Register of Information

The European supervisory authorities use the information from the registers to designate critical third-party ICT service providers. The information register is requested annually so the ESAs can determine which ICT service providers should be supervised as critical third-party ICT service providers (CTPPs). The first 19 parties will be designated in November 2025.

We can also use the information for our (risk-based) supervision of the financial entities covered by DORA.

Consolidation level

Depending on the situation that applies to your company, you must provide the register of information at the following level of consolidation:

• At the level of the financial entity, where the financial entity is not part of a group of financial entities.
• At the level of the financial entity, where the financial entity is part of a group of financial entities and the parent undertaking(s) is/are located outside the European Union.
• At the highest level of consolidation in the European Union, where the financial entity is part of a group of financial entities and the AFM has supervisory responsibility pursuant to the Union acts referred to in Article 46 of DORA.

Financial entities for which we are the competent supervisory authority and which are part of a group of financial entities in which the parent company at the consolidated level does not fall under the supervision of another competent authority in the European Union must submit the register of information at the level of the individual financial entity.

Submitting in xBRL-CSV

You can only submit your information register to us in xBRL-CSV, not in a standard Excel file. We facilitated the conversion to xBRL-CSV in 2025 as a one-time additional service to support companies in submitting their information registers.

If you use a converter to convert your information register to xBRL-CSV, it is important to note the following points:

• Not all XBRL converters are suitable for information registers. It is important that the converter is capable of converting your register to xBRL-CSV (not iXBRL!);
• Check whether the converter supports the EBA taxonomy;
• The xBRL-CSV file must meet several requirements. Examples of the file's intended appearance can be found on the EBA website.

Furthermore, we recommend using tools that perform thorough data quality checks immediately. Additionally, we recommend validating what the provider does with the data.