EU supervisors designate IBM a critical third party provider under DORA

The EU's three financial supervisory authorities designated IBM a critical third party ICT provider under the Digital Operational Resilience Act. The designation puts IBM directly in scope for EU oversight of its services to European banks and insurers.

Verified AI-drafted IBM Newsroom, 5 December 2025

What it does not test. It does not establish what specific oversight measures the supervisors will apply to IBM in practice.

How this item counts. This item is dated before the index starts on 1 January 2026, so it does not count in the European Sovereignty Index.

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above and published under the editor’s responsibility without a person reading it first. How the record is made

VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

2026.10.22VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields

2026.10.22ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites

2026.10.21VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool