the requirements map

One map. Assembled once. Applied to everyone.

synthetic company · demonstration file · every figure computed, none real

Your obligations arrive from four directions and live in twenty signed PDFs. This is how they become one versioned object that every counterparty is measured against.

requirements-map 4.2.0 · 15 elements · dated 29.08 · every element traceable to a clause
  • Standard setters and industry practice

    FATF R.10 · R.22 · R.24 · Wolfsberg CBDDQ 1.4 · Visa & Mastercard onboarding rules · EBA guidelines on ML/TF factors
  • The regulator that licenses you

    Bank of Lithuania, EMI licence 42 · AMLD5 as transposed · national AML/CTF law art. 9–14 · supervisory letter 03.2026
  • Partner regulators and sanctions regimes

    acquiring bank's regulator (DE) · sponsor bank policy annex 3 · UN Security Council consolidated · EU consolidated list · OFSI · OFAC SDN
  • Your own signed policies

    Risk & Compliance Policy v4 · Onboarding Standard v2.1 · Security & Privacy v3 · Operations & Governance v1.6 · High-risk Jurisdiction Annex v2
Your companythe obligated partyNorthwind Payments UAB · EMI · 4 partner regulators
the single set of requirements every counterparty is measured againstrequirements-map 4.2.0 · dated 29.08
  • Counterparty A3 of 15 closed · coverage insufficient · decision unavailable
  • Counterparty B8 closed · 5 open · 2 documented outcome
  • Counterparty C15 of 15 closed · ready to work with you

Onboarding opens when every element of the map is closed.

policy studio

How the map is assembled.

Five steps, in order, and a person stands at the fourth. The assistant reads and proposes; it does not publish. Every element it proposes arrives with a pointer back into the page and clause it came from, and an element without one cannot be accepted.

  1. 01

    Declare yourself

    Licence, licensing regulator, partner regulators, sanctions regimes you answer to, the products you sell.

    EMI · Bank of Lithuania4 partner regulators · 4 regimes
  2. 02

    Upload the signed policies

    Ten to twenty documents, as signed. No template, no re-typing, no questionnaire about what they say.

    14 documents · 402 pages2 superseded, set aside with a reason
  3. 03

    The assistant proposes elements

    Each proposal carries the document, the page, the clause and the quote. It proposes; it never publishes.

    19 proposed
  4. 04

    A person accepts, edits or rejects

    Element by element, with the clause open beside it. A rejection is recorded with its reason, and stays in the record.

    11 accepted · 4 edited · 4 rejectedby M. Ilves, MLRO
  5. 05

    The map is published as a version

    Dated, numbered, immutable. Cases hold the version they were assessed under, forever.

    requirements-map 4.2.0published 29.08 · active 29.08

The pointer is the product.

a requirements map with no provenance is a checklist
element 07 of 15 · acceptedaccepted by M. Ilves
Identify the beneficial owner holding 25% or more.
3 conditionssubstitutes permittedre-confirm every 12 months
traces back toRisk & Compliance Policy v4, p. 12, clause 8.3 →and to: FATF R.10 · AMLD5 art. 13(1)(b) · Onboarding Standard v2.1 p.4
page and
clause
Risk & Compliance Policy v4 · p. 12signed 05.04 · CRO
8.2The Company shall establish the ownership and control structure of every business customer prior to onboarding.8.3Where a natural person holds, directly or indirectly, 25% or more of the shares or voting rights, that person shall be identified and the identification evidenced. Where the register of the jurisdiction cannot lawfully be queried by the Company, the substitute set out in the High-risk Jurisdiction Annex shall be obtained.8.4Control exercised otherwise than through shareholding shall be recorded where identified.
chars 4102–4488 · quote stored with the element
the second sentence of 8.3 is why this element permits substitutes at all. that is read from your policy, not assumed by us.
versions

Publishing and activating are two different acts.

A published version is legible, diffable and quotable, and no case is measured by it yet. Activating one changes what new cases are assessed against — a separate control, a separate right, and a record of who used it. Cases already assessed keep the version they were assessed under.

4.2.0active
published 29.08 · active 29.08 · 41 cases
15 elements6 permit a substitute3 re-confirm every 12 months

Assembled from 14 signed documents. Accepted element by element by M. Ilves. This is the version every open case is measured against today.

