Compliance Advisory Services

Policies should reflect how your business actually operates. We draft clear, practical policies based on your activities, risks and regulatory duties. The scope may cover customer due diligence, AML, sanctions, transaction monitoring, data handling and other compliance areas. We also set out who is responsible for each task and what staff should do when an issue arises. Existing policies can be reviewed and updated where they no longer match current regulations, business activities or working practices.

Fraud can come from customers, employees, suppliers or weaknesses in internal processes. We help businesses put together an anti-fraud framework that covers prevention, detection, investigation and response. This may include a fraud risk assessment, clear staff responsibilities, reporting routes, investigation procedures and controls for higher-risk activities. We can also review the framework after a fraud incident or a change in operations to find out what failed and where stronger measures are needed.

Personal information must be collected, used, stored and shared with care. We help businesses understand what data they hold and whether it is being handled properly. Our support may cover privacy policies, consent, staff access, retention periods, data sharing, cross-border transfers and requests from individuals. We can also prepare a clear process for managing data breaches. The work is based on the information your business handles and the data protection rules that apply to it.

Customers should receive clear information, fair treatment and a proper response when something goes wrong. We review how your business communicates with customers, presents products, manages complaints and handles vulnerable consumers. The work may also cover disclosures, responsible financing, customer access and staff responsibilities. Where we find a weakness, we help you improve the relevant process or control. This gives your team a more consistent way to meet consumer protection requirements throughout the customer relationship.

Launching a fintech business involves more than registering a company and developing a product. Licensing, governance and compliance arrangements must also be considered before customers come on board. We help fintech businesses understand the requirements linked to their proposed services and operating model. Support may include licence applications, policies, risk controls, customer processes and regulatory documents. Addressing these matters during setup can prevent delays and reduce the need to rebuild important processes after the business has launched.

Stored Value Facilities allow customers to hold money or value for future payments. This brings specific requirements around licensing, safeguarding funds, customer checks, fraud prevention and day-to-day operations. We help businesses understand which SVF requirements apply and what must be prepared for the application or approval process. Our team can also assist with policies, operating procedures, risk controls and supporting documents. The work is shaped around how the facility will operate and the customers it intends to serve.

Retail Payment Systems process or support payments between customers and businesses. Setting one up requires careful work around licensing, governance, operational risk, security and consumer protection. We help businesses understand the regulatory expectations attached to their payment service and prepare the documents needed to support their application. This may include policies, procedures, control frameworks and descriptions of how the system will operate. We keep the work focused on the actual payment activities the business plans to provide.

FATCA and CRS require certain businesses to identify reportable customers and provide information to the relevant authorities. We help you understand whether these requirements apply and what your business needs to do. This may involve reviewing customer checks, tax residency information, reporting arrangements, records and staff responsibilities. We can also identify gaps that may lead to missing or incorrect information. The aim is to make FATCA and CRS work part of a clear routine instead of a last-minute reporting exercise.

Your FATCA and CRS documents should clearly explain how customers are checked, classified and reported. We prepare policies and procedures that reflect your business, customer base and reporting duties. The documents can cover tax residency declarations, indicia checks, due diligence, account classification, record keeping, reporting and escalation. We also define who handles each part of the process. This gives employees practical instructions to follow and reduces the risk of different teams applying the requirements in different ways.

A FATCA and CRS gap assessment checks whether your current process meets the applicable requirements. We review relevant policies, customer records, tax residency details, classification methods, reporting steps and staff responsibilities. Rather than giving you a general checklist, we show where the process is unclear, incomplete or not being followed. The findings are set out with practical actions, helping your team decide what needs attention first and what can be improved before the next reporting deadline.

Staff involved in onboarding, compliance and reporting need to understand their role under FATCA and CRS. Our training explains the requirements in plain language and uses examples linked to the work employees carry out. Topics may include tax residency, customer declarations, reportable accounts, indicia, due diligence, record keeping and escalation. Sessions can be adjusted for different teams and levels of responsibility. The purpose is to help staff recognise common issues and handle them correctly when they arise.