Meet MOKAS, CySEC and CBC obligations with one platform
Built for MLROs and compliance officers at Cyprus investment firms, CASPs, banks, payment institutions and gaming operators — with every decision documented for inspection.
Your obligations, and how we cover them
MOKAS
Suspicious activity reporting
Timely SAR/STR filings to the Cyprus FIU and records kept for five years.
- SAR/STR filings exported in goAML-compatible XML
- Case notes and evidence attached to each filing
- Immutable audit trail for the 5-year retention period
CySEC
Investment firms and CASPs
Customer due diligence, ongoing monitoring and screening under the Cyprus AML Law and CySEC AML Directive.
- Risk-based KYC and KYB onboarding
- Sanctions, PEP and adverse media screening
- Crypto and investment-firm monitoring rules
Central Bank of Cyprus
Banks, payment institutions and EMIs
AML/CFT controls aligned with the CBC Directive, including transaction monitoring.
- Transaction monitoring with case management
- Ongoing customer screening
- Documented decisions for every alert
National Betting Authority
iGaming operators
Player due diligence and AML obligations under Law 37(I)/2019.
- Fast player onboarding with ID OCR
- Gaming-specific monitoring rules
- Screening of players against sanctions and PEP lists
Local documents and names
OCR for Cypriot and Greek IDs, and name matching across Greek, Latin and Greeklish spellings.
KYB and beneficial owners
Map corporate structures, identify UBOs and screen directors with Cyprus Companies Register checks.
Inspection-ready
A full audit trail for every decision, so the MLRO can show why each alert was closed.
Questions from Cyprus MLROs
Can we file to MOKAS from ComplianceSuite?
SAR/STR filings are exported in goAML-compatible XML for submission to MOKAS, with an immutable audit trail kept for the 5-year retention period required by the Cyprus AML Law.
Does it read Cypriot identity documents?
Yes. OCR covers Cypriot ID cards, passports and ARC residence cards, plus Greek IDs and passports, within support for 11,000+ document types.
Where is our data hosted?
By default in EU regions only (Frankfurt or Dublin). We sign a Cyprus-law DPA on request and keep all processing within the EEA.
See ComplianceSuite in action
30-minute walkthrough tailored to your jurisdiction and stack.