Run a defensible office.
Policy library + workflow tracker for Cyprus regulated firms — ICPAC accountants, CySEC investment firms, Bar Association lawyers, ICA fiduciaries. AML manuals that update when the regulator updates. Engagement tracking that produces audit-ready files by default. Οἶκος is Greek for "household".
Policies that update themselves. Workflows that don't slip.
3 policy updates drafted by Oikos-bot for review: (i) AML manual section 4.3 updated for the latest ICPAC directive on Cyprus property-transaction risk indicators [1]; (ii) GDPR retention schedule clarified following Cyprus DPC guidance [2]; (iii) Business continuity test results from 2026-04-15 — recommend updating recovery time objective from 4h to 2h. 2 engagements approaching deadline (TP study for Acme; HE32 for Beta Ltd). No policy gaps detected against supervisor checklist.
Audit ref: AI-2026-05-04-#0433 · Sources: ICPAC directive log, Cyprus DPC, internal BCP test
Two modules. One subscription.
Customise once with your firm's details; regulator updates auto-flag for review.
- AML manualRisk-based, customer onboarding, EDD, MLRO duties — supervisor-aligned
- KYC procedureCustomer identification, ongoing monitoring, source-of-funds documentation
- Data protection (GDPR)DPIA, consent, retention, breach response — Cyprus DPC + EU compliant
- Complaints handlingInternal log, response timelines, escalation, regulator reporting
- Conflicts of interestIdentification, register, mitigation, disclosure — partner-level governance
- Business continuityRisk assessment, recovery plan, testing schedule, third-party dependencies
- IT security policyAccess controls, password policy, device management, incident response
- Training & CPDAnnual training plan, CPD tracker, AML training records
Audit-ready files generated as a by-product of normal work — not at year-end panic.
- Engagement trackerPer-client engagement letter, scope, deadlines, deliverables
- Deadline calendarAuto-populated from engagements + statutory dates; alerts before slippage
- Approval workflowsPartner sign-off chains, KYC sign-off, conflict checks before engagement starts
- Document store + versioningVersioned, labelled, audit-trail integrated. Final docs locked, drafts visible.
- Time captureLight-touch (Toggl-style); links to engagement budgets; partner review weekly
- Client file completenessPer-client checklist (engagement letter, KYC, ID, conflicts, accounts, output)
Note: external-facing AML / KYC / sanctions screening— screening your customers against sanctions and PEP lists — sits under Argus. Oikos covers your ownfirm's internal compliance posture; Argus screens the people you do business with.
From setup to inspection-ready — in under 30 days.
Onboarding
Tell us your firm's supervisor (ICPAC / CySEC / Bar / ICA), services, and team. Oikos-bot generates a tailored policy library and a workflow shell — typically 30 minutes of your time, 2 days of ours.
Daily use
Engagements logged with a few clicks. Approvals flow through the platform. Time captured passively. Documents stored with version history. Your team works normally; the audit trail builds itself.
Inspection / review
Regulator inspection? Annual independent review? Click «export evidence pack». Versioned policies, engagement files, training logs, BCP tests, conflict register — all in one zip, regulator-ready.
Subscription, by firm size. No per-seat trickery.
What does your supervisor expect? We'll map it for you.
Tell us your supervisor + team size; we'll send back a one-page gap analysis against the supervisor's checklist. No commitment, just clarity.
Prefer email? oikos@fintechisland.com.cy · we respond within 24 business hours.
Ready to engage Oikos?
New firm setup, switching from manual policies, preparing for regulator inspection, or replacing a fragmented Excel + email workflow — tell us where you are. Live in under 30 days.