[TruthWillHurt]

Basically you need to fill out an exhausting 8 part form drilling down on every aspect of your business -

Security - policies, architecture, breach procedures, external review, GDPR compliance, hosting structure, cryptography.

Compliance - proove registration with different compliance bodies, proof of insurance (professional indemnity AND cyber), AML measures, KYC measures, proof of purchase of monitoring systems..

Identity - provide information on ALL directors and shareholdeing structure, provide proof of address and identity of 2 of them, name a company signatory and provide proof of identity and address for him as well.

And more and more... took us 2 months just to compile all the information in endless back-and-forth email conversations.

[jeandenis]

Hi TruthWillHurt, are you in the UK? Looking at that list, that looks like what's required for a UK developer -- the environment in the UK is very regulated and quite different than the U.S.