Business model mapping
How your model maps to the guidelines' requirements.
Applying to operate a crowdfunding or token offering platform means convincing the SC that your governance, controls and people are ready before you launch. We build the compliance framework and documents your application relies on.
A readiness engagement that prepares the compliance and operational framework for an application to operate a Recognized Market, covering the manuals, policies, controls and evidence the SC expects.
The Guidelines on Recognized Markets set detailed expectations on governance, management competency, investor protection and safeguarding, which the 2026 revision raised further. Applications that arrive with generic manuals are slow or unsuccessful. This is compliance readiness: legal advice on the application itself stays with your lawyers.
How your model maps to the guidelines' requirements.
The platform's compliance manual and policies.
Board, key persons and competency evidence.
Onboarding, due diligence, investor limits and client money.
Risk assessment, CDD and reporting procedures.
A mock review before submission.
Documents that reflect real controls.
Gaps closed before submission.
Controls in place at launch.
Works with your legal advisers.
The framework runs the platform after approval.
Understanding your platform.
Against the guidelines.
Manuals, policies and controls.
Testing readiness.
Framework and evidence for your application.
Tailored to your model.
AML, onboarding, investor protection and complaints.
For board and key persons.
Requirements mapped to controls.
Remaining gaps before submission.
We do not resell products, so nothing here is shaped by a vendor margin. The recommendation is whatever your risk and your budget actually justify, including telling you that you do not need the engagement yet.
Findings come with a sequence, an owner and a realistic effort estimate, sized to the team you have rather than the team a framework assumes. A report that cannot be acted on is an expense, not a control.
Our people have carried the obligation internally, not only audited it. That shows up in what we consider proportionate, and in how much documentation we think you genuinely need.
Work is grounded in Malaysian law and regulator expectation, from the PDPA and the Cyber Security Act 2024 to Bursa, BNM and SC requirements, rather than translated from a European or American template.
Where an engagement includes training, the training component is structured to be HRD Corp SBL-Khas claimable, which changes what the programme costs you in practice.
No. Your legal counsel handles the application. We prepare the compliance framework and evidence it relies on.
Typically two to four months depending on the model and existing documents.
Yes. Token crowdfunding is an initial exchange offering under the SC Guidelines on Digital Assets, with its own requirements.
Yes, through a compliance review, a retainer or an outsourced compliance officer.
No. That needs an SC-registered Shariah adviser.
Tell us your model and timeline. We will scope readiness support and quote.