DORA Incident Classifier
It's 02:00 and a system is down. Is this a major incident under DORA? Answer seven questions against the actual RTS thresholds — and see which reporting clocks are already running.
The DORA Incident Classifier answers one question, quickly and defensibly: is this ICT-related incident major under DORA, and what has to be reported by when? It walks through the seven classification criteria set out in Commission Delegated Regulation (EU) 2024/1772 — clients and financial counterparts affected, reputational impact, duration and service downtime, geographical spread, data losses, criticality of services affected, and economic impact — applying the actual materiality thresholds rather than a summary of them. The output is a determination with the reasoning attached, not just a verdict. It then surfaces the reporting clocks. Under Commission Delegated Regulation (EU) 2025/301, the initial notification, intermediate report and final report each have their own deadline, and they run from events that have usually already happened by the time anyone opens a tool. Showing which clocks are already ticking is the point.
- Seven-criteria classification against the thresholds in Delegated Regulation (EU) 2024/1772
- Major / not-major determination with the reasoning retained, not just the verdict
- Reporting deadlines for the initial, intermediate and final reports (Delegated Regulation (EU) 2025/301)
- Built for use under time pressure — a short flow, no account, no setup
- Exportable record of the classification for the incident file
- Fully browser-based — incident details never leave your device
DORA (Regulation (EU) 2022/2554, Articles 17–19) requires financial entities to classify ICT-related incidents and report the major ones on a tight schedule. The criteria and thresholds live in a delegated regulation; the reporting time limits live in another. Neither is something a team wants to be reading for the first time in the middle of an outage. The classification decision is exactly where this goes wrong: it is made under pressure, often at night, by whoever is available, and it has to be defensible afterwards. This tool encodes the seven criteria and their thresholds into a short guided flow, produces a determination with its reasoning attached, and makes the reporting deadlines visible immediately — so the clock is a known quantity rather than a discovery.
Status
LiveRegulation
DORAFormat
This tool runs entirely in your browser. Don't take my word for it — open it, switch your device to airplane mode, and keep working. If it still works offline, nothing is being sent anywhere.
You can also inspect what the server sends back. The response headers are public; scan them yourself.
Scan doraincidentclassifier.iddi-labs.comNo account, no upload, no server-side storage of your data.