Core Tools
Infrastructure
Product previews
From zero to regulator-ready
See how ComplyBridge walks you through a full MiCA CASP application — from entity setup to final submission package.
See how it works →The AI that knows your firm
Reasons across the live EU rulebook and your own policies, KYB data, UBOs, and integrations.
Explore Copilot →Coverage · Credit institutions
The banking regime, operationalised.
CRD VI and CRR III reshaped the rulebook: 43 obligations across nine domains, layered on top of every EU framework a bank already runs. ComplyBridge tracks the policy and the limit, surfaces what overlaps with frameworks you already operate, and keeps the artefact set audit-ready between cycles. The calculation engine stays where it belongs: in your treasury and risk systems.
The framework
What changed with CRD VI and CRR III?
Banking is the framework with the largest overlap surface in EU finance. A typical credit institution already operates AML/CFT, DORA, GDPR, the EU AI Act, MiFID II and PSD2, and 15 of the 43 CRD VI / CRR III obligations resolve to templates already shipped under those regimes. ComplyBridge surfaces the overlaps explicitly so you author 25 new documents, not 43.
The remaining work (credit risk policy, IRRBB, operational risk framework, ESG risk integration, fit-and-proper, governance, recovery and resolution) is where ComplyBridge does the heavy lifting. Each obligation maps to a monitored control with cadence, owner and status. ICAAP, ILAAP and the Recovery Plan get structured scaffolds; your teams populate the analysis.
Which door you're walking through.
Four ways a credit institution meets the regime. What you owe the supervisor depends on which one is yours.
Deposit-taking and lending. Full authorisation under CRD, €5M minimum initial capital, granted by the ECB for every euro-area bank on the national authority's proposal.
Above €30bn in assets, or otherwise significant, you are supervised directly by the ECB through a Joint Supervisory Team. Below it, by your national authority under ECB oversight.
CRD VI harmonises the regime from 11 January 2027: a branch authorisation in each member state you enter, with capital endowment, booking and reporting rules set at EU level, and no passport.
Investment firms dealing on own account or underwriting with consolidated assets above €30bn are credit institutions under the CRR and must be authorised as such.
Nine domains. One register.
Every obligation in the register sits in one of nine domains, each with a legal reference, review cadence, second-line owner and status.
15 of the 43 obligations resolve to templates already shipped under AML/CFT, DORA, GDPR, the AI Act, MiFID II and PSD2. The remaining 25 are authored; ICAAP, ILAAP and the Recovery Plan get structured scaffolds.
The path
Getting to a working banking obligations stack.
The first six months get the register live and the policy pack authored. After that, the rhythm is cadence-driven: annual reviews, on-change notifications, periodic deliverables.
Surfaces the 15 obligations your existing AML/CFT, DORA, GDPR, AI Act, MiFID II and PSD2 templates already satisfy. No banking-specific clones, no duplicate authoring.
25 new authored documents (governance framework, credit risk policy, IRRBB, operational risk, ESG, conduct procedures, supervisory reporting) with the right parent-child structure, plus structured shells for ICAAP, ILAAP and the Recovery Plan.
Review cadence, second-line owner, status workflow and audit trail, filtered by your entity flags so the register is always sized to the bank you actually are.
The register and tracker are the ongoing side from day one: annual reviews, on-change notifications and the supervisory reporting calendar, with board pack and JST-ready exports one click away. See how the ongoing side works →
FAQ
Common questions.
See the register sized to your bank.
A short conversation about your entity profile. We show you which of the 43 obligations apply, and which you already satisfy.
Already supervised? See how the ongoing side works →