The Digital Operational Resilience Act (DORA) is a European regulation designed to strengthen the ICT resilience of financial entities and their critical service providers, such as data centers. It ensures that organisations can withstand, respond to, and recover from all types of ICT-related disruptions. DORA establishes a unified framework for digital risk management within the EU financial ecosystem.

The regulation is built around five core elements:

• ICT risk management
• Incident reporting
• Operational resilience testing
• Third-party risk management
• Information sharing

LCL applies these principles through structured policies and technical measures that secure the stability and continuity of customer operations. Our approach covers physical layers of security, ensuring redundancy, business continuity, and compliance with EU data protection and cybersecurity requirements.

DORA complements existing standards such as ISO 27001:2022 and NIS2, reinforcing the same principles of control, transparency, and accountability. At LCL, it strengthens our position as a trusted partner for financial institutions that rely on secure, uninterrupted data center services.

LCL confirmed compliance with the Digital Operational Resilience Act (DORA) in 2025. This achievement demonstrates our strong focus on ICT resilience and operational continuity, especially for financial organisations that depend on our data centers. It further strengthens our integrated compliance framework to ensure secure, uninterrupted, and reliable services.