Data residency
Per-tenant region pinning for evidence packs, AI traffic, and backups.
GDPR
Lawful basis, DPIA template, DSAR handling, sub-processor list.
ISO 27001
Statement of Applicability, A.5–A.18 controls mapped to FVI surfaces.
PCI DSS
FVI scope — no card data ever lands in our DB. Stripe handles it all.
Retention policies
7-year evidence pack retention, soft delete, 30-day recovery window.
SOC 2 Type II
Trust Services Criteria coverage, audit cadence, evidence collection.
EMIR Refit reporting
European Market Infrastructure Regulation Refit — trade reporting under MiFIR-aligned fields and ISO 20022.
MiFID II RTS 22
MiFID II Regulatory Technical Standard 22 — transaction reporting under MiFIR, ISO 20022 fields, and FCA dual reporting.
FINRA OATS
FINRA Order Audit Trail System — electronic order reporting for US broker-dealers.
CFTC Part 43/45
CFTC swap data reporting under Parts 43 (real-time public) and 45 (registered swap data repository).
MAS TR
Monetary Authority of Singapore — Technology Risk Management Guidelines.
ASIC reporting
Australian Securities and Investments Commission transaction reporting under ASIC Derivative Transaction Rules.
SEC 17a-3/4
SEC Exchange Act Rule 17a-3 and 17a-4 — broker-dealer recordkeeping and electronic storage.
FCA MiFIR
UK Financial Conduct Authority MiFIR transaction reporting — UK-specific fields, ARM submission, dual ESMA reporting.
FINRA 15c3-1
FINRA Rule 15c3-1 Net Capital Rule — broker-dealer capital adequacy computation and monitoring.
CFPR 240
Code of Federal Regulations Title 17 Part 240 — SEC general rules and regulations for broker-dealers.
Basel III SA-CCR
Basel III Standardised Approach for Counterparty Credit Risk — exposure calculation, CVA, and regulatory reporting.