Thoughts, articles, and resources on software development, SaaS, and digital growth.
The EBA register lists every payment institution and electronic money institution authorised under PSD2 across the EEA. This article explains what the register contains, what the eight entity types mean in practice, how passporting works, and what to verify before contracting with any payment service provider operating in the EU.
Standard semantic and fuzzy matching approaches in PEP and sanctions screening generate false positive rates that create compliance vulnerabilities, not reduce them. Designing an auditable screening data pipeline requires understanding why the matching logic matters as much as the list coverage, and how to build a defensible record for high-risk country list updates.
The recast Transfer of Funds Regulation applies the travel rule to crypto-asset transfers processed by CASPs. The data payload requirements for sender and receiver identification are specified in EBA guidelines that sit above the regulation text. This article covers the field-level requirements, the cross-border matching problem, and where the FTR and MiCA frameworks create overlapping obligations.
The AML Regulation's Level 2 technical standards specify the data points that KYC profiles must capture for customer due diligence and UBO identification. Moving from loose national implementations to a standardised EU data schema requires a concrete audit of what your onboarding pipeline collects, validates, and retains.
The RTS governing input and output data for EU consolidated tape providers set specific latency, format, and quality requirements that data reporting service providers need to build against. Here is the technical schema as ESMA finalises the OTC derivatives tape.