DORA requires financial entities to report on their branch network and to track ICT sub-outsourcing chains through which services are ultimately delivered. This article covers both sections.
Branches
Branches of your financial entity must be recorded for the DORA ITS template B_01.03. This data identifies the physical locations from which your entity operates.
Creating a Branch
Branches are created using an inline form directly on the branches page. Click "Add Branch" and fill in the following fields:
| Field | Type | Required | Details |
|---|---|---|---|
| Branch Name | Text input | Required | The name or label for this branch (e.g., "London Office", "Frankfurt HQ"). |
| Country | Dropdown | Required | Select the country where this branch is located from the full country list. |
| City | Text input | Optional | The city where the branch is situated. |
| Branch Code | Text input | Optional | An internal code or identifier for the branch. |
| Address | Text input | Optional | The full postal address of the branch. |
Branch Table
Branches are displayed in a table with all the above columns. Each row supports inline edit mode — click the edit icon on any row to modify the fields directly in the table without opening a separate form. Save or cancel your changes using the action buttons that appear.
B_01.03 (Branches of the financial entity). Each branch record maps to a row in the exported CSV.Sub-outsourcing Chains
Under DORA Art 31, financial entities must understand and track the ICT service supply chain. When your ICT provider sub-contracts part of the service to another provider, this creates a sub-outsourcing chain. This data populates ESA template B_05.02.
Creating a Sub-outsourcing Record
Navigate to the Sub-outsourcing section and click "Add Sub-provider". Complete the following fields:
| Field | Type | Required | Details |
|---|---|---|---|
| Contract | Dropdown | Required | Select the contractual arrangement under which the sub-outsourcing occurs. |
| Sub-provider Name | Text input | Required | The name of the sub-contracted ICT provider. |
| Sub-provider LEI | Text input | Optional | The LEI of the sub-provider, if available. |
| Tier Level | Number input | Required | The level in the supply chain. Minimum value is 1. Tier 1 = direct sub-contractor of your provider, Tier 2 = sub-contractor of a Tier 1 provider, and so on. |
| Service Description | Text input | Optional | Description of the ICT service provided by the sub-provider. |
| Country | Dropdown | Optional | The country where the sub-provider is located or from which the service is provided. |
| Sub-provider Type | Dropdown | Optional | The type of the sub-provider (same options as the main provider type list: Cloud Service Provider, Software Vendor, Data Center Operator, etc.). |
| Sub-criticality | Dropdown | Optional | Options: Critical, Important, Supporting. The criticality of the sub-outsourced service in the overall chain. |
Sub-outsourcing Cards
Each sub-outsourcing record is displayed as a card showing:
- Tier badge — a numbered badge indicating the tier level (e.g., "Tier 1", "Tier 2")
- Criticality badge — colour-coded badge showing Critical (red), Important (amber), or Supporting (blue)
- The sub-provider name, service description, and country
- The parent contract reference