{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-28",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-28)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-09",
    "fingerprint": "ewai:se:9c4853",
    "proof": "sha256:f574f779998aa4854d13e8d33d7477eb925a459103ed5ca1086606962a7d171a",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "sme_kit",
  "object_id": "sme_kit:eu:dora--art-28",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/sme_kit",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-28",
  "source": "NovaCopilot",
  "item": {
    "coverage": {
      "complete": 8,
      "total": 10,
      "label": "8 of 10 answers ready",
      "reasons": {
        "precedents": "insufficient_cases",
        "outcome_patterns": "insufficient_cases"
      }
    },
    "subject": "eu:dora--art-28",
    "act": "dora",
    "article": "28",
    "answers": [
      {
        "key": "obligations",
        "status": "ready",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "sha256": "31ed068f41ea58d9d8335d5655b1f3f0b74ec1146f96bdf8f589d07b639eac9d"
      },
      {
        "key": "responsibility",
        "status": "ready",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "sha256": "895ee1778095e6ca3ea41bfe222483e8636856c1e116da40874f1ec404ec8185"
      },
      {
        "key": "sanctions",
        "status": "ready",
        "ids": [
          "sanction:eu:dora-art-35-6",
          "sanction:eu:dora-art-50"
        ],
        "sha256": "c1949045e8d7b5c2a5bd647366ad5532d0e34bced050dade64b0cd07f8228976"
      },
      {
        "key": "risks",
        "status": "ready",
        "ids": [
          "risk_chain:eu:dora--financial-entity"
        ],
        "sha256": "738e21eae5d66f16f71f9d1ca074429e149423435feee41f1497e33bb70077a6"
      },
      {
        "key": "exceptions",
        "status": "ready",
        "ids": [
          "exception:eu:dora-microenterprise"
        ],
        "sha256": "2c476763074be36389da0fcde222bf714ed6186b99fe561277bdbe6435d27795"
      },
      {
        "key": "documentation",
        "status": "ready",
        "ids": [
          "documentation_requirement:eu:dora--art-28"
        ],
        "sha256": "09db5ca17a68129ad21a3ad73c0c800ac994b0cb17158dc7edbc6b26ace1ada6"
      },
      {
        "key": "checklist",
        "status": "ready",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "sha256": "9774d80635d782279a9928844d1efee26b789e4ade039d3132a58c592e28850e"
      },
      {
        "key": "precedents",
        "status": "gap",
        "ids": [],
        "sha256": null
      },
      {
        "key": "provision_links",
        "status": "ready",
        "ids": [
          "provision_link:eu:dora"
        ],
        "sha256": "e77d30c7d924357da2d25985d1fdd57d72f02a23d4c91d2ade401af8d9061ad7"
      },
      {
        "key": "outcome_patterns",
        "status": "gap",
        "ids": [],
        "sha256": null
      }
    ],
    "answers_full": [
      {
        "question": "Which obligations apply?",
        "key": "obligations",
        "status": "ready",
        "answer": "1 obligations: Manage ICT third-party risk and keep a register of information on all ICT service contracts.",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:dora-art-28-financial-entity"
        ],
        "sha256": "31ed068f41ea58d9d8335d5655b1f3f0b74ec1146f96bdf8f589d07b639eac9d",
        "reason": null
      },
      {
        "question": "Who is responsible?",
        "key": "responsibility",
        "status": "ready",
        "answer": "Responsible roles: financial-entity.",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/eu:dora-art-28-financial-entity"
        ],
        "sha256": "895ee1778095e6ca3ea41bfe222483e8636856c1e116da40874f1ec404ec8185",
        "reason": null
      },
      {
        "question": "Which sanctions can be triggered?",
        "key": "sanctions",
        "status": "ready",
        "answer": "2 sanctions, up to 1 % of global turnover.",
        "ids": [
          "sanction:eu:dora-art-35-6",
          "sanction:eu:dora-art-50"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:dora-art-35-6",
          "https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:dora-art-50"
        ],
        "sha256": "c1949045e8d7b5c2a5bd647366ad5532d0e34bced050dade64b0cd07f8228976",
        "reason": null
      },
      {
        "question": "What are the risks?",
        "key": "risks",
        "status": "ready",
        "answer": "Risk level medium across 1 roles.",
        "ids": [
