Solutions
A place for every part of keeping a license.
Carina covers six parts of a licensed firm's compliance work in one workspace: license applications, customer due diligence, identity and sanctions checks, incidents, board reporting and inspections. Start with the part you need now; the rest is there when you need it.
Apply · available now
License applications
Runs your license application from the regulator's checklist to the approval letter, with every requirement, document, signature and regulator question in one place.
An application is dozens of requirements, several people and months of back and forth. Versions get lost, and the regulator's questions arrive by email.
See it step by step: Your first license application- Builds your checklist from the regulator's requirements, in its order, with owners and due dates
- Sends each director a private link to their fit-and-proper pack, signed with a code sent to their email
- Reviews your policies against each requirement with AI and flags gaps, quoting the document
- Freezes exactly what you submit, with a SHA-256 fingerprint for every file
- Logs the regulator's questions and drafts answers that cite your own documents
- Records the approval letter and turns each condition into a dated obligation
What stays with you. Your people close every item and approve every answer. You send the submission; it's never sent for you.
Operate · early access
Customer due diligence
Onboards each customer through a private link, rates them with your own risk model, and keeps their signed submissions, rating and decision in one file.
Customer files end up spread across inboxes and shared drives, and nobody can say for certain which version a customer signed or when their review is due.
See it step by step: Onboarding a business customer- Sends each customer a private link to your onboarding form; they sign with a code sent to their email
- Lists who owns and controls a business customer, and marks who your rules say must be onboarded too
- Proposes a rating from your own risk model and shows every reason
- Requires the compliance officer's sign-off where your model calls for enhanced due diligence
- Schedules periodic reviews by risk band and flags identity documents before they expire
- Asks accepted customers to update their information, with what they sign kept as a new submission
What stays with you. Your owner or compliance officer records every accept or decline, with reasons. No rating model or threshold is shipped or suggested.
Operate add-on · early access · charged per check
Identity verification and sanctions screening
Verifies ID documents and businesses through an identity verification provider, and screens people and companies against the lists you choose. A person reviews every result.
Checking IDs by eye and searching sanctions lists by hand is slow, and it leaves no record of what was checked, against which lists, or why a name was cleared.
See it step by step: A screening returns a possible match- Sends a customer a private link to verify their ID document with a selfie on an identity verification provider's pages
- Sends a business customer to the provider's business verification form: its details, documents and owners
- Screens people and businesses against the lists you choose: sanctions, politically exposed persons, adverse media and more
- Puts every possible match in front of your owner or compliance officer, who marks it a match or not, with a note
- Shows results nobody has reviewed as work for the compliance officer, and as a warning when you record a decision
- Includes every check and review in the customer's file and in your inspection exports
What stays with you. The provider's results are information for your review. They never accept or decline anyone. Under your retention policy, our copy is blanked and the provider is asked to delete its copy.
Operate · early access
Incidents, breaches and complaints
Keeps one register of incidents, breaches and complaints, with deadlines worked out from your own rulebook and a record of each notification you send.
When something goes wrong, the notification deadline is counted on someone's calendar, and the record of what happened is rebuilt from emails afterwards.
See it step by step: A data breach is discovered- Records each case with its severity, owner, dates, cause and remedy
- Works out deadlines from your own rulebook and the date the case happened, was discovered or was received
- Escalates deadlines to the compliance officer before they pass
- Fills in notification drafts from the record; a person sends them and records when and how
What stays with you. No rules are shipped: you write the rulebook. Nothing is filed or sent for you.
Operate · early access
Board reporting
Gathers the quarter's facts from your records for the compliance report, then collects your approvers' e-signatures on a fingerprinted copy.
The quarterly compliance report is assembled by hand from the same records every quarter, then signed on paper or by email.
See it step by step: Quarter end- Draws the quarter's facts from your records: licensing, customers and ratings, cases and deadlines, retention
- Freezes the content with a fingerprint before it circulates
- Collects e-signatures from the approvers you choose, then produces a signed PDF
- Gives board members a read-only view of the quarter so far, and nothing else
What stays with you. The commentary is yours, and so is the choice of who approves.
Operate · early access
Inspection readiness
Exports the records an inspector asks for, for the period you choose, as one ZIP in which every file can be checked against its fingerprint.
An inspection means weeks of pulling customer files, registers and approvals together, and proving nothing changed along the way.
See it step by step: The regulator asks for a sample- Builds one ZIP for a period: the customer files you choose, the incident register and approved board reports
- Adds each record's audit trail, and each customer's identity checks and screenings
- Checks every file against its fingerprint before it goes in, and adds checksums anyone can verify
What stays with you. You pick the sample and decide who receives the export. Nothing is sent anywhere.
Start with your application. Add the rest as you're licensed.
Sign up with a code sent to your email. No card needed to start. Carina organizes the work; your people make the decisions.