Get ready for SORA 2.5

Planning to submit a new application for an operational authorisation?

The European Union has announced the progressive transition from SORA 2.0 to SORA 2.5 for operational risk assessments. By the end of 2026, SORA 2.5 is expected to become the sole methodology applicable to applications for operational authorisations, replacing SORA 2.0.

To support applicants during this transition and help avoid processing delays, we strongly recommend using SORA 2.5 for all new applications from now on.

Please note that new applications based on SORA 2.0 will no longer be accepted from December 2026 onwards.

Applicants intending to submit a new application for an operational authorisation should therefore prepare their risk assessment in accordance with SORA 2.5.

What should you do?

If you are currently preparing a new application, please take this transition into account and ensure that sufficient time is allocated to familiarize yourself with the requirements of SORA 2.5.

How do you apply?

The application procedure remains unchanged and continues to be available through Guichet.lu.

However, the application forms have been updated to reflect the requirements of SORA 2.5. Applicants submitting an application under this methodology must therefore use the "UAS401 – Application for Operational Authorisation (SORA 2.5)" form.