Pursuant to the Digital Operational Resilience Act (“DORA”), InScope-AML is committed to ensuring the resilience and security of our digital services. DORA mandates that captured financial entities maintain comprehensive oversight of their ICT third-party service providers to safeguard operational continuity and protect against ICT risks. Pursuant to their key contractual obligations under DORA, we have established a DORA Annex within our agreements with financial entities, detailing the scope of services, and relevant compliance measures.
The Annex includes a requirement to provide transparency regarding our reliance on third-party critical or important subcontractors that contribute to the provision of our DORA-relevant services towards financial entities. In alignment with DORA, which among others emphasises the monitoring of critical or important ICT service providers, we maintain an up-to-date list of subcontractors on our website. This list specifies the subcontractors engaged in providing ICT services which are critical, important or material parts thereof. This is meant to assist financial entities to confidently meet their obligations under DORA.
We encourage our financial entity clients to review this list regularly as part of their vendor risk management processes. Should you have any questions or require additional details regarding our subcontractors or their role in our service delivery, please do not hesitate to contact us.
InScope-AML utilises the following Sub-Contractors in delivering its Services:
| Name of Sub-Contractor | Subcontracted Activities | Location from where Sub-Contracted Services are Delivered |
|---|---|---|
| Cleverbit Software | Technical Development & Support Services | Malta |
| Amazon Web Services EMEA SARL | Infrastructure & Hosting Services | Germany, Ireland |
| Microsoft | Infrastructure & Hosting Services | EU |
The following sub-contractors are only applicable in case the Client is utilising our Screen Searches service:
| Name of Sub-Contractor | Subcontracted Activities | Location from where Sub-Contracted Services are Delivered |
|---|---|---|
| Acuris Risk Intelligence Ltd | Searches against AML/KYC database of PEPs, Sanctions and Adverse Media | Ireland |
| Google Ireland Limited | Searches using Google's services as part of our AI Searches adverse media feature. | EU |
| OpenAI Ireland Ltd. | Processing of search results in order to determine suitability to classify them as requiring human review as part of our AI Searches adverse media feature. | EU |
The following sub-contractors are only applicable in case the Client is utilising our ID Verification service:
| Name of Sub-Contractor | Subcontracted Activities | Location from where Sub-Contracted Services are Delivered |
|---|---|---|
| Veriff | ID document and selfie verification. | EEA |
