DORA-aligned AI for financial entities.

Credit institutions, payment institutions, e-money institutions, investment firms, crypto-asset service providers, central counterparties, trading venues, insurance and reinsurance undertakings, insurance intermediaries, IORPs, credit rating agencies, crowdfunding service providers, securitisation repositories, and ICT third-party service providers serving any of the above. DORA has been applicable since 17 January 2025.

Yes. AI inference services that support, enable or contribute to a financial activity are ICT services under DORA Article 3(21). The financial entity must therefore flow through DORA Article 28-30 obligations to the AI vendor, including audit rights, exit strategy and incident reporting cooperation.

Yes. We provide ICT third-party agreements aligned with DORA Articles 28-30. Running the model in Intel TDX evidences the confidentiality and integrity of its memory at our inference provider, and the attestation of the serving instances can be archived as evidence; our relay still sees requests in clear. Exit strategy is supported by open-weight models, available from other providers.

Our sub-processor list is short: one confidential compute provider and one TEE inference provider, both named at /legal/subprocessors, both substitutable. Because the models are open-weight and the enclave layer is Intel TDX, the financial entity is not locked into any one provider, and TDX attestation evidence is portable across compatible operators.

If we reach the thresholds set by the European Supervisory Authorities, yes, and in that case we would be subject to direct oversight by ESAs. The technical architecture (models in Intel TDX, a French controller, attestation) is already aligned with the obligations Article 31 designation would impose.