Virtual asset service providers
Compliance software for VASPs
You hold, or are applying for, a VARA licence. Your obligations come from the compulsory rulebooks and one rulebook for each activity you carry out. Kompendra starts there.
What gets in your way
- Your obligations span the Company, Compliance and Risk Management, Technology and Information, and Market Conduct rulebooks, plus an activity rulebook for each licensed activity.
- Your monitoring plan, evidence and findings live in different places, so every quarterly report is rebuilt by hand.
- Your board, your auditors and VARA each want the same history, and each wants it proven.
The modules that matter most
Compendium
VARA content is the first loaded. Mark each requirement applicable per licence.
Monitoring
A monitoring plan built from your applicable requirements, with a signed period report.
Evidence
Hashed, dated evidence for every test, ready for a regulator pack.
Registers
Policies, controls, and findings and actions, linked to the rules they serve.
A VARA VA Management licensee's quarter in Kompendra
Before the quarter. Your Compliance Officer marks the requirements in the compulsory rulebooks and the VA Management and Investment rulebook as applicable, not applicable with a reason, or under review. Existing policies are uploaded and mapped to the requirements they address. The coverage view shows applicable requirements with no policy, and those become work items.
Planning. The monitoring plan for the year already holds the tests for this quarter, each linked to its controls and requirements, with an owner and a reviewer. Where a requirement had no test, Kompendra suggested one and the Compliance Officer accepted it with edits.
During the quarter. Owners get reminders before each due date. They record each test run, attach evidence, and the vault hashes every file. One test of client onboarding files fails. It raises a finding with a severity, an owner and a deadline. The owner closes it with evidence, and the reviewer approves the closure.
Closing the quarter. Kompendra generates the quarterly report with every test, result, evidence hash and finding. It goes through the approval workflow and is e-signed, then locked. When VARA asks for the supporting records, you export a regulator pack in one step.
Afterwards. Every step above is in the audit log with actor, time, and before and after state. Six months later you can open any register as it stood on the last day of the quarter.
Applying for a licence?
Set up your entity and the licence you are applying for, and build the compliance function in Kompendra from the start. Your monitoring plan is ready on the day the licence is granted.