ML Consulting
Arrange a consultation

Services

Regulatory advisory for firms supervised under EU financial regulation, and automation of compliance and operations work. Application development is available as a complementary service. Each engagement has a written scope and a fixed fee.

Regulatory advisory

For payment and e-money institutions, crypto-asset service providers, lenders and other obliged entities.

Regulation (EU) 2024/1624, applying from 10 July 2027

AMLR gap analysis

A structured comparison of your AML/CTF framework with the Anti-Money Laundering Regulation, so that remediation can be planned well before the date of application.

Scope

  • Customer due diligence, including enhanced and simplified measures
  • Identification and verification of beneficial owners
  • Business-wide risk assessment, internal policies, controls and procedures
  • Record-keeping, reporting and group-wide requirements
  • Related technical standards and guidelines as they are published

You receive

  • Gap register referenced to AMLR articles
  • Prioritised remediation plan with owners and deadlines
  • Summary for the management body
  • Optional follow-up review of remediation
Discuss an AMLR gap analysis
Law on the Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania

AML/CTF framework review

An independent review of how your AML/CTF framework works in practice, for firms preparing for an inspection, an authorisation or growth.

Scope

  • Business-wide risk assessment methodology
  • Customer risk scoring
  • Policies and procedures
  • Transaction-monitoring scenarios and alert handling
  • Sanctions screening
  • Training and reporting to the management body

You receive

  • Findings report with risk ratings
  • Revised documents or drafting guidance
  • Remediation plan
Discuss a framework review
Regulation (EU) 2022/2554, applying since 17 January 2025

DORA and ICT third-party risk

Practical compliance with the Digital Operational Resilience Act, with a focus on third-party arrangements and the register of information.

Scope

  • Register of information: preparation and maintenance
  • ICT third-party risk policy
  • Contractual provisions for ICT services (Article 30)
  • Alignment with outsourcing requirements
  • ICT-related incident classification and reporting

You receive

  • Completed or validated register of information
  • Contract gap analysis by provider
  • Policy updates and an action plan
Discuss DORA compliance
Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744

EU AI Act readiness

An inventory and classification of the AI systems your firm develops or uses, and the measures the AI Act requires of you.

Scope

  • Inventory of AI systems and general-purpose AI tools in use
  • Role (provider or deployer) and risk classification
  • AI literacy measures for staff (Article 4)
  • Transparency obligations (Article 50)
  • Interaction with GDPR and outsourcing requirements

You receive

  • AI system register
  • Classification memorandum
  • AI use policy
  • AI-literacy session for staff
Discuss AI Act readiness
Vendor-neutral selection, contracting and tuning

KYC and transaction-monitoring platform selection

Help in choosing, contracting and tuning onboarding, screening and transaction-monitoring software that fits your risk profile.

Scope

  • Requirements derived from your business-wide risk assessment
  • Market shortlist and structured demonstrations
  • Proof of concept on a sample of your own data
  • Contract review against outsourcing and DORA requirements
  • Scenario tuning and false-positive analysis after go-live

You receive

  • Requirements document
  • Vendor evaluation matrix
  • Recommendation memorandum
  • Tuning report
Discuss platform selection
E-money institutions, payment institutions and crypto-asset service providers

Authorisation support

Support for firms applying for or extending an authorisation, and for responding to supervisory requests.

Scope

  • Programme of operations and business plan review
  • Governance, internal control and risk management framework
  • AML/CTF documentation for the application
  • ICT and security policies
  • Responses to supervisory questions

You receive

  • Gap review of the application file
  • Drafted or revised policies
  • Support until submission
Discuss authorisation support

Compliance automation

Solutions built in the tools you already use, tested on your own cases, and operated with human approval and a full audit trail. Success measures, such as time saved, turnaround and error rates, are agreed with you before work begins.

View all twelve solutions

  1. Assessment

    The process is mapped with the people who run it, volumes are measured and the success measures are agreed.

  2. Pilot

    One solution, built and tested on real cases, with a person approving every output until quality is proven.

  3. Rollout

    Documentation, staff handover and a data processing agreement where personal data is involved.

  4. Support

    Monitoring, maintenance and regular reporting against the agreed measures.

Application development

A complementary service for clients who need a mobile tool: native iPhone and iPad applications, from discovery and prototype to App Store release and maintenance. The code, designs and App Store listing remain yours.

  • Swift and SwiftUI
  • SwiftData
  • iCloud sync (CloudKit)
  • StoreKit 2
  • Vision
  • On-device Foundation Models
  • TestFlight and App Store Connect

Engagement terms

The full terms are set out in Part B of our Terms and Conditions.

Fixed fees

Each engagement is quoted at a fixed fee in an engagement letter, with scope, deliverables and timeline. VAT is added where applicable.

Confidentiality

A non-disclosure agreement on request, and a data processing agreement whenever personal data is involved.

Independence

No undisclosed commissions from software providers. Any commercial relationship is disclosed in writing.

Not legal advice

Regulatory compliance consulting. Where a legal opinion is needed, ML Consulting works alongside your counsel.

Discuss your requirements

A confidential first conversation, without charge or obligation. You will receive a reply within one working day.

Arrange a consultation