Regulatory requirementApplicability and interpretation
REVIEW
Process & controlFirst-line ownership
Evidence & testingSecond-line challenge
Gap identified. Action assigned.Document the decision. Retain the evidence.
Mapping is a starting point. Compliance requires validated scope, effective controls and evidence.
A DEDICATED COMPLIANCE OPERATING SYSTEM
Regulatory intelligence
Independent judgement
Evidence-led assurance
Accountable reporting
THE WHOLE SECOND-LINE LIFECYCLE
From regulatory signal to a reasoned decision.
Four connected disciplines, with saved records, version history and human review. Explore how the first release handles each stage.
FROM SOURCE TO ACTION
Understand the change.
Keep official sources, publication dates, legal status and commencement dates together. Source checks establish a content baseline and flag later differences for analyst review.
Proposals distinguished from final and in-force rules
Jurisdiction, sector and permission impact assessment
Implementation ownership, deadlines and evidence
Unavailable sources remain unverified
EIGHT FINANCIAL-SERVICES SECTOR FAMILIES
Built around the activity. Scoped to the firm.
Banking, wealth, investments and insurance have different obligations. Broker, MGA and coverholder responsibilities follow the actual permissions and delegated arrangements.
ACTIVITY-BASED APPLICABILITY
Banking
Permissions, governance, capital and liquidity, responsible lending, financial crime, operational resilience and reporting.
Sector labels do not establish permissions. Validate the legal entity, activities, products, customers, territories and actual regulator.
SHARED ATLAS JURISDICTION SCOPE
Local requirements. Group-wide visibility.
The initial research baseline contains 52 source families and 17 dated change items. It is a starting register, not a complete legal inventory or certification.
Isle of Man
Licence-class scope, Rule Book, insurance Codes and financial-crime requirements.
Jersey
Sector Codes, compliance functions, monitoring, remediation and Board reporting.
Guernsey
Conduct, governance and AML controls; distinguish laws, rules and guidance.
United Kingdom
FCA / PRA perimeter, Consumer Duty where applicable, conduct and prudential requirements.
European Union
Select the actual member state, competent authority and national implementation.
United Arab Emirates
Separate mainland CBUAE / CMA, DIFC / DFSA and ADGM / FSRA regimes.
Cayman Islands
CIMA sector rules, governance, financial crime, prudential and recovery requirements.
Bahamas
Separate banking, securities and insurance regimes; consultations remain distinct from final rules.
Research baseline: 27 October 2026. Exact provisions, current consolidated text, firm applicability and reporting calendars require local validation. Source references are available inside the workspace.
CLEAR RESPONSIBILITIES
Independent challenge. Without blurred ownership.
First line owns its processes, controls and remediation. Compliance provides second-line advice, monitoring and challenge. Internal audit retains independent third-line assurance.
Unresolved applicability remains visible in coverage
No approval from a process link or a model score
Separate author and authorised reviewer
Versioned advice, changes and management departures
Report preparation distinguished from submission
A CONTROLLED PATH TO LIVE USE
Scope it properly. Validate it thoroughly.
Compliance Atlas has its own implementation scope. Enterprise pricing follows discovery, integrations, regulatory content requirements and the agreed operating model.
01
Define the perimeter
Confirm entities, licences, sectors, countries, customers, cross-border activities and the compliance mandate.
02
Build the obligation inventory
Validate provision-level requirements, source access, interpretation, reporting calendars and control ownership.
Complete testing, local compliance/legal sign-off, training and independent assurance before regulated reliance.
Current release: controlled preview. Use synthetic information. Saved records and source comparisons are functional; no generative AI agent, unattended monitoring schedule or regulatory filing connection is enabled. Full compliance cannot be established by software alone.
Start with your operating model.
Discuss the firm, jurisdictions, source coverage, integrations and assurance requirements.