MiCA Compliance

A MiCA compliance software platform automates the documentation, workflow and reporting tasks that crypto-asset service providers must complete to obtain and maintain CASP authorization under EU Regulation (EU) 2023/1114. It covers gap analysis, dossier assembly, AML/KYC onboarding, transaction monitoring and ongoing supervisory reporting. Lighthouse RegTech's platform is purpose-built for CASP authorization readiness.

The platform combines a rules library mapped to Articles 62-76 MiCA with a document-assembly engine, so every governance policy, risk framework and prudential capital computation is generated against the same requirement set our compliance engineers use on every completed dossier. Nothing is drafted from a blank template.

Because the same platform tracks the dossier after authorization, clients keep one system of record from the first gap analysis through supervisory reporting years later, instead of switching tools when the advisory engagement ends.

Across 14 completed dossiers, Lighthouse RegTech's median CASP authorization timeline is 118 days from first submission to NCA decision. Timeline depends on jurisdiction, dossier quality and NCA workload. Incomplete or internally inconsistent dossiers are the leading cause of completeness-check extensions. A clean first submission - which our process is designed to deliver - significantly reduces this risk.

The fastest engagement on record closed in 94 days, for BalticTrade Exchange under the Bank of Lithuania. The slowest, a dual custody and execution authorization for Nexum Brokers GmbH under BaFin, closed in 131 days, still with zero completeness-check requests from the regulator.

Our own research note, LRT-RN-2024-01, found that completeness-check requests add a median of 34 days when they occur, and that governance framework inconsistencies are the single most common trigger. That finding shapes how our compliance engineers cross-check every dossier document before submission.

Lighthouse RegTech has active supervisory relationships and completed authorizations across 9 EU jurisdictions: Lithuania, Germany, the Netherlands, Ireland, Luxembourg, Malta, Estonia, France and Austria. We advise clients on jurisdiction selection based on service scope, target markets and NCA posture at the time of engagement.

Median NCA timelines vary by jurisdiction: Lithuania runs 90-110 days, Malta 100-130 days, Estonia 95-125 days and Luxembourg 110-150 days on the faster end, while Germany, Ireland, France and Austria typically run 115-170 days depending on service complexity and language requirements.

We do not default every client to the fastest jurisdiction. A CASP targeting deep institutional distribution in Germany or common-law familiarity in Ireland may still choose the slower NCA because the eventual market access outweighs a few extra weeks of review.

Lighthouse RegTech's MiCA compliance packages start at EUR 28,000 for a Readiness Assessment (gap analysis and remediation register). A full Dossier Build - from gap analysis through NCA authorization decision - is EUR 74,000. Ongoing Sustain Retainer compliance support is EUR 9,500 per month. All pricing is fixed-scope with no variable billing.

Individual components are also priced on their own for clients who only need part of the work: jurisdiction selection advisory from EUR 6,500, an AML and KYC policy pack from EUR 12,000, Travel Rule integration from EUR 9,000 and an EMT or ART issuer supplement from EUR 18,000.

We publish these figures against the market range we could verify. Only two of our eight priced deliverables have a published market comparison anywhere we checked: a EUR 19,900 fixed-fee licensing package from a Lithuanian law firm, and a EUR 2,400-per-month base compliance subscription from a Czech advisory firm. The rest of this niche simply does not publish standalone prices, which our own pricing table states plainly rather than guessing at a number.

Evaluate vendors on: (1) track record of completed CASP authorizations with zero rejections; (2) direct NCA supervisory experience, not just advisory background; (3) jurisdiction coverage matching your target markets; (4) fixed-scope pricing with clear deliverables; (5) in-house compliance engineers rather than outsourced subcontractors; and (6) ISO 27001 and SOC 2 Type II certification for document handling.

Ask every vendor the same question: how many dossiers has your team actually submitted, and how many were rejected or bounced back for a second completeness-check round? Lighthouse RegTech answers with a specific number, 14 completed and 0 dossiers rejected, not a vague claim of experience.

Also ask who reviews the dossier before it reaches the regulator. At Lighthouse RegTech, founder Dr. Austeja Kazlauskaite personally reviews every submission, drawing on her own years as a supervisor inside the Bank of Lithuania's authorization review unit.

Yes. In addition to CASP authorization, Lighthouse RegTech supports e-money token (EMT) and asset-referenced token (ART) issuers with crypto-asset white paper review, reserve attestation workflow setup and Article 17-19 MiCA Compliance disclosure requirements under Titles II and III of the Regulation.

EMT issuance requires authorization as a credit institution or an electronic money institution under MiCA Article 48, with EMD2 setting a EUR 350,000 initial capital floor. ART issuance carries its own own-funds requirement under MiCA Article 35, set at the higher of EUR 350,000, 2% of the average reserve of assets, or a quarter of the prior year's fixed overheads. Neither figure is a service fee; both are statutory capital requirements we help clients plan around.

