CodeGeeks Solutions

comply-scan

DORA readiness self-assessment for EU financial entities

Answer a guided questionnaire and receive an indicative readiness score, pillar breakdown, and actionable gap highlights — free to start, with a fuller report behind an honest email gate.

Start free assessment

Why DORA, why now

The Digital Operational Resilience Act (DORA) has applied to EU financial entities since January 2025. Supervisory expectations across ICT risk management, incident reporting, resilience testing, third-party oversight, and information sharing are now part of everyday operational planning — not a distant horizon item.

Many teams still lack a structured view of where they stand across DORA's five pillars. comply-scan gives CTOs and compliance leads a practical starting point: an indicative self-assessment you can run in one sitting, without implying certification or regulator endorsement.

How it works

Methodology transparency is built in — here is exactly what drives your results.

  1. 01

    Deterministic scoring from your answers

    Every score, pillar percentage, and gap comes from a rules engine driven by framework data — not from AI judgment calls.

  2. 02

    AI for narrative only

    Claude turns the computed score object into readable report prose. It cannot introduce new gaps, scores, or claims that are not already in that object.

  3. 03

    Optional enrichment, additive only

    An optional public-website scan extracts fixed signals for context notes in the full report. Enrichment never changes your score.

Results are an indicative self-assessment for planning conversations — not a substitute for qualified legal or compliance advice.

What you get

Free teaser

Immediately after completing the questionnaire: overall readiness score, pillar radar chart, and your top three gaps — enough to see whether a deeper review is worth your time.

Full report (email gate)

Enter a business email to unlock the complete gap list, remediation roadmap, optional public-footprint notes, and a downloadable PDF. We tell you upfront what the gate unlocks — no hidden surprises.

Built for credibility

  • CodeGeeks Solutions — engineered by a Luxembourg consultancy that ships production systems for EU-regulated fintech and enterprise clients.
  • Anthropic Claude — used for AI-assisted narrative generation under strict JSON schema controls with retry-on-invalid validation.
  • Accessibility by design — user interfaces target WCAG 2.1 AA contrast and keyboard operability; we audit interactive flows with axe-core during development.

Frequently asked questions

What is comply-scan?

comply-scan is a free DORA readiness self-assessment for EU financial entities. You answer a guided questionnaire about your ICT resilience practices and receive an indicative score, gap highlights, and remediation guidance.

Does this tool guarantee DORA readiness or compliance?

No. The assessment is automated and indicative only. It highlights likely gaps based on your answers; it does not constitute legal or regulatory advice and does not guarantee compliance with DORA or any other regulation.

How is my score calculated?

Scores are computed deterministically from your questionnaire answers using rules defined in our DORA framework data. AI is used only to turn the computed score object into readable report prose — it never introduces new gaps or changes scores.

What does the optional website scan do?

If you provide a public domain, we fetch a limited set of public pages and extract fixed boolean signals (for example, whether a security page exists). These signals appear as observational context in the full report and never affect your score.

What do I get before and after the email gate?

The free teaser shows your overall readiness score, a pillar breakdown, and your top three gaps. Entering a business email unlocks the full report: complete gap list, remediation roadmap, optional public-footprint notes, and a downloadable PDF.

Who built comply-scan?

comply-scan is built by CodeGeeks Solutions, a Luxembourg-based engineering consultancy serving EU-regulated fintech and enterprise clients. Narrative generation uses Anthropic Claude under strict schema controls.