Our SaaS Products

AMEL

AML - CFT software application for the Asset Management sector.

API

Regulatory API engines covering Risk & Compliance, Dashboard, Data, Reporting.

DIGIWARI

Regulatory - based software application dedicated to Inclusive Finance.

REDA

Regulatory Compliance BOT for the Asset Management industry.

Our Services

SoRisk3 Consulting

Independent Consulting in Risk & Compliance for the Financial industry.

SoRisk3 Education

Coaching & Teaching, Individual & Corporate training.

Frequently Asked Questions

Is SoRisk3 compliant with the CSSF Circulars 19/714, 21/777, 21/785, 22/805 on Cloud Computing, ICT Outsourcing?

Through the Company's positioning in Regulatory Technology with a specialization in risk management & compliance for the Asset Management industry, SoRisk3 has been built in accordance with both the local and European jurisdictions framing Cloud computing and ICT outsourcing.

As a cloud Platform, SoRisk3 assists Risk Management & Compliance professionals in performing their regulatory obligations efficiently (both in terms of speed and quality) but at significant lower cost than traditional web-based solutions.

The Company also assists its clients in all relevant communications (notification, filling register template...) towards competent authorities.

How does SoRisk3 handle GDPR Data Privacy?

Abiding by the regulatory requirements on Cloud Computing, ICT Outsourcing, SoRisk3 is available - at the discretion of clients - either as a (i) private or hybrid cloud with data centers (servers or other IT-related infrastructure) located in Luxembourg and (ii) under a single-tenant or multiple-tenant SaaS architecture.

To ensure a high level of both security and data privacy for its customers, the Company has partnered with :

  • Regulated entities locally (licensed as PFS, certified as ISO 9001:2008 and ISO/IEC 27001:2013) for the management of the underlying cloud infrastructure, by considering all the relevant European Union legislation in relation to General Data Protection Regulation (GDPR);

  • Legal institutions with expertise in IP/TMT/Data Protection.

These partnerships aim at guaranteeing that customers' data is fully protected and dynamically secure, aligned with regulatory expectations.

Does a subscription to SoRisk3 (SaaS) products raise the regulatory issue of Delegation or Outsourcing?

No, it does not!

SoRisk3 is a Cloud Platform developed for Risk & Compliance professionals to assist them in performing their regulatory duties in a fast, timely, and transparent manner and at a significantly lower cost than older technologies. This is achieved by capitalizing on emerging technologies yielding positive externalities to regulated entities.

Thanks to its flexibility, agility, SoRisk3 acts rather as a tool for internal control functions, strengthening the implementation of robust risk management and compliance practices within regulated financial institutions. Thus It's worth highlighting, that the activities of risk management & compliance are neither outsourced to the Company (unless a specific delegation agreement is concluded) nor somehow jeopardized on the basis of substance requirements (e.g. CSSF 18/698).

Does SoRisk3 & Compliant offer on-site and/or remote consulting?

Yes, it does!

To supplement its SaaS offering, SoRisk3 & Compliant provides its clients with regulatory consulting services in the areas of Risk Management & Compliance, as well as Governance.

Depending on clients' specifications, the Company's consulting services take the form of technical advisory projects at the premises of AIFMs, UCITS Management Company, Investment Firms, etc. In addition, the Company offers remote consulting for its clients.

The Company's consulting services are performed either on an occasional or ongoing basis.

Does SoRisk3 & Compliant provide training in (Regulatory) Risk Management and Compliance?

Yes, it does!

Through SoRisk3 Education the Company offers cost-effective trainings, on-demand, targeting specific regulatory topics in risk management & compliance for UCITS & AIFs. Such trainings are delivered on-site or remotely depending on clients' needs.

Could SoRisk3 be plugged into data vendor workflows?

Yes, absolutely!

Through its API Data engine, SoRisk3 handles data from the external vendors selected by its clients or its data used natively. This removes costly integration or development incurred by its clients, while allowing the latter to optimally oversee their data allowance in a transparent manner.

External vendors benefit from SoRisk3 API Engines, by leveraging on the proprietary AI-based algorithms to enrich their data before distributing it to end users.

Could SoRisk3 handle multiple file formats from different Funds' stakeholders (e.g. Custodians, Administrators, etc.)?

Yes, absolutely!

SoRisk3 applies AI techniques on Third party data file schemas, so as to deal with different file formats sourcing from any external service provider.