Financial sector & fintech compliance

Financial sector and fintech compliance

Financial institutions push their regulatory obligations down the supply chain. Fintechs and technology vendors that serve them need to speak that language: operational resilience, outsourcing, AML and conduct rules. I help technology-driven companies meet those expectations and get through institutional due diligence.

DORAWwft / AMLDMiCAPSD2EBA outsourcing guidelinesWft

What I help with

DORA: ICT risk management, incident reporting, third-party risk and contractual requirements for ICT providers
Outsourcing and cloud requirements under EBA/EIOPA guidelines and DNB expectations
AML/CFT under the Dutch Wwft: customer due diligence, transaction monitoring, sanctions screening design
MiCA readiness for crypto-asset service providers and token issuers
Payment services (PSD2/PSD3) and e-money licensing scope questions
Regulatory mapping for embedded finance, lending and insurance-adjacent products
Supplier questionnaires, due diligence packs and audit rights negotiation

Typical engagements

DORA contract and policy readiness for an ICT provider (fixed fee)
AML/Wwft programme design or review for a fintech
Regulatory perimeter analysis before launching a financial feature
Interim compliance counsel during licensing or a supervisory review

Who this is for

Fintechs, payment and crypto companies, SaaS and cloud vendors selling to banks and insurers, and platforms adding payments or lending.

Frequently asked

Do you handle the licence application itself?

I prepare the regulatory analysis, policies and documentation and coordinate with specialist licensing counsel where the application requires it.

We are a software vendor, not a bank. Why does DORA matter?

Because your bank clients must impose DORA requirements on you by contract, and increasingly test them. Being ready shortens sales cycles.

Can you support DNB or AFM interactions?

Yes, in preparing responses and documentation, in Dutch or English.