SUPPORT

Frequently Asked Questions

Everything you need to know about RegMind — how the platform works, how your data is protected, and how deployment is structured.

About RegMind

What is RegMind?

RegMind is the compliance OS for regulated firms — combining governed automation, human-supervised AI, and full audit-ready workflows in one regulator-grade system.

The platform covers the full client lifecycle — from initial onboarding and KYC through to ongoing monitoring, periodic reviews, EDD, and governance reporting. It is built for FCA-regulated entities, CSPs, Payment Institutions, EMIs, and other firms operating under regulatory frameworks that require consistent, auditable compliance decisions.

What does "Compliance Operating System" mean?

Most regulated firms run compliance across multiple disconnected tools — one system for KYC, another for screening, manual spreadsheets for review scheduling, email chains for approvals, and a separate audit file assembled before inspections.

RegMind consolidates all of this into a single operating system: one platform where every module talks to every other, every decision is captured in a structured audit trail, and every workflow — from intake to governance — runs consistently regardless of who is handling the case.

The term "OS" reflects that RegMind is not a point solution added on top of your existing stack — it is the system your compliance function runs on.

How does RegMind work?

When a client submits an application through your white-label portal, RegMind runs structured intake, document verification, identity checks, and corporate structure mapping automatically. Sanctions, PEP, and adverse media screening run in parallel.

The system produces a compliance memo with a full evidence chain, risk rating, and recommended action — which your compliance officer reviews and approves. No black-box decisions. Every recommendation is explainable, traceable, and regulator-ready from day one.

Post-approval, the platform continues running — monitoring client activity, tracking document expiry, scheduling periodic reviews, and flagging risk changes without requiring manual intervention.

How is RegMind different from other compliance tools?

Most compliance tools solve one problem — identity verification, or screening, or case management. RegMind covers the entire lifecycle in a single connected platform, which means no data re-entry, no handoffs between systems, and no gaps in the audit trail.

Three specific differences that matter to regulated firms:

  • Every output includes a full evidence chain — not a score with no context
  • Compliance memos are generated automatically in regulator-grade format, ready for inspection
  • The system enforces consistency — the same case produces the same outcome regardless of which analyst handles it

Does RegMind make compliance decisions on our behalf?

No

RegMind is designed to support — not replace — your compliance officers. The platform handles data collection, document verification, screening, risk scoring, and memo generation. Recommended actions are presented with full reasoning and evidence.

Final decisions are always made and approved by a human compliance officer within your firm. Regulatory accountability remains where it belongs — with you. RegMind makes that accountability easier to demonstrate.

Who is RegMind built for?

RegMind is built for regulated firms that operate under formal compliance frameworks — including:

  • Corporate Service Providers (CSPs) and Trust & Company Service Providers (TCSPs)
  • Electronic Money Institutions (EMIs) and Payment Institutions (PIs)
  • Financial intermediaries and asset managers
  • Law firms and accountancy practices subject to AML obligations
  • Crypto asset firms and virtual asset service providers (VASPs)

The platform is configurable for jurisdiction-specific requirements and scales from small compliance teams to enterprise operations.

Platform Modules

What modules does RegMind include?

RegMind includes eight integrated compliance modules covering the full client lifecycle:

01 · Onboarding & KYC 02 · Screening & Risk Intelligence 03 · Decisioning & Memo 04 · Ongoing Monitoring 05 · Periodic Reviews & EDD 06 · Back-Office Operations 07 · Governance & Reporting 08 · Client Portal

Modules are deployed as part of an integrated platform — they share data, reference the same client record, and produce a unified audit trail. You can start with a subset and expand as your operation scales.

What does the onboarding and KYC module cover?

The onboarding module manages structured client intake, document collection, identity verification, and corporate structure mapping from a single workflow. Checks include:

  • Document integrity (MRZ validation, expiry, tampering detection, cross-document consistency)
  • External database verification (Companies House, OpenCorporates, ADGM, DIFC, and others)
  • UBO mapping and nominee structure detection
  • Risk scoring at intake, configurable by client type and jurisdiction

The module is configurable for different entity types — individuals, corporates, trusts, foundations — and adapts to your jurisdiction's specific requirements.

What does ongoing monitoring cover, and how does it work?

Ongoing monitoring runs continuously across your approved client base — not just at onboarding. The module tracks:

  • Sanctions list updates and new designations affecting existing clients
  • PEP status changes and politically exposed connections
  • Adverse media alerts linked to client names or associated parties
  • Document expiry approaching across the client portfolio
  • Behavioural risk drift based on activity patterns

Alerts are surfaced to your compliance queue with recommended actions — no manual sweep required. Your team reviews and approves, maintaining the human-in-the-loop model throughout the client lifecycle.

How does the periodic review and EDD module work?

The periodic review module schedules and manages reviews for each client based on their risk classification — annual for standard risk, more frequent for higher-risk clients.