          "risk_chain:eu:dora--financial-entity"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/eu:dora--financial-entity"
        ],
        "sha256": "738e21eae5d66f16f71f9d1ca074429e149423435feee41f1497e33bb70077a6",
        "reason": null
      },
      {
        "question": "Which exceptions apply?",
        "key": "exceptions",
        "status": "ready",
        "answer": "1 exceptions, e.g. Small and non-interconnected investment firms, certain payment and e-money institutions exempted under PSD2/EMD, and other entities listed in art. 16.1.",
        "ids": [
          "exception:eu:dora-microenterprise"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/exception/eu:dora-art-28-financial-entity"
        ],
        "sha256": "2c476763074be36389da0fcde222bf714ed6186b99fe561277bdbe6435d27795",
        "reason": null
      },
      {
        "question": "Which documentation is required?",
        "key": "documentation",
        "status": "ready",
        "answer": "Keep: Written agreement.",
        "ids": [
          "documentation_requirement:eu:dora--art-28"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:dora--art-28"
        ],
        "sha256": "09db5ca17a68129ad21a3ad73c0c800ac994b0cb17158dc7edbc6b26ace1ada6",
        "reason": null
      },
      {
        "question": "What does a compliance checklist look like?",
        "key": "checklist",
        "status": "ready",
        "answer": "1 checks across 1 roles.",
        "ids": [
          "obligation:eu:dora-art-28-financial-entity"
        ],
        "urls": [],
        "sha256": "9774d80635d782279a9928844d1efee26b789e4ade039d3132a58c592e28850e",
        "reason": null
      },
      {
        "question": "Which precedents support the answer?",
        "key": "precedents",
        "status": "gap",
        "answer": null,
        "ids": [],
        "urls": [],
        "sha256": null,
        "reason": "insufficient_cases"
      },
      {
        "question": "How are the rules linked to other rules?",
        "key": "provision_links",
        "status": "ready",
        "answer": "Provision relations for dora.",
        "ids": [
          "provision_link:eu:dora"
        ],
        "urls": [
          "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:dora"
        ],
        "sha256": "e77d30c7d924357da2d25985d1fdd57d72f02a23d4c91d2ade401af8d9061ad7",
        "reason": null
      },
      {
        "question": "How do courts usually rule in similar situations?",
        "key": "outcome_patterns",
        "status": "gap",
        "answer": null,
        "ids": [],
        "urls": [],
        "sha256": null,
        "reason": "insufficient_cases"
      }
    ],
    "checklist": [
      {
        "step": 1,
        "role": "financial-entity",
        "check": "Manage ICT third-party risk and keep a register of information on all ICT service contracts.",
        "provision": "dora 28",
        "deadline": null,
        "if_not": [
          "sanction:eu:dora-art-50",
          "sanction:eu:dora-art-35-6"
        ],
        "done": false
      }
    ],
    "links": {
      "act_kit": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora",
      "provisions": [],
      "case_kits": [],
      "documentation": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/eu:dora--art-28",
      "list": "https://legal.exploreworldai.com/api/public/v1/sme-kits",
      "changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes?type=sme_kit"
    },
    "method": "Ten fixed business questions answered from existing deterministic registers. Gaps carry fixed reason codes. No model writes anything.",
    "hash": "204372fa819f4e9df2eeb8de8a6747b7ea5724e3eac8ab567dd1bd768e28175d"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/eu:dora--art-28",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/eu:dora--art-28",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/eu:dora--art-28"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-28?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:dora--art-28"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:f574f779998aa4854d13e8d33d7477eb925a459103ed5ca1086606962a7d171a",
  "version": "legal-2026-10-09",
  "expires": "2026-10-10T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-09+legal-2026-10-09+2026-10-09T20:29:16",
    "content_hash": "sha256:f574f779998aa4854d13e8d33d7477eb925a459103ed5ca1086606962a7d171a",
    "revalidate_after": "2026-10-09T22:27:10.923Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/eu:dora--art-28",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}