The EMT and ART Issuer Supplement, priced from EUR 18,000, bundles white paper review with the reserve attestation workflow, so a stablecoin issuer is not paying twice for overlapping governance documentation already covered in a CASP dossier.

CASPs must comply with MiCA (Regulation (EU) 2023/1114) for authorization and ongoing obligations, the EU Transfer of Funds Regulation for Travel Rule compliance, DORA (Regulation (EU) 2022/2554) for ICT risk and operational resilience, and the EU Anti-Money Laundering Regulation for AML/CFT program requirements. Lighthouse RegTech covers all four frameworks in the Dossier Build engagement.

DORA in particular catches CASPs that expect it to apply only to banks. It requires a documented ICT risk management framework, an incident classification and reporting process, plus periodic resilience testing, all of which our compliance engineers build into the dossier's governance framework rather than as a bolt-on later.

The Sustain Retainer keeps all four frameworks current after authorization: supervisory reporting cycles, Travel Rule protocol updates, DORA testing schedules and the annual AML/KYC policy review are tracked on one calendar, not four separate ones.

Yes - any legal entity providing crypto-asset services as defined in MiCA Article 3(1)(16) to clients in the EU must hold a CASP authorization from a national competent authority, unless a specific exemption applies. The transitional period for existing VASP-registered businesses varies by jurisdiction but ends no later than 30 December 2025 for most member states. Businesses without authorization by the end of the transitional period must cease offering regulated crypto-asset services in the EU.

The exemptions are narrow. Credit institutions and investment firms already authorized for equivalent activities under existing EU financial legislation can passport certain crypto-asset services without a fresh CASP authorization, but most standalone exchanges, custodians, brokers and wallet providers do not qualify and need the full process.

We recommend starting the gap analysis at least six months before your jurisdiction's transitional deadline. A rushed submission is the single biggest predictor of a completeness-check extension, and an extension after the deadline can mean a forced pause in regulated services.

None of the 14 dossiers Lighthouse RegTech has submitted has been rejected by a national competent authority. That is the number we lead with, not a hedge: zero dossiers rejected across every jurisdiction we have worked in, from the Bank of Lithuania to BaFin.

If an NCA does raise a completeness-check request, which is common and distinct from a rejection, our team responds within 24 hours using the same governance and risk-management documentation already built into the dossier, rather than drafting a fresh response from scratch.

Our guarantee goes further than most vendors offer: if a Full Dossier Build client receives an NCA rejection attributable to a deficiency in our own deliverables, Lighthouse RegTech remediates the dossier at our cost, not the client's.

Yes. Lithuania is our home jurisdiction and where Lighthouse RegTech itself is registered, but 13 of our 14 completed CASP authorizations were for clients incorporating or already operating in Germany, the Netherlands, Ireland, Malta and six further EU member states.

Jurisdiction and client domicile are separate questions. A crypto-asset business based outside the EU entirely, or already operating from a non-EU headquarters, can still engage Lighthouse RegTech to establish an EU entity and select the NCA best suited to its service scope, as NordVault did when it incorporated in Lithuania ahead of its custody launch.

Every engagement runs in English by default, with bilingual correspondence handled directly by our team for NCAs such as BaFin that require submissions in the local language. Clients never need to hire a separate translation layer.

A CASP authorization licenses a firm to provide crypto-asset services such as custody, exchange, execution of orders or operating a trading platform. An EMT or ART notification is a separate regulatory track that applies to the issuer of a specific token, not to a service provider, and it centers on the token's own crypto-asset white paper rather than on the issuing firm's governance.

A firm can need both. A CASP that also wants to issue its own e-money token, for example, needs its CASP authorization for the service side and a compliant EMT structure, including credit institution or electronic money institution status under MiCA Article 48, for the issuance side.

The two dossiers share components, particularly AML/CFT policy and governance documentation, which is why Lighthouse RegTech prices the EMT and ART Issuer Supplement as an add-on to an existing CASP engagement rather than as a fully separate build.

Most EU member states allowed existing VASP-registered crypto businesses a transitional period to continue operating while they complete full MiCA CASP authorization, rather than requiring an immediate stop of service. The length and exact conditions of that window differ by jurisdiction.

A VASP registration is not a substitute for CASP authorization once the transitional period closes, and it does not shorten the authorization timeline on its own. What it does provide is an existing AML/KYC and governance baseline, which our gap analysis can build on directly instead of starting from zero, typically saving several weeks of dossier construction.

Lighthouse RegTech recommends beginning the gap analysis as soon as a transitional deadline is known, not when it is imminent. BalticTrade Exchange engaged us specifically to convert an existing VASP registration to full MiCA CASP authorization, and closed in 94 days with the transition handled cleanly before its deadline.