DORA · Article 30

What Article 30 puts in your contract

A
Every ICT service
The baseline, whatever you sell them
01A full description of the service, where it is provided and where data is processed
02Service levels
03Availability, integrity, security and protection of personal data
04Access to and return of their data if you become insolvent or stop the service
05Your help during an incident, free or at a price agreed in advance
06Cooperation with their supervisor
07Termination rights and notice periods
B
Critical or important function
Added when your service supports one
08Performance targets with agreed corrective action
09Notice of anything that could materially affect your service
10Tested contingency plans
11Rights of access, inspection and audit for them, for an auditor they appoint, and for their regulator

Source: Regulation (EU) 2022/2554 (DORA), Article 30(2) and 30(3)