DORA Supplementary Terms

Dernière mise à jour : 10 octobre 2025

Télécharger le PDF

to the ANYDESK General Terms and Conditions supplementing the requirements of the DORA Regulation

("Addendum")

Preamble

This Addendum supplements the contract concluded between AnyDesk Software GmbH ("ANYDESK"), Türlenstraße 2, 70191 Stuttgart, (District Court Stuttgart HRB 748838) and you as its customer ("Customer"), including the ANYDESK General Terms and Conditions (the "GTC") (available at https://anydesk.com/terms), the Service Level Agreement ("SLA") (available at https://anydesk.com/sla), as applicable, and the Data Processing Agreement ("DPA") (available at https://anydesk.com/data-processing-agreement) (together, the "Contract").

This Addendum is provided in light of the Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience in the financial sector ("DORA"), provided that the Customer acts as a financial entity within the meaning of Art. 2 (2) DORA ("Financial Entity").

ANYDESK and the Customer enter into this Addendum to define their respective rights and obligations under DORA in relation to the provision of ANYDESK's services, in particular the ANYDESK software, ("ANYDESK Services").

  1. Scope, purpose and duration

    1. This Addendum applies on the condition that the Customer is classified as a Financial Entity and uses the ANYDESK Services as ICT services within the meaning of Art. 3 (21) DORA in a manner which is subject to DORA. For existing customers who entered into a contract with ANYDESK before 17 January 2025, this Addendum shall apply retroactively as of 17 January 2025.

    2. This Addendum shall only be applicable once the Customer has obtained the required licence or authorisation to operate as a Financial Entity. It shall cease to be applicable with immediate effect and with no further action by either party, if the required licence or authorisation to act as a Financial Entity is withdrawn.

    3. The Parties expressly recognise and agree that:

      1. The ANYDESK Services do not constitute ICT services that support critical or important functions of the Customer within the meaning of Art. 3 (22) DORA;

      2. ANYDESK is not a critical ICT third-party service provider within the meaning of Art. 3 (23) DORA.

    4. This Addendum has been prepared in accordance with Art. 30 (1) and (2) DORA, which applies to non-critical and non-important ICT services.

    5. If the Customer classifies the ANYDESK Services as ICT services supporting critical or important functions under Art. 3 (22) DORA, they shall notify ANYDESK without undue delay. In response, ANYDESK will provide the Customer with supplementary terms to ensure compliance with DORA's contractual minimum requirements for ICT services supporting critical or important functions.

  2. Definitions

    1. Unless otherwise defined in this Addendum, the capitalized terms shall have the meaning assigned to them in (i) the GTC or, if not defined there (ii) in Art. 3 DORA.

    2. All website references in this Addendum refer to the specified websites and any successor or related locations provided by ANYDESK, which may occasionally be updated by ANYDESK.

  3. Description of services (Art. 30 (2)(a) DORA)

    The ANYDESK Services provided to the Customer shall be described in detail

    1. in the order confirmation,

    2. in the GTC,

    3. on the ANYDESK website, where the features and functions of the respective license packages offered are described and listed (currently at https://anydesk.com/en/pricing).

  4. Locations of service provision and data processing (Art. 30 (2)(b) DORA)

    1. The ANYDESK Services are provided at the following locations (and to the extent that ANYDESK processes data for the Customer in the course of providing the ANYDESK Services ("Customer Data"), this data is stored at the following locations):

      1. ANYDESK’s registered address, as described in this Addendum; and

      2. location of the authorised subcontractors/subprocessors, as listed in the DPA, which ANYDESK has engaged to provide the ANYDESK Services.

    2. ANYDESK shall notify the Customer about any changes to the location of the ANYDESK Services in advance, in accordance with the amendment procedure set out in the GTC and DPA for any amendments to (i) the GTC or (ii) the list of subprocessors.

  5. Availability, authenticity, integrity and confidentiality (Art. 30 (2)(c) DORA)

    1. ANYDESK offers a high security standard for information security (Art. 28 (5) DORA) with appropriate technical and organisational measures to protect the Customer Data ("TOMs"). The TOMs can be found as annex to the DPA. In addition, ANYDESK provides a detailed description of its security guidelines and processes at https://trust.anydesk.com.

    2. ANYDESK provides information on the availability of the ANYDESK Services and their main functions (uptime, list of incidents) on the website https://status.anydesk.com/ (the "ANYDESK Status Page").

    3. The relevant obligations with regards to authenticity, integrity and confidentiality of the Customer Data processed by ANYDESK are included in the GTC and the DPA.

  6. Access, recovery and return of data (Art. 30 (2)(d) DORA)

    Insofar as ANYDESK processes Customer Data as part of the provision of the ANYDESK Services, access, recovery and return of Customer Data shall be governed by the provisions of the GTC and the DPA.

  7. Description of the service level (Art. 30 (2)(e) DORA)

    1. The service level ("Service Level") described in the Contract, especially the SLA, as applicable, shall apply, including updates and revisions.

    2. Information on the availability of the ANYDESK Services and their most important functions (uptime, list of incidents) is available via the ANYDESK Status Page: https://status.anydesk.com/. On the ANYDESK Status Page, anyone can subscribe to receive incident updates on the ANYDESK Services via email.

  8. Support in the event of ICT incidents (Art. 30 (2)(f) DORA)

    1. ANYDESK shall notify the Customer immediately by email, via the customer portal, or via the ANYDESK Trust Center and/or Status Page of an ICT incident within the meaning of Art. 3 (8) DORA that affects the ANYDESK Services or the Customer Data.

    2. ANYDESK shall support the Customer in the event of an ICT incident. The support service shall generally be provided at no additional cost, unless otherwise stipulated in the Contract, in particular the SLA, as applicable.

  9. Cooperation with authorities (Art. 30 (2)(g) DORA)

    ANYDESK is obligated to fully cooperate with the competent authorities and the resolution authorities of the Customer, including persons appointed by them.

  10. Termination provisions (Art. 30 (2)(h) DORA; Art. 28 (7) DORA)

    1. The Customer has the right to terminate the Contract, including this Addendum, for good cause in any situation specified in Art. 28 (7) DORA.

    2. In all other respects, the termination provisions in the GTC apply.

  11. Training on ICT security and digital operational resilience (Art. 30 (2)(i) DORA)

    1. ANYDESK implements and maintains internal training programmes to raise awareness of ICT security and digital operational resilience.

    2. The training programmes are regularly reviewed and updated by ANYDESK.

  12. Miscellaneous

    1. A clear allocation of rights and obligations of the Customer and ANYDESK is set out in writing in this Addendum. The Customer can download (i.e., print as PDF) the online GTC and this Addendum at any time. Additionally, the Customer can request a copy of the Contract from ANYDESK at any time, free of charge, in a durable medium (Art. 30 (1) DORA).

    2. In the event of a conflict between the GTC and this Addendum, this Addendum shall take precedence. All other provisions of the GTC shall remain unchanged and in full force and effect.

    3. ANYDESK reserves the right to amend this Addendum at any time in accordance with the amendment procedure set out in the GTC. Any such amendment will not reduce the overall operational resilience or security of the ANYDESK Services provided to the Customer.

    4. This Addendum, along with any disputes or claims arising from or related to it, will be governed by the same law as the applicable GTC and will fall under the exclusive jurisdiction specified in the GTC.

    5. This Addendum has been originally drafted in English language.