---
term: "Register of information (DORA)"
category: "Governance and model risk"
url: https://agenticopenfinance.com/glossary/ict-third-party-register
source: AgenticOpenFinance glossary
---

# Register of information (DORA)

> DORA's required record of every contract for ICT services from third-party providers, by function.

Under DORA, the EU Digital Operational Resilience Act, financial entities must maintain and update a register of information on all contractual arrangements for ICT services provided by ICT third-party service providers, distinguishing those that support critical or important functions. The firm remains fully responsible for compliance when it uses such services. For an agent stack, each external model API, hosted agent platform, tool server and data provider is an arrangement to record.

Related terms: [Third-party risk management](https://agenticopenfinance.com/glossary/third-party-risk-management.md), [Model risk](https://agenticopenfinance.com/glossary/model-risk.md), [Change management](https://agenticopenfinance.com/glossary/change-management.md), [Model inventory](https://agenticopenfinance.com/glossary/model-inventory.md)