What the Role Covers
Exact scope depends on your license status and business model. A typical engagement includes:
| Service area | What it includes |
|---|---|
| MiCA and CASP compliance oversight | Governance arrangements, internal controls, and ongoing obligations after authorization under the EU Markets in Crypto-Assets Regulation |
| VASP licensing support | Documentation, substance, and regulator dialogue for registration, renewal, or scope changes in non-EU VASP jurisdictions |
| EMI and PI obligations | Safeguarding arrangements, capital monitoring, and reporting calendars for e-money and payment institutions |
| AML/KYC program design | Business-wide risk assessment, KYC and KYB screening setup, transaction monitoring rules, and record keeping |
| MLRO functions | Suspicious activity reporting, internal escalation, and liaison with financial intelligence units |
| Policies and procedures | Drafting and maintaining the compliance manual that regulators, auditors, and partner banks ask to see |
| Risk assessments | Product-level and customer-level reviews that feed your AML program and product decisions |
| Audit and exam readiness | Mock reviews, findings remediation, and document preparation for audits and regulator examinations |
| Board reporting | Compliance updates, breach registers, and decision memos written for directors who are not compliance specialists |
Several functions deserve more depth. We provide dedicated support for each:
- Outsourced compliance officer support for a virtual compliance officer embedded in weekly operations
- Outsourced MLRO services for suspicious activity reporting duties
- KYC and KYB screening setup for customer due diligence
- Outsourced data protection officer services for GDPR obligations
