Terms of Service

Welcome to DoraPass ("Service", "we", "us", "our"). DoraPass is a software-as-a-service (SaaS) platform that helps EU financial entities compile and validate their DORA Register of Information (RoI) for regulatory compliance.

By accessing or using DoraPass at https://dorapass.com, you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

2.1 What DoraPass Does

DoraPass provides:

• Guided data entry forms for DORA RoI information
• Real-time validation against European Supervisory Authorities (ESA) data quality rules
• Export functionality to generate xBRL-CSV and Excel files for regulatory submission
• LEI (Legal Entity Identifier) lookup and validation
• Audit trail of data changes

2.2 What DoraPass Does NOT Do

• We are not a regulatory authority. DoraPass is a compliance tool, not a substitute for regulatory guidance.
• We do not provide legal advice. The Service helps you compile data; it does not advise on regulatory interpretation.
• We do not guarantee regulatory acceptance. While we validate against published ESA rules, final acceptance of your RoI submission is determined by your National Competent Authority (NCA).
• We do not submit filings on your behalf. You are responsible for submitting your RoI to your NCA.

The Service is intended for:

• Legal entities (not individuals acting in a personal capacity)
• Financial entities subject to DORA requirements in the EU/EEA
• Users who are at least 18 years old and authorized to bind their organization

By using the Service, you represent that you meet these requirements.

4.1 Account Creation

To use the Service, you must create an account. You agree to:

• Provide accurate and complete registration information
• Maintain the security of your account credentials
• Notify us immediately of any unauthorized access
• Accept responsibility for all activities under your account

4.2 Organization Accounts

If you register on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

5.1 Pricing Plans

DoraPass offers the following subscription plans:

Prices are exclusive of VAT where applicable.

5.2 Free Trial

We offer a 14-day free trial. No credit card is required to start a trial. At the end of the trial:

• You may subscribe to continue using the Service
• If you do not subscribe, your access will be limited and your data will be retained for 30 days
• After 30 days of inactivity following trial expiration, your data may be deleted

5.3 Billing

• Subscriptions are billed annually in advance
• Payment is processed via Stripe
• Invoices are provided electronically
• You are responsible for providing accurate billing information

5.4 Refund Policy

• Within 14 days of initial purchase: Full refund available if you are not satisfied, no questions asked
• After 14 days: No refunds for the current billing period, but you may cancel to prevent future charges
• Unused time: If you cancel mid-subscription, you retain access until the end of the paid period

5.5 Price Changes

We may change prices with at least 30 days' notice. Price changes will not affect your current subscription period.

6.1 Permitted Use

You may use the Service to:

• Enter, validate, and export your organization's DORA RoI data
• Allow authorized employees or agents to access your account
• Export and use generated files for regulatory submissions

6.2 Prohibited Use

You agree NOT to:

• Share your account with unauthorized third parties
• Use the Service for any unlawful purpose
• Attempt to reverse engineer, decompile, or access the source code
• Interfere with the Service's operation or security
• Resell or redistribute the Service without our written consent
• Upload malicious code, viruses, or harmful data
• Use automated systems to scrape or extract data from the Service
• Misrepresent your identity or affiliation

6.3 Enforcement

We reserve the right to suspend or terminate accounts that violate these Terms, with or without notice depending on severity.

7.1 Your Data

You own your data. All contract data, vendor information, and other content you input into DoraPass ("Customer Data") remains your property.

We claim no ownership rights over Customer Data.

7.2 License to Us

You grant us a limited license to:

• Store and process your Customer Data to provide the Service
• Create anonymized, aggregated statistics (never identifying individual customers)
• Back up your data for disaster recovery purposes

7.3 Data Portability

You may export your data at any time using the Service's export features. Upon account termination, we will provide data export assistance upon request.

7.4 Our Intellectual Property

DoraPass, including its software, design, documentation, and branding, is our intellectual property. These Terms do not grant you any rights to our intellectual property except the limited right to use the Service.

8.1 GDPR Compliance

We process personal data in accordance with the EU General Data Protection Regulation (GDPR). See our Privacy Policy for details.

8.2 Data Processing Agreement

For customers requiring a Data Processing Agreement (DPA) under GDPR Article 28, we provide a standard DPA upon request. Contact hello@dorapass.com.

8.3 Data Location

All Customer Data is stored in the European Union (Germany).

9.1 Availability Target

We aim for 99.5% uptime, excluding scheduled maintenance. We do not currently offer a formal SLA with credits, but we are committed to maintaining reliable service.

9.2 Scheduled Maintenance

We will provide reasonable advance notice of planned maintenance that may affect availability.

9.3 No Guarantee

The Service is provided on an "as available" basis. We do not guarantee uninterrupted access.

10.1 Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING:

• MERCHANTABILITY
• FITNESS FOR A PARTICULAR PURPOSE
• NON-INFRINGEMENT
• ACCURACY OR RELIABILITY OF VALIDATION RESULTS

10.2 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR:

• INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES
• LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITIES
• REGULATORY PENALTIES OR FINES RESULTING FROM YOUR RoI SUBMISSION
• DAMAGES EXCEEDING THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM

10.3 Basis of the Bargain

These limitations reflect the allocation of risk between the parties and are an essential basis of the bargain. Our pricing reflects these limitations.

10.4 Exceptions

Nothing in these Terms limits liability for:

• Death or personal injury caused by negligence
• Fraud or fraudulent misrepresentation
• Any liability that cannot be excluded by applicable law

You agree to indemnify and hold us harmless from claims, damages, and expenses (including reasonable legal fees) arising from:

• Your use of the Service
• Your violation of these Terms
• Your violation of any third-party rights
• The accuracy of data you input into the Service

12.1 Termination by You

You may cancel your subscription at any time through your account settings or by contacting us. Cancellation takes effect at the end of your current billing period.

12.2 Termination by Us

We may terminate or suspend your account:

• Immediately for material breach of these Terms
• With 30 days' notice for any other reason

12.3 Effect of Termination

Upon termination:

• Your access to the Service will end
• You may request export of your data within 30 days
• We may delete your data after 30 days (unless legally required to retain it)

We may modify these Terms at any time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

Continued use of the Service after changes take effect constitutes acceptance of the new Terms.

14.1 Governing Law

These Terms are governed by the laws of the Netherlands, without regard to conflict of law principles.

14.2 Dispute Resolution

We encourage you to contact us first at hello@dorapass.com to resolve any disputes informally.

If informal resolution fails, disputes shall be submitted to the exclusive jurisdiction of the courts of Amsterdam, the Netherlands.

15.1 Entire Agreement

These Terms, together with our Privacy Policy and any DPA, constitute the entire agreement between you and DoraPass.

15.2 Severability

If any provision is found unenforceable, the remaining provisions remain in effect.

15.3 No Waiver

Our failure to enforce any provision does not waive our right to enforce it later.

15.4 Assignment

You may not assign these Terms without our consent. We may assign our rights and obligations without restriction.

15.5 Force Majeure

We are not liable for delays or failures due to circumstances beyond our reasonable control.

For questions about these Terms:

DoraPass
Email: hello@dorapass.com
Website: https://dorapass.com