Markets in Crypto-Assets Regulation

    MiCA compliance software for authorised EU crypto businesses.

    ComplianceSuite gives CASPs one operating layer for customer and business verification, Travel Rule exchange, wallet and transaction monitoring, investigations, governance evidence and regulatory reporting. Each legal entity can run the controls required for its services while group compliance sees risk across the full EU operation.

    • CASP onboarding and ongoing due diligence
    • EU TFR Travel Rule from the first euro
    • Wallet, sanctions and transaction monitoring
    • Governance and incident evidence by entity

    Authorisation and governance evidence

    Map policies, control owners, approvals, outsourcing oversight and remediation to the operating evidence behind them. Version history shows which rule and policy applied when a customer, wallet or transaction decision was made.

    • Entity-specific control and policy registers
    • Maker-checker approvals and MLRO sign-off
    • Outsourcing and third-party evidence
    • Board, committee and supervisor reporting packs

    KYC, KYB and safeguarding workflows

    Onboard individuals and businesses, resolve beneficial owners, assess source of funds and apply risk-based refresh cycles. Keep customer assets, permissions and exceptions tied to the same verified identity and legal-entity record.

    • Identity, business and UBO verification
    • PEP, sanctions and adverse-media screening
    • Enhanced due diligence and source of funds
    • Continuous risk-event monitoring

    Travel Rule and self-hosted wallets

    Exchange IVMS 101 data through TRP, OpenVASP and other supported networks, assess the counterparty CASP and capture self-hosted-wallet verification evidence where the EU Transfer of Funds Regulation requires it.

    • Originator and beneficiary data exchange
    • Counterparty CASP due diligence
    • Self-hosted-wallet control verification
    • Exceptions, holds and rejection rationale

    On-chain risk and market-abuse cases

    Combine blockchain analytics, wallet attribution and transaction behaviour with customer risk. Alerts become governed investigations with linked evidence, ownership, escalation and a complete decision trail.

    • Bitcoin, EVM, Solana and TRON coverage
    • Sanctioned, mixer, bridge and hop-risk signals
    • Case workflows for suspicious activity
    • Incident and regulator-ready evidence exports

    FAQ

    Regulator questions, answered.

    Who needs MiCA compliance software?

    EU crypto-asset service providers such as exchanges, custodians, brokers, trading platforms and transfer-service providers need operational controls that match the services covered by their authorisation. Token issuers have separate MiCA obligations; the applicable configuration depends on the asset and activity.

    Is the Travel Rule part of MiCA?

    The operational requirements apply alongside MiCA through the EU Transfer of Funds Regulation, Regulation (EU) 2023/1113. ComplianceSuite connects the Travel Rule exchange to the same KYC, wallet-risk, sanctions and case-management record rather than treating it as a separate message tool.

    Which Travel Rule protocols does ComplianceSuite support?

    ComplianceSuite normalises IVMS 101 data across supported networks including TRP and OpenVASP, with integrations for additional Travel Rule providers. The counterparty route, payload, acknowledgement and compliance decision remain in one audit trail.

    Does MiCA authorisation cover every EU country?

    An authorised CASP can provide covered services across the EU through MiCA's passporting framework, subject to the required notifications and service scope. Each entity still needs to account for national FIU reporting, local competent-authority processes and other applicable law.

    How does ComplianceSuite handle self-hosted wallets?

    The platform records wallet ownership or control evidence, screens the address and connected exposure, applies the appropriate transfer rule and preserves the decision in the customer case. Controls can vary by value, risk and legal entity.

    Where is EU customer and wallet data stored?

    EU-hosted deployment is available in Frankfurt or Dublin, with encryption, role-based access, maker-checker controls and an immutable audit trail. Cross-entity access and retention can be configured to the approved operating model.

    Turn your MiCA obligations into operating controls.

    Bring your authorisation scope or current control map and we will show the KYC, Travel Rule, monitoring and evidence workflow for your CASP.