What matters.
When it matters.

Horizon Scanner is a European SaaS platform for regulatory horizon scanning. It monitors around 45 EU/EEA supervisory sources — EBA, EIOPA, ESMA, the ECB and every national financial regulator across the EEA — detects relevant changes automatically, classifies them in multiple stages, and routes them, audit-trail-ready, to the right teams. It is built for compliance teams at European financial institutions, with a focus on insurers and crypto-asset service providers (CASPs). Coverage includes DORA, MiCA, Solvency II, the EU AI Act, the Transfer of Funds Regulation (TFR) and the AMLR.

All hosting on European cloud infrastructure. Strict mandatory tenant separation between customer accounts. Encrypted in transit (TLS 1.2/1.3) and at rest. ISO 27001 certification and SOC 2 Type II readiness on the Year-2 roadmap; current TOMs documented per Art. 32 GDPR.

Processing runs through a multi-layer architecture on European-hosted infrastructure. Only public regulator documents are passed to the automated analysis layer — never personal user data, never customer-confidential content, never end-customer insurance data. The specific processing technology is part of our architecture and is disclosed under NDA during vendor due-diligence.

No. Horizon Scanner operates as a Deployer under Art. 26 EU AI Act. Annex III high-risk categories require scoring of natural persons — we score public regulatory documents, not people. Self-classification under Art. 6(4) is internally documented. Machine-generated outputs are labelled accordingly in the dashboard per Art. 50(4).

Every action — fetch, relevance verdict, change detection, classification, verification, routing, reviewer confirmation — is recorded immutably with timestamp and actor. Default retention is 5 years, configurable per internal compliance policy. CSV / JSON export for any time window or finding bundle is available on every tier.

Thirty minutes. Passkey or magic-link invite from your admin — the user registers a device passkey and is in. There is no implementation project, no onboarding consultancy, no integration partner. Default routing matrices for insurers and CASPs are pre-configured and sit on day one.

By default the EU supervisory authorities (EBA, EIOPA, ESMA, ECB) and every national financial regulator across the EEA plus Switzerland and the United Kingdom — around 45 sources across 32 jurisdictions, fully verifiable. Custom sources can be added in minutes. The binding application and transposition deadlines — from DORA through CRR III/CRD VI and MiCA to the EU AI Act and AMLR — are maintained as a rolling compliance calendar for 2024–2028, each with its legal source.

MiCA Reg. (EU) 2023/1114: CASP authorisation (Art. 60–62, CDR (EU) 2025/305+306), whitepapers (Art. 6, CDR (EU) 2025/421), market-abuse Guidelines (ESMA, July 2025), ART/EMT reserves (Art. 36–38). TFR Reg. (EU) 2023/1113: required originator/beneficiary data ≥ €1,000, self-hosted-wallet verification Art. 14(5). DORA Reg. (EU) 2022/2554 applies to CASPs since 17 Jan 2025 — we track inspection themes around Art. 28 ICT third-party register and Art. 30 critical-function outsourcing. Plus AMLA/AMLR (CASPs become obliged entities on 10 Jul 2027) and EU AI Act (high-risk duties from 02 Aug 2026).

Webhook out per routing rule from Professional onwards. Full API access on Enterprise covers ingestion into Archer, MetricStream, ServiceNow GRC, or your own data warehouse. Native Slack and Microsoft Teams alerting from Professional upward.

Every new customer gets a three-month pilot at 50 percent of list price plus a thirty-day money-back guarantee: if in your first 30 days we have not surfaced a single regulatory change you would have missed using your manual process, we refund your subscription in full.