About

This app is provided free of charge to fellow peers in the financial industry. There is no fee, no registration, no login, no advertising, no analytics and no cookies. Use it to classify ICT-related incidents under DORA, keep track of the reporting deadlines, assess cyber threats and produce the reports and voluntary notifications to Finansinspektionen (the Swedish Financial Supervisory Authority).

Ideas, questions and bug reports are welcome through the feedback form.

• Incidents, classifications, report drafts, cyber threats and settings are stored in your browser's local storage on this computer. They are never saved on the server.
• When you classify an incident, calculate deadlines or generate a report, the data is sent to the server over HTTPS, processed in memory and returned. It is not stored or logged.
• Clearing your browser data removes everything. Use Export data on the overview to keep a backup or to move your data to another computer. Avoid using the app on shared computers.

• Feedback that you choose to send: category, message, the optional name and e-mail address, the page you came from, your IP address and browser user agent.
• Error reports when a request fails on the server: time, address of the page, error message, error reference, your IP address and browser user agent. The content of your forms is never included.
• Access logs to protect the service against DDoS attacks and misuse: your IP address, the time, the address of the page or API, the response status and your browser user agent for every request. They are used to detect, rate limit and block abusive traffic and never contain the content of your forms.
• Feedback is deleted automatically after 365 days and error reports after 90 days.

The IP address shown at the bottom of each page is looked up by your browser from api.incudo.se. It is the address that the access logs record.

The app is provided as is, without warranty of any kind. It is a tool, not legal advice. Check the result against the regulations and Finansinspektionen's guidance. The financial entity remains responsible for its classification and reporting.