CLAIM-2026-08-28-06

DORA Article 30(2)(b) requires the contract to state the locations, namely the regions or countries, where the contracted or subcontracted functions and ICT services are to be provided and where data is to be processed, including the storage location.

Why it matters

A cloud region in a configuration console is not the contractual statement the article asks for, and third-party agents may not run where the platform does.

Sources

  • eurlex2022regulatio