Which EU incident reports are due, by when and to whom.
GDPR, NIS2, DORA and CRA, on the Jira work item. And the record of what was sent.
Inside Jira. Privacy first. No servers. It writes only its own reminders.
Qualify once, the clocks start
One question per rule you switched on, with the article’s test beside it, and when you became aware.
Every report shows what the article asks for
The article’s contents for that report, and a link to the rule on EUR-Lex.
DORA’s weekend rule, shown
A deadline on a weekend shows the later noon the rule allows, beside the strict time.
Record what was sent
When, by whom and the reference the authority gave. Never rewritten.
Every incident, in one list
Late first, with each one’s next deadline, across the spaces you choose. Filter it, copy a link to it, download it as Excel or CSV.
Due next, on a dashboard
The incidents with a report due, late first, on any Jira dashboard. Each person sees only the work items they may browse.
Admins choose the rules
The rules that apply, your country, DORA’s weekend rule and the response team.
Four rules, one clock
GDPR: within 72 hours
To the supervisory authority after a personal data breach, and to the people affected when the risk is high.
NIS2: within 24 hours, 72 hours, one month
An early warning, an incident notification and a final report to the national CSIRT or authority.
DORA: within 4 hours, then 72, then one month
An initial notification, an intermediate report and a final report, on the authority’s templates.
CRA: within 24 hours, 72 hours, then the final report
For an exploited vulnerability or a severe incident in a product, on ENISA’s single reporting platform.
Work out your deadlines, free →Every report and its deadline →
From the work item to the record
Qualify the work item
One question per rule you switched on, and when you became aware. That starts the clocks.
See what is due
Each report, when, in how long, and who it goes to, with what the article asks it to hold.
Report it yourself
Dueline sends nothing. You file with the authority, in its own form.
Record what was sent
When, by whom and a reference, kept for the work item and never rewritten.
What stays with you
The assessment is yours
Whether a breach or an incident must be reported is your call. Dueline asks, with the article’s test beside the question.
National law may be stricter
NIS2 is a directive, and a country can ask for more than the EU rule. Dueline shows the EU rule.
Dueline files nothing
No report leaves Jira. You send it, then record it.
It is not legal advice
It works out dates from the texts of the rules as read on EUR-Lex on 28 October 2026, each linked.
What you get
On the work item
- Qualify
- One question per rule that applies, with the article’s test beside it, and the time you became aware.
- Reports by rule
- Each one due, with its deadline, how long is left and who it goes to.
- What the article asks of each report
- Its contents from the article, and a link to the rule on EUR-Lex.
- Record as sent
- When it was sent, by whom, and the reference the authority gave.
- Reports that wait
- A report that runs from an event says which one: a fix, or the incident handled.
- Late says so
- A report past its deadline turns red and points to the reasons for the delay the rule asks for.
- Reminders
- A comment on the work item, mentioning the response team, when a quarter of the time is left and when a report is late. It may come a few minutes late.
- Correct an entry
- Fix a time or a reference. The original stays in the record.
Across your spaces
- The register
- Every qualified incident in one list, late first, with its next deadline. Filter it, copy a link to it, download it as Excel or CSV.
- Due next, on a dashboard
- The incidents with a report due, late first, in the spaces you choose. Each person sees only the work items they may browse.
For Jira admins
- The rules that apply to you
- Switch on GDPR, NIS2, DORA or CRA. Only those are asked.
- Your main establishment
- The country sets the time zone a weekend is read in.
- DORA’s weekend rule
- Shows the later noon the rule allows, unless you are an entity it never applies to.
- The response team
- People and groups who may qualify and record. Jira admins always may.
- Kept on Atlassian
- The record is append-only: a correction is a new entry.
- Nothing sent
- No external service. The only thing it writes to a work item is its reminder comment.
Dark mode, too
Every Lineset app follows your Jira theme, light or dark.
Secure and private
- Inside Jira
- It runs where your Jira runs, and nothing leaves your site.
- No servers
- None of ours, and no external services: nothing is sent anywhere.
- One write
- Its own reminder comment on a work item, and never a field.
- Reads as you
- Your own Jira permissions apply to what it reads.
Built on Atlassian Forge. No tracking. What it reads and stores →
Pricing
Free up to 10 users
The price per user drops as you grow
- Billed by Atlassian
- Every feature on the free tier
- 30-day free trial
Questions
Does Dueline send the reports?
No. It shows which reports are due, when and to whom, and keeps the record of what you sent. You file with the authority yourself, then record it on the work item. Nothing leaves Jira.
Does Dueline decide whether a report is due?
No. Qualifying a work item is your assessment: Dueline asks one question for each rule you switched on, with the article’s test beside it, then starts the clocks. National law may be stricter than the EU rule, as NIS2 allows, so check your country’s too. Dueline is not legal advice.
Does it move a DORA deadline off a weekend?
It shows the later time the rule allows, noon of the next working day, beside the strict deadline. Only weekends are built in, read in your country’s time zone: bank holidays are not, so a deadline Dueline shows can be earlier than the law allows, never later. A competent authority may rule the move out for a significant entity. For credit institutions, central counterparties, trading venues and NIS2 entities the rule does not move the initial and intermediate reports: an admin switches that on in the settings.
What does it cost?
Free up to 10 users, then billed per user by Atlassian, with a 30-day free trial. Every feature is on the free tier. The price per user drops as you grow, and the Marketplace listing shows the exact cost for your site.
All questions →Doing it with Jira’s own tools? Step-by-step guides →