Classifies an ICT-related incident as major or non-major under DORA (EU) 2022/2554 Art. 18, applying the published RTS (EU 2024/1772) numeric criteria across seven severity dimensions, then starts the Art. 19 reporting clock (4-hour initial notification, 72-hour intermediate report, 1-calendar-month final report) once classified major. Emits a hash-anchored OpenChainGraph v0.4 artifact.
Classification clock, not a filing system
Not legal advice
🔒 All inputs are processed locally in your browser. No data is transmitted. Use synthetic or anonymised inputs only, do not enter real personal or confidential data.
Scope limits, read before use: the numeric thresholds pinned here (10% clients affected, 24h duration, 2 member states, EUR 100,000 economic impact) are MODERATE-confidence citations of the 2024 RTS/ITS headline figures, not a certified reproduction of the full regulation text, which combines several per-criterion nuances this tool does not model (e.g. absolute-count limbs, entity-type-specific relative thresholds). Verify against the final consolidated RTS/ITS text at legal review before relying on this verdict for an actual filing. A DORA incident classifier already ships as ART-09 (earlier draft-RTS citation, no reporting-clock link); this tool cites the final 2024 RTS/ITS package and follows the ART-428 notification-clock pattern instead; the overlap between the two is a known open question, not hidden.
When the incident was classified. Reporting clocks start here if MAJOR.