Shelbyby AIfactorScope a pilot
All blueprints

Blueprint · in production

DORA artefact production

The Register of Information, exit plans and vendor documentation, engineered from your contract and estate data to ESA validation standard.

Runs: Annual reporting cycle and on change

Inputs

  • Your ICT contract repository and vendor documentation
  • Estate inventory, including AI systems in scope
  • Your DORA policies and existing register, where one exists

Outputs

  • The Register of Information in the ESA taxonomy, with AI systems recorded on the register
  • Exit plans and vendor packs for the providers that need them
  • A log of every gap and inconsistency found in the source contracts

Where a person checks

Gaps are logged and put to the compliance owner, never papered over. Register entries the contracts do not support are flagged, not invented. A principal signs off before anything is submitted.

What stays, what may leave

Contracts and vendor data stay on premises. Only pseudonymised payloads leave, under the routing policy you approve.

Tests that gate go-live

  • A clean validation pass against the ESA checks
  • Every register entry traceable to a source contract or vendor record
  • Zero unsupported entries presented as sourced

For

Insurers and reinsurers · MGAs and brokers in DORA scope · Credit and payment institutions

What your risk function receives

The design, the governance manifest and the audit scope for this blueprint, before the pilot starts.

In production

Where it runs today

Irish-regulated insurer

Client under NDA

Register of Information and exit-plan build, in production. Named reference available under NDA.

  • AI systems recorded on the Register of Information
  • Exit plans and vendor pack delivered
  • Accepted on a clean ESA validation pass

Worked examples · illustrative composites

Three buyers, walked end to end.

Each case study is a fictional composite built from representative Irish market data and the real regulatory calendar — no actual client is depicted. They show the methodology and the deliverables at full length.

The vendor

“Claimsline Technologies” — a Dublin insurtech SaaS vendor facing a 214-question TPRM questionnaire and an Article 30 repapering demand from its largest client.

  • DORA-Ready Vendor Pack, supplier-side
  • Repapering turned from deal blocker into a sales asset

The greenfield insurer

“Nova Cover Insurance DAC” — a newly authorised Irish insurer contracting its ICT estate from zero, with its first Register filing due at the 2027 round.

  • Register and exit plans built correct-first, at contracting time
  • The one buyer that never pays remediation cost

The legacy institution

“Harbourline Payments DAC” — a thirteen-year-old e-money institution whose filed register cleared the portal but would not survive inspection.

  • Lapsed LEIs and sub-outsourcing chain gaps found and fixed
  • The work reused to renegotiate its oldest vendor contract

Full case studies available on request: hello@aifactor.ie.

Pilot DORA artefact production in 30 days.

Scope a pilot