4.3.0published, not active
published 05.09 · 0 cases
15 elements7 permit a substitute3 re-confirm every 12 months

Adds source of wealth above a turnover threshold, drops adverse media on directors in class 1 jurisdictions, and narrows the incumbency window. Legal review is not yet recorded.

right: map.publish · MLRO, senior analyst
disabled: right map.activate is held by the MLRO, and legal review is not recorded on this version
Diff · 4.2.0 → 4.3.01 added · 1 removed · 2 reworded · 12 unchanged
change4.2.04.3.0
addedSource of wealth of the controlling party, where declared turnover exceeds EUR 1m. Onboarding Standard v2.1 p.7 cl. 3.2
removedAdverse media search on each director, all jurisdictions. Risk & Compliance v3 p.9 cl. 6.1Retained for class 2–4 only. Removed for class 1 by the March supervisory letter. reason recorded
rewordedIdentity is verified against a government-issued document.Identity is verified against a passport or national identity card.
rewordedIdentify the beneficial owner holding 25% or more.Identify the beneficial owner holding 25% or more, and evidence the identification.
a removal carries its reason, because “we stopped requiring this” is the sentence a supervisor will ask about.
the three states

An element is in one of three states, and they are three different facts.

Closed by evidence

A fact from a source, with the date the source was current. Filled, and it lifts, because something is under it.

Directors of the companyTwo directors, both named and identified.certificate of incumbency p.2 · chars 1090–1211 · 06.093 of 3 conditions met · confirmed by A. Kask
closed on a client document is one claim; independently verified is another. the file names the one it makes.

Open

Nobody has closed it yet, and waiting will help. A thin outline, no fill, flat — it is not a finding and it is not a failure.

Source of funds for the opening balanceRequested from the client on 03.09. Reminder sent 05.09.0 of 2 conditions met · awaiting the clientnot collected · no source has been asked and refused

Checked, and cannot be established

A source was asked and cannot answer. Dashed, hatched, recessed, and it never lifts — because nothing is under it, and that is the finding.

Beneficial owner holding 25% or moreThe register is held by the registered agent. No third party has a lawful route to it.ubo-registry:SC · asked 06.09 · answer stored wholesubstitute accepted: incumbency ≤ 90 days, held on file
no retry is offered. the answer does not exist for anyone in this position.
one element, opened

Element 07, in full.

element 07 of 15 · requirements-map 4.2.0Identify the beneficial owner holding 25% or more.
3 conditions · substitutes permittedre-confirm every 12 monthsapplies to: every counterparty
its regulatory basis
Risk & Compliance Policy v4p. 12, clause 8.3 · signed 05.04
AMLD5, art. 13(1)(b)as transposed, national AML law art. 11
FATF Recommendation 10interpretive note, para. 5(b)
Sponsor bank policy annex 3p. 2 · partner requirement, not statutory
what closes it · 3 conditions
  1. 1A natural person is named, with date of birth and nationality.
  2. 2The holding is evidenced end to end, each edge with its document or register and date.
  3. 3Identity is verified against a government-issued document.
substitutes the jurisdiction accepts
SeychellesCertificate of incumbency ≤ 90 days, plus an agent letter naming the beneficial owner.British Virgin IslandsAgent confirmation of members and beneficial owners, on letterhead, licence number checked.EstoniaNone permitted. The register answers, so the register is the evidence.
substitutes are read from clause 8.3 and the High-risk Jurisdiction Annex, per jurisdiction.
its history across map versions
versionwhenwhat changedwho · cases
4.3.005.09 · published"and evidence the identification" added. Condition 3 restated to name the document class.M. Ilves · not active
4.2.029.08 · activeIncumbency window narrowed from 180 to 90 days, following the March supervisory letter.M. Ilves · 41 cases hold this
4.1.007.07 · retiredSubstitutes admitted for the first time, for four jurisdictions. Before this, the element could only be open or closed.M. Ilves · 118 cases hold this
4.0.027.03 · retiredElement introduced, from clause 8.3 of the policy signed that month.M. Ilves · 64 cases hold this
a case is never re-scored by a newer map. it is re-decided, and the record says which version it was re-decided under.
how a counterparty closes it

The map does not change. The filling does.

Two states of the same object: the map as published, and the map as one counterparty closed it. Eight elements closed on facts, five still open, two checked and recorded as documented outcomes. Same fifteen cells, same order, every time.

before · the map as published
15 elementsrequirements-map 4.2.0
the pack,
the registers,
the rules
after · Orion Trading Ltd, 06.09
8 closed5 open2 documented outcome
cell 07 and cell 08 are the two dashed ones. they are the elements the Seychelles and BVI registers cannot answer.Open the public decision file for this case →

Send us your policy pack. We will assemble the map in front of you.

Ten to twenty signed PDFs, as they are. You will see every proposed element with the clause it came from, and you will accept or reject each one yourself. You keep the map either way.

Book a demoOnboarding is by hand — which is why we do the first case with you.