Governance and control requirements require service providers to maintain audits, client records, duty segregation, and separate leasing operations.

Trust and Company Services Providers must maintain proportionate governance frameworks, internal audit or independent review mechanisms, and effective AML/CFT and KYC controls. They must keep accurate and accessible client, entity, service and constitutive records, retain them for at least five years after the client relationship ends, and apply data-security and confidentiality safeguards. Segregation of duties is required across client acceptance, service delivery, transaction execution and compliance oversight. Permitted leasing services must be maintained as a distinct and adequately resourced business line.

---

---

---