What benefits does this bring to your organization?

Strengthened governance and transparency; Easier communication with regulators and auditors; Increased trust from banks and partners; Streamlined product management and compliance alignment.

Policy on Asset Classification and Scope of Services Provided

Q: Who maintains and approves this policy?

Typically, the Compliance Officer drafts and updates the document, the Risk Department assesses implications, and management or directors formally approve revisions.

Strengthening Regulatory Governance for Fintech and Crypto Businesses

In today’s rapidly evolving regulatory environment, transparency and structure define the difference between a compliant business and a risky one. For fintech and crypto companies operating under EU frameworks such as MiCA, MiFID II, and PSD2, a well-defined Policy on Asset Classification and Scope of Services Provided has become an essential pillar of internal governance.

Regulatory governance framework for fintech and crypto businesses in the EU

This document goes far beyond a legal requirement — it is a strategic framework that clarifies what types of assets your company handles, what services you are authorized to deliver, and how these align with European supervisory expectations.

The growing importance of asset classification

As the financial ecosystem merges with digital assets, regulators are placing greater emphasis on how companies define and manage the assets they work with.

Under MiCA (EU Regulation 2023/1114), every Crypto-Asset Service Provider (CASP) must maintain clear internal documentation describing the types of crypto-assets covered by its services.
Similarly, fintech institutions — including Electronic Money Institutions (EMIs), Payment Institutions (PIs), and investment platforms — are expected to implement the same level of precision under MiFID II and PSD2.

Without such a framework, companies risk:

providing services outside of their licensed perimeter;
failing regulatory audits due to missing documentation;
triggering additional AML/CFT obligations unintentionally;
facing banking partners’ refusal to cooperate due to unclear risk management.

In essence, this policy transforms regulatory uncertainty into operational clarity.

What the policy covers

A comprehensive Policy on Asset Classification and Scope of Services should include:

Categorization of assets: e-money tokens, asset-referenced tokens, utility tokens, DeFi instruments, fiat assets, or hybrids;
Service mapping: which activities (custody, trading, transfer, exchange, payments) are permitted for each asset type;
Approval process for onboarding new assets or products;
Risk and compliance review integrated into every product decision;
Record-keeping for at least ten years, as required by MiCA;
Staff training to ensure awareness and procedural consistency.

Each of these elements ensures full regulatory traceability — a key expectation of both national authorities (ČNB, BaFin, FCA) and European supervisors (ESMA, EBA).

Example of asset classification in practice

Asset Type	Legal Reference	Typical Services	Risk Notes
E-money Tokens (EMTs)	MiCA Title IV / PSD2	Exchange, Transfer, Payments	Low volatility; AML/CFT high
Asset-Referenced Tokens (ARTs)	MiCA Title III	Trading, Exchange, Transfer	Higher market and liquidity risk
Utility Tokens	MiCA Title II	Access, Exchange	Operational, issuer risk
Other Crypto Assets (DeFi, unbacked)	MiCA Title II general	Exchange, Transfer	High volatility and counterparty risk
Traditional / Fiat Instruments	MiFID II / PSD2	Custody, Payment, Investment	Standard prudential supervision

This simple mapping provides clarity for internal decision-making and for regulators reviewing the company’s MiCA or EMI/PI license application.

Governance, control and updates

A credible policy does not end with documentation — it requires living governance.
Companies should:

appoint Compliance and Risk Officers responsible for updates;
conduct quarterly reviews of all listed assets and services;
implement ad hoc revisions when new legislation or guidance (e.g., ESMA clarifications) emerges;
document all decisions in an internal register accessible to auditors and regulators.

These principles ensure continuous alignment with the fast-changing EU regulatory landscape and technology innovations.

How AMS supports your compliance journey

At AMS, we specialize in helping fintech and crypto institutions structure their compliance frameworks under MiCA, MiFID II, PSD2, and AMLD.

Our experts provide a full-service approach:

Development of tailor-made Asset Classification and Scope of Services Policies;
Integration into your governance and risk management systems;
Preparation of documentation for MiCA or EMI licensing;
Internal audits and training for operational teams;
Continuous monitoring of European regulatory updates.

We translate complex legal requirements into practical, regulator-ready documentation — enabling our clients to operate with confidence, transparency, and control.

“Compliance is not just an obligation — it’s a mark of trust.”
— AMS

It’s an internal compliance document defining the asset types your company engages with and the services you are authorized to provide. It ensures legal clarity under MiCA, MiFID II, and PSD2.

Article 62(2)(s) of MiCA requires service providers to describe which crypto-assets are covered by their services, ensuring regulatory transparency and investor protection.

Yes. Fintech institutions working with e-money, digital tokens, or payment instruments must maintain equivalent documentation under MiFID II and PSD2, ensuring control over their product scope and risk exposure.

Without it, companies may offer services outside their license, fail audits, or face banking partners’ rejections. It also weakens internal risk control and governance.

At least annually, and whenever new regulations, products, or technological developments appear. Regular review is key to remaining compliant and audit-ready.

Typically, the Compliance Officer drafts and updates the document, the Risk Department assesses implications, and management or directors formally approve revisions.

It demonstrates that your company has identified, categorized, and controlled all asset types and services — a requirement for license approval and ongoing supervision.

Asset onboarding process, risk and legal assessment, periodic review, record keeping, and training — all designed to ensure that your operations remain within your licensed perimeter.

Strengthened governance and transparency;
Easier communication with regulators and auditors;
Increased trust from banks and partners;
Streamlined product management and compliance alignment.

Yes. AMS develops customized, regulator-ready policies for both crypto and fintech companies, ensuring compliance with MiCA, AMLD, MiFID II, and PSD2 across the EU — with full support during audits and licensing.