Frequently Asked
Questions

AltShift products are structured compliance systems — not generic document templates. Each system contains multiple documents that together answer a specific regulatory question: what you need to implement, document, and evidence to meet a given set of DORA or NIS2 obligations.

Every document is pre-structured, cross-referenced to the relevant regulation articles and technical standards (RTS/ITS), and ready to be populated with your organisation's specific details. You get working compliance assets, not blank frameworks.

AltShift systems are designed for:

• Financial entities subject to DORA — banks, payment institutions, e-money institutions, investment firms, insurers, and their critical ICT third-party providers.
• Essential and important entities under NIS2 — organisations in energy, transport, banking, health, digital infrastructure, and 14 other sectors.
• Compliance officers and IT managers at SMEs who need to build a defensible compliance programme without a large consulting budget.
• Compliance consultants who advise multiple clients and need a reliable, structured starting point for each engagement.

Documents are delivered as editable files — Word (.docx) and Excel (.xlsx) depending on the document type. Policies and procedures are Word documents with placeholders for your organisation's details. Assessments and frameworks are Excel workbooks with pre-built structure and scoring logic. Dashboards are Excel files with pre-built KPI tracking and board reporting layouts.

All systems are delivered as a single .zip archive containing all documents.

Immediately after payment, you receive a download link by email. The .zip archive containing all documents in your system is available within seconds of purchase. Downloads are available indefinitely — if you lose access, contact us and we'll resend your link.

Country Packs are delivered separately — not in the immediate download. After purchase, you receive an email with a short form to select your country from all 27 EU Member States. Your Country Pack is delivered within 1 business day.

Country Packs are included with NIS2 Professional and NIS2 Complete systems, and the EU Cyber Complete system.

Each purchase covers use within one organisation. Compliance consultants using AltShift products across multiple client engagements need a separate licence per client. For multi-client or white-label arrangements, contact us at contact@altshift.me.

DORA applies to financial entities regulated under EU law — credit institutions, payment institutions, e-money institutions, investment firms, crypto-asset service providers, insurers, reinsurers, trading venues, and central counterparties — as well as critical ICT third-party service providers. DORA has been in force since 17 January 2025. If you are uncertain, consult a qualified legal adviser.

NIS2 applies to medium and large entities in 18 sectors across the EU, including energy, transport, banking, health, digital infrastructure, and public administration. Each EU Member State has transposed NIS2 into national law. NIS2 enforcement is active. If uncertain, consult a qualified legal adviser or your national competent authority.

Yes. AltShift DORA documents are aligned to the Level 2 regulatory technical standards published by the ESAs, including RTS 2024/1772 (incident classification), RTS 2024/1774 (ICT risk management), the RTS on third-party risk management, and the ITS on the Register of Information. This alignment is a key differentiator — most competing products reference only the DORA main text and ignore the binding technical standards.

No. Compliance is a state of your organisation, not a property of a document. AltShift products give you the right structure and a defensible starting point — compliance requires populating documents accurately, implementing the controls they describe, and maintaining them over time.

If you are starting from scratch and need to understand your current position, start with a Starter System — it includes the Gap Assessment, Risk Framework, Incident Classification, and Incident Response Playbook. If you need a full governance and risk management framework, go Professional. If you want complete coverage in one purchase, go Complete.

Because our products are digital downloads, we generally do not offer refunds after download. Exceptions apply for corrupted files, duplicate purchases, or significant misrepresentation. Requests must be submitted within 7 days to contact@altshift.me with your order number.

Yes. Lemon Squeezy, our payment processor, generates a VAT-compliant invoice automatically for every purchase. If you need a specific format or have VAT questions, contact us at contact@altshift.me.

When material changes to DORA or NIS2 affect our products, we release updated versions. Product updates for 12 months are included in every purchase. After 12 months, updates are available via our Compliance Updates Subscription.

Email us at contact@altshift.me. We respond within one business day. Support covers questions about product content, structure, and usage — not individual legal or compliance advice.