Compliance Report
Data last reviewed April 2026Regul8 — Compliance Report
August 15, 2026Activities: Exchange / Trading Platform — Jurisdictions: European Union
regul8app.vercel.app · General information only, not legal advice.
Tax treatment
Tax summary per jurisdiction (shared across all activities). General information, not tax advice.
No EU-wide crypto tax — set per Member State. DAC8 (in force Jan 2026) imposes pan-EU CASP reporting of user holdings to tax authorities; OECD CARF aligned.
Exchange / Trading Platform
Licences Required
Key Obligations
- • KYC/KYB per AMLD6 + EU AML Package 2024
- • AML/CFT program
- • MiCA whitepaper for non-listed tokens (already-traded exemption Art. 4(2) for XRP/BTC/ETH)
- • Capital min. €125K (CASP exchange tier — Art. 67, Class 2)
- • FATF Travel Rule >€1K (TFR Reg. 2023/1113)
- • Market abuse rules (MiCA Title VI, Art. 86+)
- • Governance & fit-and-proper (Art. 68)
- • Environmental impact disclosure (Art. 66)
Estimated Timeline
6–18 months (depends on chosen NCA — LT fastest, IE/LU/MT slower)
Estimated Cost
€50K–€500K (varies by hub: LT cheapest, IE/LU more expensive)
Alternative Jurisdictions
IMPLEMENTATION — How, with who
💸 Payment
Not a payment-rail activity🛡️ KYC / AML
🔑 Wallet infra
Quarterly prudential + transaction reports to home-state NCA · Annual audited accounts · Monthly AML filings · Immediate incident reports · MiCA Art. 72 conflicts-of-interest report annually.
Mandatory risk warnings on all communications (MiCA Art. 66). No yield / return promises. Whitepaper and complaint channels must be clearly displayed. Non-misleading requirement strictly enforced. Influencer disclosures required.
Providers, vendors and partners that can run your compliance stack in the selected jurisdictions. Filtered by activity (custody, payment, AML/KYC) and jurisdictional coverage.
🛡️ AML / KYC vendors for your jurisdictions
A regulated activity typically needs KYC at onboarding, sanctions / PEP screening, transaction monitoring, and Travel Rule messaging. Here are the established providers that operate in (or passport into) your jurisdictions, grouped by function. Sumsub covers identity + Travel Rule in a single SDK; Chainalysis / Elliptic / TRM have native XRPL coverage.
Model: KYC + KYB + AML monitoring + Travel Rule under one roof. Strong in EU + emerging markets, MiCA-aligned. ~5,000 clients including major crypto exchanges.
Crypto coverage: Chain-agnostic. Used by XRPL VASPs needing onboarding KYC + Travel Rule + monitoring in a single SDK.
Model: IDV + biometric verification + ongoing monitoring. Acquired by Entrust (2024). Strong in UK / EU / US fintech and crypto markets — Coinbase Europe, Revolut historic clients.
Model: AI-powered IDV — document verification + biometric liveness + ongoing monitoring. Used by major exchanges (Bitstamp, Bitpanda, Bitso) and banks. SOC2 + ISO 27001.
Model: No-code IDV platform with high configurability. Used by US-first fintech / crypto firms — Block (Cash App), Brex, Robinhood. Strong KYB + business-verification module.
Model: IDV across 230+ countries, 11K+ document types. Estonian-base + EU MiCA-aligned. Used by Bolt, Wise, Kraken, Bitstamp.
Model: GlobalGateway — KYC + KYB across 195 countries via 450+ data sources. Strong in B2B verification (UBO, business registry checks). Canadian-base, served by major banks + crypto firms.
Model: AI-powered sanctions / PEP / adverse-media screening + ongoing monitoring. Strong in fintech and crypto — Coinbase, Gemini, BitGo, Klarna among clients. Real-time data updates.
Model: Refinitiv's World-Check (now part of LSEG) — the gold-standard sanctions / PEP / heightened-risk database. Curated by 400+ analysts; used by Tier-1 banks worldwide.
Model: Bridger Insight XG sanctions screening + Accuity payment screening. Strong in regulated banking + crypto on-ramp. US-base with global reach.
Model: Industry-standard crypto transaction monitoring + investigations + sanctions screening. Used by US Treasury / IRS / FBI + most regulated exchanges. Reactor (investigations) + KYT (Know Your Transaction) products.
