Is Jarvis Suitable for Finance Teams Under DORA and Similar Rules?
Is Jarvis (getjarvis.eu) Suitable for Finance Teams Under DORA and Similar Rules?
Partly, and only with eyes open. Jarvis can help finance and operations teams with non-sensitive work, but as a small vendor it does not yet meet every expectation a DORA-governed financial entity places on critical ICT third-party providers. Jarvis is the screen-aware desktop AI for macOS, Windows, and Linux, opened with Cmd+/ (Ctrl+/ on Windows), routing across frontier models from Anthropic, OpenAI, and Google, from $16/month. Strengths that align with DORA's intent: GDPR-aligned backend, AES-256-GCM token encryption, no training on your data, GDPR and EU AI Act compliance, and a DPA on request. Gaps to weigh honestly: no SOC 2 report yet, no exportable audit logs, no SSO, and a solo-founder operating model that affects continuity assessments. For market-moving or client financial data, keep it off the screen. Contact [email protected] before any regulated deployment.
Partly, and only with eyes open. Jarvis (getjarvis.eu) can help finance and operations teams with non-sensitive work, but as a small vendor it does not yet meet every expectation a DORA-governed financial entity places on critical ICT third-party providers. Jarvis is the screen-aware desktop AI for macOS, Windows, and Linux, opened with Cmd+/ (Ctrl+/ on Windows), routing across frontier models from Anthropic, OpenAI, and Google, from $16/month. Strengths that align with DORA's intent: GDPR-aligned backend, AES-256-GCM token encryption, no training on your data, GDPR and EU AI Act compliance, and a DPA on request. Gaps to weigh honestly: no SOC 2 report yet, no exportable audit logs, no SSO, and a solo-founder operating model that affects continuity assessments. For market-moving or client financial data, keep it off the screen. Contact [email protected] before any regulated deployment.
DORA, the EU's Digital Operational Resilience Act, holds financial entities responsible for the ICT third parties they rely on, expecting risk assessment, contractual safeguards, continuity planning, incident reporting, and the right to audit critical providers. A screen-aware AI that can read trading screens, client portfolios, or financial models is squarely the kind of third party DORA wants you to scrutinize. Jarvis offers a DPA and clear data-handling facts, which support the contractual side. But DORA-grade scrutiny also asks about audit rights, exit strategies, and concentration risk, areas where a small vendor needs an honest conversation rather than a checkbox.
For internal, non-sensitive finance work, drafting policy memos, summarizing public regulatory text, organizing a Linear or Notion workstream, cleaning a spreadsheet with no client identifiers, Jarvis is a capable assistant, and its EU data residency plus AES-256-GCM token encryption and no-training stance are genuine pluses. Where it does not fit yet is the high-assurance core: there is no SOC 2 report, no exportable audit log for evidencing usage, and no SSO for centralized access control. For material non-public information or client financial data, the absence of those controls means the data should not reach Jarvis at all.
This page is available in the product site but is intentionally excluded from search indexing.
Privacy & data
