Breakthrough Performer,
Market Intelligence & Advisory
The only legal and regulatory firm in the category, alongside Kaiko, Token Metrics and Santiment
CryptoDaily
Frequently
asked questions
How do you ensure compliance with FATF and local rules?
We design AML/KYC/KYT frameworks, risk assessments, and reporting systems that align with FATF recommendations, EU AMLD, and national requirements. This ensures your license application passes regulator scrutiny and your operations remain compliant long-term.
Are privacy policies GDPR-compliant?
Yes, we cover GDPR, CCPA, DIFC, and other global standards.
How fast can you prepare a legal opinion?
Usually within 1–2 weeks, depending on complexity and jurisdictions.
Do you prepare whitepapers for MiCA / VARA compliance?
Yes. We draft whitepapers aligned with EU MiCA, UAE VARA, and other regulatory frameworks — ensuring your project is investor-ready and regulator-approved.
What documents are needed to build AML/KYC policies?
We typically require your company registration documents, corporate structure details, information on products and services, client profiles, and transaction flows. This helps us tailor AML/KYC frameworks to your actual business model.
What does a KYC and KYB onboarding flow include?
Individual and corporate client onboarding, beneficial ownership checks, a risk scoring model, document checklists, approval and rejection logic, and a periodic review process. The flow is matched to your client types, product risks and operational capacity.
Can Medici provide compliance officer training?
Absolutely. We offer training programs for in-house compliance officers, founders, and operational teams. Sessions cover AML/KYC procedures, monitoring, reporting, and regulator expectations.
How often should AML/KYC frameworks be updated?
At least once a year, or whenever there are significant changes — such as new regulations, entering new markets, or launching new products. Regular updates keep you compliant and reduce operational risk.
Do you help set up transaction monitoring for crypto businesses?
Yes. We define transaction risk indicators, the wallet screening approach, source of funds and source of wealth logic, red flag scenarios and escalation rules for high-risk transactions, together with the monitoring and reporting workflow. The approach covers both fiat and digital asset flows.
What is included in a compliance risk assessment?
An enterprise-wide risk assessment, a product and service risk assessment, client, jurisdiction and transaction risk matrices, a risk appetite statement and a risk mitigation plan. Together they show management, banks and regulators how the business identifies and controls risk.
Do we need a compliance framework before applying for a license?
Yes. Regulators expect clear AML/CFT, KYC/KYB, monitoring and risk management procedures before granting approval, and banks and PSPs review the same documents during onboarding. Preparing the framework before the application keeps the documents for the regulator and for banks consistent.
What ongoing compliance support do you provide?
MLRO and compliance officer support, compliance health checks, policy updates, and preparation for regulator, bank or partner inquiries as your business grows or enters new markets.
Which legal documents does a fintech or crypto platform need?
Typically Terms of Use, a Privacy Policy, a Cookie Policy and risk disclosures for users, plus internal policies, compliance manuals, service agreements, NDAs and contractor or advisor agreements. The exact set depends on the product, the jurisdiction and the review you are preparing for: licensing, bank onboarding or partner due diligence.