Crypto coverage: Native XRPL coverage — XRPL transactions + IOU flows + AMM tracked. Reactor supports XRPL investigations. RLUSD coverage from launch.
Model: Crypto-native AML platform — Holistic (cross-chain monitoring) + Lens (entity intelligence). UK-base, MiCA-aligned. Strong in EU + UK regulated markets. Coinbase, Revolut, Binance among clients.
Crypto coverage: XRPL covered. Cross-chain heuristics for stablecoin tracing (USDC, USDT, RLUSD).
Model: Real-time blockchain intelligence + sanctions screening + investigations. Used by US Secret Service, FBI, OFAC + major crypto exchanges. Strong in compliance automation for institutional flows.
Crypto coverage: XRPL native coverage. RLUSD tracking from issuance.
Model: Leading Travel Rule messaging network for VASPs (FATF R.16). Pre-transaction sanctions screening + counterparty verification. 1,200+ VASPs onboarded. Founded by post-FATF Travel Rule architects.
Crypto coverage: Chain-agnostic — works for XRPL VASPs that need MiCA / Travel Rule compliance from day one.
Public information — not a recommendation. Verify current certifications (SOC2, ISO 27001) and jurisdictional coverage with each vendor before integration.
🔑 Wallet infrastructure for your jurisdictions
Embedded-wallet infrastructure vendors (DKG-MPC + social login) serving the markets in your selected jurisdictions. Distinct from institutional custodians — these vendors provide non-custodial / grey-zone wallets for consumer UX ("no seed phrase"). Click any card to open the vendor site.
Focus: DKG-MPC + social login (Google, Apple, X, Discord, email). 25M+ users, 1,500+ apps. Series B, multi-chain. "No seed phrase" consumer UX leader.
XRPL support: Supports Ed25519 + secp256k1 (XRPL curves) via Custom Auth Network. No native XRPL adapter yet but technically integrable. Worth watching as XRPL consumer apps grow.
Focus: Delegated keys via HSM. Email / SMS / social login. SOC 2 Type II + ISO 27001. Strong on regulated fintech use cases.
XRPL support: EVM + Solana + Flow native. No XRPL support today. Their delegated-key model would map to a SignerList multisig if added.
Focus: Embedded wallets + MPC + progressive auth. Acquired by Stripe (Mar 2025) — now powering Stripe Crypto on/off-ramp + Bridge stablecoins UX layer.
XRPL support: EVM + Solana focus today. Post-Stripe acquisition, XRPL support possible if Bridge stablecoin rails route via XRPL.
Focus: Wallet onboarding orchestrator + KYC + multi-wallet support. Connects 350+ wallets including hardware + embedded + ENS / DID.
XRPL support: Multi-wallet aggregator — supports Xaman, Crossmark, GemWallet for XRPL since 2024. Best fit for XRPL consumer apps wanting plug-and-play wallet UX.
Focus: Modular Account Abstraction wallet + MPC + chain abstraction. ERC-4337 native + gasless transactions. Strong APAC presence.
XRPL support: EVM-first (Account Abstraction is EVM-specific). No XRPL native support — XRPL has its own AA-equivalents (Hooks on Xahau, Regular Key).
Focus: Chain-abstraction wallet + name service (.tria handles). Cross-chain transfers without bridging. Asia-Pacific focus.
XRPL support: EVM + Solana + Cosmos. No XRPL native today but their chain-abstraction model could absorb XRPL via custom plug-in.
Public information — not a recommendation. Verify current XRPL coverage and custody model with each vendor before integration.
🏛️ Official portals by jurisdiction
Regulators, public registers and law texts to verify directly at the source. Opens in a new tab.
- RegulatorESMA — MiCA portal ↗
- Public registerESMA — Public CASP register ↗
- Law textEUR-Lex — MiCA Regulation 2023/1114 ↗
📚 Official sources
Links to the laws and official guidance referenced in this report.
- ↪MiCA — Regulation (EU) 2023/1114· European Parliament
- ↪MiCA Articles 59-75 (CASP)· ESMA / National NCAs
- ↪
- ↪
- ↪FCA Cryptoasset Registration Guide· FCA (UK)
- ↪FINMA Guidance on ICOs and DLT· FINMA (Switzerland)
- ↪Liechtenstein TVTG (Token Act) 2020· FMA Liechtenstein
AI Compliance Audit
Personalised roadmap, risk analysis and recommendations — auto-generated