Audit offer

Full controls & compliance audit

End-to-end independent audit of fintech controls, safeguarding, and compliance evidence for boards and supervisors.

Request an audit brief
Analyst reviewing charts and printed reports at a desk

Who it is for

Payment institutions, e-money issuers, consumer lenders, and remittance operators that need an independent opinion on whether control design matches day-to-day practice — especially ahead of a Financial Supervisory Commission (FSC) review, investor diligence, or annual board attestation.

Result you receive

A graded findings register, a management letter in plain English, and a closed-out evidence index mapped to the control objectives we agreed at kickoff. Boards use the pack to decide remediation ownership; compliance leads use it to brief supervisors without rebuilding the narrative.

Scope

Included

  • Walkthroughs of onboarding, transaction monitoring, reconciliation, and customer-fund safeguarding
  • Sample testing of settlements, exception queues, and access reviews for a defined period
  • Policy-to-practice comparison for AML, complaints, and outsourcing oversight
  • Interviews with operations, finance, and compliance owners
  • Draft findings workshop and final board-facing report

Excluded

  • Statutory financial statement audit under accounting standards
  • Penetration testing or source-code review
  • Legal opinions on licence interpretation
  • Remediation project management after the report is delivered

Provider & delivery

Lead auditor from Secure Routing Net, supported by one controls specialist. Work is delivered from our Changhua office with on-site days at your Taiwan premises (or a nominated operations centre). Remote evidence review covers the weeks between site visits.

Process & timeline

  1. Briefing — licence class, products in scope, last external review, board deadline
  2. Planning memo — control objectives, sample sizes, and access list
  3. Fieldwork — typically four to six weeks of testing and interviews
  4. Findings workshop — management comments captured before grading is locked
  5. Final pack — report, register, and evidence index within ten business days of fieldwork close

Most engagements complete in six to ten weeks from signed brief to final pack.

Preparation we ask for

Org chart for control owners, current policy set, last three months of reconciliation packs, access to read-only monitoring queues, and a single point of contact who can schedule interviewees.

Pricing basis

Quote-based, driven by licence complexity, number of products, and whether safeguarding sits in-house or with a bank partner. Starting range for a single-licence payment firm is published on our fees page. A deposit secures the fieldwork window.

Next step

Request an audit brief with your licence class, preferred fieldwork month, and what the board must decide. We reply within two business days.