When a review is due, the system pre-populates the client file with existing information, flags changes since the last review, and structures the enhanced due diligence workflow for higher-risk cases. Your compliance officer reviews the pre-built file, updates what has changed, and approves — reducing review time without reducing quality.

All review outputs are stored with full timestamped audit trails, ready for regulatory inspection.

What does the Governance & Reporting module provide?

The Governance module gives compliance leadership and board-level stakeholders a real-time view of the firm's compliance posture — not assembled the week before an inspection, but maintained continuously.

It covers:

  • Portfolio-level risk dashboards (concentration, high-risk client ratios, flagged cases)
  • Regulatory reporting output aligned to FATF, FCA, and jurisdiction-specific formats
  • Workflow performance metrics (review times, backlog size, decision consistency)
  • Audit-ready export of any case, memo, or decision thread

When a regulator visits, the answer to "show me your compliance programme" is a login, not a spreadsheet.

Security & Data Protection

How is client data secured?

Data protection controls include:

  • Encrypted communications (HTTPS/TLS in transit, AES-256 at rest)
  • Secure authentication with httpOnly cookies and CSRF protection
  • Role-based access controls — users see only what their role permits
  • Full audit logging of all system activity, user actions, and decision events

Each client is deployed in a dedicated, single-tenant environment. Your data is never shared with or accessible by other RegMind clients.

Is client data used to train AI models?

No

Client data is never used to train or improve external AI models. All data processed through the platform remains private and is handled strictly for the purpose of compliance analysis within your environment.

Does the system retain documents or sensitive information in AI models?

No

The AI layer processes data ephemerally for analysis. Documents and sensitive information are stored in your secure, controlled environment — not inside AI models. The system does not build persistent memory or retain client-specific data beyond the processing context.

Where is data stored?

Data is stored in secure, controlled infrastructure with deployment options configurable to meet jurisdictional requirements. Clients with specific data residency obligations (e.g. EU data localisation, ADGM/DIFC requirements) can discuss configuration options during onboarding.

Can data be exported or deleted?

Yes

Clients retain full ownership of their data and can request data export, deletion, or custom retention configuration at any time. Exports are structured for regulatory record-keeping formats where required.

Deployment, Compliance & Commercial

Which regulatory frameworks does RegMind support?

The platform is designed to align with:

  • FATF Recommendations (40 Recommendations + 9 Special Recommendations)
  • FCA AML and Financial Crime rules (UK)
  • FSC regulatory requirements (Mauritius and other jurisdictions)
  • ADGM and DIFC compliance frameworks (UAE)
  • Data Protection Act 2017 and GDPR-equivalent data handling standards

Configuration options allow the platform to adapt workflow requirements, check sets, and reporting formats to jurisdiction-specific obligations.

Can regulators audit outputs produced through the platform?

Yes

Every output includes a structured compliance memo, full reasoning chain, supporting evidence, and timestamped decision log. Cases can be exported in regulatory-review format at any time.

The audit trail is maintained in real time — not assembled retrospectively. When a regulator requests evidence of your compliance processes, the answer is immediate and complete.

How is the platform deployed?

Each client is deployed in a dedicated single-tenant environment — ensuring full data segregation, security, and configuration flexibility. There is no shared infrastructure between clients.

Deployment is managed by RegMind. You do not need internal engineering resource to stand up or maintain the platform.

Can the platform be white-labelled?

Yes

RegMind can be deployed under your brand — your firm name, logo, and domain. Your clients interact entirely with your branded environment. RegMind operates behind the scenes as the infrastructure layer.

How long does implementation take?

  • Pilot: 2–4 weeks — live with your actual onboarding cases
  • Full platform deployment: 4–10 weeks depending on modules, integrations, and configuration complexity

Implementation is supported by the RegMind team from configuration through to go-live and staff training.

How is pricing structured?

Pricing is structured around three tiers:

  • Growth — up to 20 applications/month, core onboarding and screening modules
  • Scale — up to 100 applications/month, full platform including monitoring and reviews
  • Enterprise — unlimited volume, custom modules, white-label, dedicated support

All plans include a monthly platform subscription. Usage-based components (per-application) are available for higher-volume tiers. Setup and implementation fees apply. View full pricing →

Is a pilot available before full commitment?

Yes

We offer a structured pilot phase to validate platform performance with your real onboarding cases. The pilot is designed to demonstrate measurable output before any full commitment — including memo quality, screening accuracy, and time-to-decision reduction.

What ongoing support is provided?

  • Email and chat support across all plans
  • Dedicated account support on Scale and Enterprise plans
  • Continuous platform updates — new regulatory frameworks, screening integrations, and module improvements are deployed without client effort
  • Compliance programme consultation available for Enterprise clients

Still have questions?

Talk to our team — we can walk you through the platform, discuss your regulatory requirements, and scope a pilot.