Compliance: what the regulations ask of your document exchanges.
GDPR, NIS 2, DORA, anti-money laundering: each text has its own obligations, but they all end up asking the same questions. Who has access to this document? How long have you kept it? Can you prove it?
- GDPRAny organization that processes personal data.Read the page
- NIS 2Essential and important entities in 18 sectors.Read the page
- DORAFinancial entities and their ICT service providers.Read the page
- AML/CFT and KYCBanking, insurance, asset management, legal, accounting, and real estate professions.Read the page
01At a glance
Who is concerned by what.
- Any organization that processes personal dataGDPR
- Medium or large company in a NIS 2 sectorGDPRNIS 2
- Bank, insurer, asset management companyGDPRDORAAML/CFT
- Lawyer, notary, chartered accountant, real estate agentGDPRAML/CFT
- ICT provider to a financial entityGDPRDORA
A general guide, not an analysis: the exact scope depends on your activity, your size, and national legislation. DORA takes precedence over NIS 2 for financial entities.
02Common ground
What all these texts have in common.
- 01
Limit access
Give access to documents only to the people who need them.
- 02
Keep a trail
Who uploaded, viewed, or validated what, and when.
- 03
Control retention
Keep nothing longer than necessary.
- 04
Be able to prove it
To authorities, auditors, and your clients.
A compliance review to prepare?
Tell us about the texts you are subject to and your document exchanges: we will show you what Nestor puts in place, and what remains your responsibility.
Request a demo
- Fully sovereign European hosting
- No account to create for the people you work with