DORA and NIS2 compliance

The French text governs. This page is the English version of Conformité FR.

5 capabilities only, and a table that says what other compliance pages on the market do not: how many controls are actually self-assessed, and how many are not. The figures below are computed when this page is built, from the map the package ships; they are not copied by hand.

5

capabilities in this family

0

active on installation day, on the Discovery offer

Any paid plan

entry tier of the family

What this family measures

The pack maps the findings produced by the other families to regulatory articles. The table below is the only figure that counts: out of 255 controls catalogued across 8 frameworks, 71 are self-assessed by a detector. The others are not, and this page does not pretend otherwise.

Map 2026.10.2, shipped in the package and read when this page is built: 126 attachments, of which 100 partial in scope and 26 full. “Partial” means the detector observes one named facet of the control, not the whole control — every attachment carries its own scope note inside the application.

The 5 capabilities, one by one

— display tier: nothing to toggle, the offer is enough

Source: read from the package code at the moment this page is built — FeatureGate.FEATURE_TIER for the offer, FeatureGate.CODE_DEFAULTS for the state at install, and for the label the full resolution of FeatureToggleAdminController: the enablement guide’s catalogue first, the GateLabels custom labels next, and failing that the technical name as is. The editor’s labels — the whole column, not just that fallback — ship in English: master language en_US, and the package carries no translation file: these are the exact strings your administrator reads in the feature editor, and the site build fails if any of these lists moves without the others. “Closed” does not mean absent: the capability is shipped, it is waiting for a human to open it inside the org — and a capability whose implementation nothing in the package can reach appears on none of these pages: the build drops it instead of selling it.

What this family does not do

• This is not legal advice, and the shipped map says so in as many words. The interpretation of an article is subjective and is validated with your compliance team.
• A “partial” attachment is not coverage. It observes the facet its evidence names, and nothing else; every attachment carries its own scope note.
• Procedural controls are never self-assessed. Records of processing, 72-hour notification, processor guarantees, backup and restore, impact assessment: no detector observes them, and the map explicitly leaves them out of scope rather than counting them.
• The attestation is signed by you. We supply timestamped evidence, not certification — and DOPAMINE is itself neither ISO 27001 nor SOC 2, as the publisher security page says.