Regulatory Alerts2025-09-30
Added · Updated
Guidelines on outsourcing to cloud service providers (2025)
These guidelines apply to depositaries of alternative investment funds and UCITS that are not subject to DORA, establishing requirements for cloud outsourcing arrangements entered into, renewed, or amended on or after the publication date. The document mandates specific governance, pre-outsourcing due diligence, contractual, security, and exit strategy obligations, with detailed register and notification requirements for critical or important functions. The previous ESMA guidelines cease to apply to entities subject to DORA, while continuing to apply to the specified depositaries until this new publication date.
More like this from ESMA
We email you every new ESMA publication the day it's published.
Topics
Share