DORA-ready third-party risk without a large compliance team.
Payment and e-money institutions can stand up a defensible ICT third-party programme quickly, with structured assessments and a Register that maintains itself.
DORA Third-Party Risk Overview
Meridian Bank Europe · updated 9 August 2026
ICT Providers
96
Critical Providers
18
Register errors
3
Register warnings
9
High Risks
7
Missing Evidence
23
Outstanding
- Register errors blocking filing3
- Register warnings9
- Evidence documents missing23
- Article 30 clauses unresolved11
- Assessments overdue2
Attention Required
View allHalcyon assessment expires soon
Annual ICT Risk Assessment 2026 · due 18 Aug
Northwind Cloud contract needs review
Exit strategy clause not documented
Payflux evidence expires next month
SOC 2 Type II report valid until 14 Sep
Fit
What matters for your teams
Fast setup
Import your provider list and classify criticality in days, not quarters.
Vendor portal
Collect answers and evidence without long email chains.
Contract review
Spot missing Article 30 clauses before renegotiation.
Cloud-heavy estates
Templates built for cloud and SaaS providers.
Investor and partner diligence
Export a clear view of ICT third-party posture.
Scales with growth
Add providers, entities and reviewers as you grow.
Inventory
One provider inventory everyone works from.
- Providers, ICT services and criticality in one place
- Owners assigned per provider and service
- Country and data location tracked
- Saved views for critical and high-risk providers
ICT Providers
96 providers · 18 critical
| Provider | ICT Service | Criticality | Country | Risk |
|---|---|---|---|---|
| Halcyon Cloud Services | Cloud Infrastructure | Critical | Ireland | High |
| Northwind Cloud Ireland | Cloud & Productivity | Critical | Ireland | Medium |
| Payflux Payments Europe | Payment Processing | Critical | Ireland | High |
| Lumendata Netherlands | Data Platform | Important | Netherlands | Medium |
| Edgeway Germany | Network & Security | Important | Germany | Low |
| Valtera | Core Banking | Critical | Switzerland | Medium |
Reporting
A Register that reflects your operations.
- Validation before submission
- Completeness tracked continuously
- Lineage from every Register row to its source records
- Structured export when needed
Register of Information
Reporting entity: Meridian Bank Europe · LEI 549300XKZ9Q2P1F4T083
Templates with rows
12 of 15
Errors
3
Warnings
9
Validation issues
- B_02.02Function identifier is empty. Every key column has to resolve.Error
- B_05.02Identification code of the recipient of sub-contracted ICT services is empty.Error
- B_02.01Holds "Payment Services", which is not one of the nineteen permitted service types.Error
- B_01.01Competent Authority is empty. A supervisor will ask about this.Warning
- B_02.02Location of the data at rest is empty.Warning
Get your ICT third-party risk under control.
See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.