubmission, leading to additional work and potential delays. This process can be time-consuming and resource-intensive.
In more severe cases, persistent errors or failure to comply with reporting requirements could result in a classification of non-compliance, which may lead to regulatory scrutiny, financial penalties, or reputational damage.
By validating your report before submission, you can ensure accuracy, maintain compliance, and minimize the risk of regulatory complications.
Ensure DORA compliance with a proven process
Data identification
Data implementation
Clear structure & policies
Operationalize
Grow as needed