Skip to content

Getting started

This guide will walk you through setting up your DORA.report account and getting started with DORA.report’s features.

Part 1: Configuring your DORA.report account

Section titled “Part 1: Configuring your DORA.report account”

The first steps in starting with DORA.report are to create an account, choose a product that fits your needs best, provide information to populate your profile, and verify your email.

Every person who uses DORA.report has their own personal account, which can be part of multiple organizations and workspaces. Your personal account is your identity on DORA.report and represents you as an individual.

To sign up for an account, navigate to https://dora.report/ and follow the prompts.

To keep your DORA.report account secure you should use a strong and unique password. For more information, see Creating a strong password.

Currently, new organisations are enrolled in the DORA.report Trial.

To upgrade, reach out to our sales team with the dedicated form in your organisation’s setting page.

To ensure you can access all the features in DORA.report, verify your email address after signing up for a new account.

Your profile in user settings contains the information you provided on sign-up. You can configure your timezone in user settings.

You will be required to set your organisation name. If you have been invited to join an organisation, you will automatically be assigned an organisation.

Create a New Incident. Classify whether the incident is DORA major, minor or unclassified. Optionally, you can associate the incident with an incident number generated externally from DORA.report.

Navigate to the incident and head to the Reports section, click on New Reports to generate a set of incident reports. Four reports will be generated:

  • General Information about the Financial Entity
  • Initial Notification
  • Intermediate Report
  • Final Report

The reports are generated according to the Commission Implementing Regulation (EU) 2025/302. For more information see DORA Incident reporting.

Complete the incident reports within the reporting timelines. For more information see DORA Incident reporting timelines.

Export the report when you are ready to submit to your competent authority. DORA.report will not allow for reports to be exported that don’t comply with the data validation requirements outlined in the specifications Commission Implementing Regulation (EU) 2025/302.

The reports will be exported according to the format determined by the ESAs (European Supervisory Authorities).


The information on this site is for general information purposes only and is not intended to serve as legal advice. Laws governing the subject matter may change quickly, so Guanciale Technologies Ltd cannot guarantee that all the information on this site is current or correct. Should you have specific legal questions about any of the information on this site, you should consult with a lawyer in your area.