Unicorn Intelligence: DORA Appendix
Version date: 29 October 2026
This appendix (the "Appendix") forms part of the Terms of Service of Unicorn Intelligence (the "Terms") between the Customer and Unicorn Private LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States of America ("Unicorn Private"). It applies when the Customer is a financial entity subject to Regulation (EU) 2022/2554 on digital operational resilience for the financial sector ("DORA"). It is accepted online together with the Terms and does not require a separate signature. It contains the provisions of Article 30(2) of DORA for ICT services that do not support critical or important functions.
1. Scope and classification
1.1 The Service is a standard, multi-tenant information service delivered over the internet. It is designed to support the Customer's research and screening activities and not to run critical or important functions of the Customer.
1.2 The Customer is responsible for classifying the Service in its register of information and for assessing whether it supports a critical or important function. Unicorn Private does not offer the additional provisions of Article 30(3) of DORA, and the Customer should not use the Service to support a critical or important function.
2. Description of the service
2.1 The functions of the Service are described in the Terms and on intel.unicornprivate.com: sanctions and counterparty screening, company dossiers, competitor and sector intelligence, regulatory monitoring and public tender monitoring, available through the website, the dashboard, the API and webhooks.
2.2 Unicorn Private does not subcontract the provision of the Service as a whole. It uses the ICT sub-processors listed in section 3.
3. Locations and sub-processors
3.1 The Service is provided by Unicorn Private from the United States. Data are stored and processed on the infrastructure of Cloudflare, Inc., in its global network, and billing data are processed by Stripe, Inc. The current list of sub-processors is published on intel.unicornprivate.com/trust.
3.2 Unicorn Private notifies changes to the sub-processors or to the locations of processing on that page at least 30 days in advance.
4. Availability, authenticity, integrity and confidentiality of data
4.1 Unicorn Private applies the technical and organisational measures described in Annex 2 of the Data Processing Agreement, including encryption in transit, encryption at rest by the infrastructure provider, logical separation of each customer's data and access control.
4.2 The Service is provided without a contractual service level. Unicorn Private aims at continuous availability and publishes the status of the Service and of its sources on intel.unicornprivate.com/status.
5. Access, recovery and return of data
5.1 During the subscription, admin users can export the Customer's data (names, matches, audit log, dossiers) at any time from the dashboard and the API, in CSV, JSON and PDF formats.
5.2 In case of termination, expiry or insolvency of Unicorn Private, the Customer can export its data until the end of the paid period, and in any case for at least 30 days after the end of the subscription if requested by email before that date. Afterwards the data are deleted as described in the Terms.
6. Incidents
6.1 Unicorn Private informs the Customer's admin users by email, without undue delay, of ICT incidents that affect the Service and the Customer's data, with the information available at the time.
6.2 Unicorn Private provides the Customer, by email and at no additional cost, with the information reasonably available to it about an ICT incident related to the Service.
7. Cooperation with authorities
Unicorn Private cooperates with the competent authorities and resolution authorities of the Customer, including persons appointed by them, by providing information and documentation about the Service on request.
8. Access, inspection and audit
8.1 The rights of access, inspection and audit of the Customer and of its competent authorities are exercised in the first place through the documentation published on intel.unicornprivate.com/trust, including the filled-in security questionnaire, and through written questions sent by email.
8.2 Where required by DORA or requested by a competent authority, Unicorn Private grants further access to information and documentation relevant to the Service, at the Customer's cost, in a way that protects the confidentiality of other customers.
9. Termination and exit
9.1 The Customer may terminate the Service at any time from the billing portal, with effect at the end of the period already paid, and in the cases set out in Article 28(7) of DORA, including when required by its competent authority.
9.2 Unicorn Private may terminate the Service with at least 30 days notice by email, except in case of a serious breach of the Terms by the Customer.
9.3 Exit is supported by the export functions described in section 5. The Service does not require migration assistance because data are available in standard formats.
10. Security awareness and training
The Customer may include the Service in its ICT security awareness programmes and digital operational resilience training. Unicorn Private makes available the documentation on intel.unicornprivate.com/trust and on intel.unicornprivate.com/docs for this purpose.
11. Precedence
In case of conflict with the Terms, this Appendix prevails for financial entities subject to DORA. The limitations of liability of the Terms apply, to the extent permitted by law.
Accepted online at subscription. The English version prevails in case of differences between languages.