Important Hosting Update (25/01/25)

We’re now able to offer assistants that keep your conversations within the EU 🇪🇺. If you’re located in the European Union, we encourage you to use the ISMS Copilot EU, and our specialized assistants for EU regulations (DORA, NIS2, EU AI ACT, Cyber Resilience Act, GDPR) based on your compliance needs. Conversations are hosted in France and deleted after 90 days.

If you’re fine with US hosting, know that ISMS Copilot Free or ISMS Copilot are also knowledgeable on these regulations, even if less specialized. This information supersedes any other information about EU hosting.

For more details, please visit our FAQ for EU users.

DORA Copilot Documentation

About This AI System

The DORA Copilot is an AI-powered chatbot designed to help organizations comply with the Digital Operational Resilience Act (DORA). It assists financial institutions and other affected industries in meeting operational resilience requirements. As required by the EU AI Act's transparency guidelines, we inform you that you are interacting with an artificial intelligence system.

Classification Under EU AI Act

Risk Classification

DORA Copilot is classified as a limited risk AI system (chatbot) based on:

• Intended Purpose: Provides tailored guidance for DORA compliance.
• Functionality: Delivers actionable insights for implementing operational resilience frameworks and meeting EU requirements.
• Risk Level: Functions as a limited risk chatbot, supporting compliance without affecting fundamental rights.
• Decision Making: Aids human decision-making through regulatory guidance and implementation support.
• Data Processing: Stores all conversation data exclusively in the EU, ensuring data residency compliance.

Rationale for Classification

The system does not qualify as high-risk under Article 6 and Annex III because:

• It operates solely within financial services, not in other critical infrastructure sectors.
• It offers general guidance without affecting fundamental rights through direct decisions.
• Human oversight remains central to all decision-making processes.
• EU data residency ensures minimal privacy and security risks.