Governance and competency
Board, fit and proper, management competency and compliance function.
Capital Markets / Platforms
Crowdfunding and Digital Asset Platform Compliance Review
Equity crowdfunding, P2P financing, token crowdfunding and secondary trading platforms operate markets, and the SC supervises them as such. We review your platform against the Guidelines on Recognized Markets as revised in 2025 and 2026, and the rules around them, before the SC does.
Overview
Platform Compliance Review
What it is
An independent compliance review of a Recognized Market Operator's governance, issuer onboarding, investor protection, disclosure, client money and asset safeguarding, complaints and reporting.
Why organisations need it
The SC revised the Guidelines on Recognized Markets in January 2025 and again on 20 May 2026, raising expectations on governance, management competency and safeguarding investor assets. Token crowdfunding, which the SC regulates as initial exchange offerings under the Guidelines on Digital Assets, adds digital asset custody and AML duties. Platforms that last reviewed themselves at registration are likely to have gaps.
Key features
What the engagement covers
Issuer due diligence
Onboarding, due diligence records and listing decisions.
Investor protection
Investor categories, limits, risk disclosure and suitability.
Client money and assets
Trust accounts, reconciliation, custody and safeguarding.
Secondary trading
Disclosure, surveillance and suspension for ECF secondary markets.
Complaints and reporting
Complaints handling, ombudsman readiness and SC reporting.
Business value
What the business gets out of it
Ahead of supervision
Gaps found before the SC finds them.
Current with 2026 changes
Tested against the latest revision.
Covers every model
ECF, P2P, token crowdfunding and secondary markets.
Board assurance
An independent view for directors.
Actionable
Remediation with owners and dates.
How it works
How the engagement runs
01
Scoping
Platform models and period in scope.
02
Document review
Manuals, policies and records.
03
Testing
Sample issuers, investors and transactions.
04
Gap analysis
Against the guidelines.
05
Report
Findings and remediation plan.
Deliverables
What you receive
Compliance review report
Findings ranked by risk.
Guideline mapping
Requirement by requirement.
Sample testing results
Issuers, investors and money flows.
Remediation plan
Owners and dates.
Board summary
Position for directors.
Who it is for
Who this is built for
Industries
Company sizes
Departments
Why Orbix
Why organisations choose Orbix
A governance approach, not a tool sale
We do not resell products, so nothing here is shaped by a vendor margin. The recommendation is whatever your risk and your budget actually justify, including telling you that you do not need the engagement yet.
Recommendations you can actually implement
Findings come with a sequence, an owner and a realistic effort estimate, sized to the team you have rather than the team a framework assumes. A report that cannot be acted on is an expense, not a control.
Consultants who have sat on your side of the table
Our people have carried the obligation internally, not only audited it. That shows up in what we consider proportionate, and in how much documentation we think you genuinely need.
Built for the Malaysian operating context
Work is grounded in Malaysian law and regulator expectation, from the PDPA and the Cyber Security Act 2024 to Bursa, BNM and SC requirements, rather than translated from a European or American template.
HRD Corp expertise where it applies
Where an engagement includes training, the training component is structured to be HRD Corp SBL-Khas claimable, which changes what the programme costs you in practice.
Questions
Questions we get asked
Which platforms is this for?
SC-registered equity crowdfunding, P2P financing, property crowdfunding, token crowdfunding and digital asset exchange operators, and ECF secondary markets.
Does it cover the 2026 revision?
Yes. The review tests against the Guidelines on Recognized Markets as revised on 20 May 2026.
Do you review Shariah compliance?
No. Shariah matters need an SC-registered Shariah adviser. We review the regulatory framework around it.
How long does it take?
Typically four to eight weeks depending on the platform models and volume.
Can you support our response to SC findings?
Yes. We help you build and evidence a remediation plan.
Get started
Review your platform before the SC does
Tell us your platform models and when you were last reviewed. We will scope and quote.