On 18 November 2025, the European Supervisory Authorities published the list of designated critical ICT third-party providers (CTPPs) under the Digital Operational Resilience Act (DORA). The designation process followed the methodology mandated by DORA. The designated CTPPs provide a range of ICT services to financial entities of all types and sizes across the EU, reflecting their pivotal role within the financial ecosystem.
