Institutional Advisory · LATAM HQ · Santo Domingo

Financial Infrastructure
& Compliance for
regulated digital asset businesses.

Mercantil supports VASPs, fintechs, exchanges, OTC desks, PSPs and regulated financial institutions with institutional-grade compliance, governance, audits and operational infrastructure across LATAM and global jurisdictions.

Jurisdictions
15+
Regulated counterparties
200+
AML / governance reviews
500+
Years compliance practice
8
Trusted by regulated financial institutions across LATAM & offshore jurisdictions
VASP Operators · Exchanges & OTC · Digital Banks · PSP / MSB · Cross-Border Operators · Treasury Platforms · Stablecoin Issuers
Institutional offering

Why institutions work with Mercantil

Four pillars covering the full compliance, risk, governance and operational stack for regulated digital asset and financial services businesses.

Institutional Compliance

End-to-end AML/CFT programs designed for FI-grade counterparties and regulator scrutiny.

  • AML / CFT framework
  • KYC · KYB · EDD
  • KYT & transaction monitoring
  • Sanctions screening
  • Travel Rule

Regulatory Advisory

Legal opinions, licensing readiness and multi-jurisdictional structuring for digital asset businesses.

  • Legal opinions
  • Licensing readiness
  • FATF / GAFI alignment
  • Risk assessments
  • Cross-border structuring

Independent Reviews

AML independent testing, governance assessments and remediation programs aligned with FI standards.

  • AML independent testing
  • Control reviews
  • Audit support
  • Remediation programs
  • Governance assessments

Operational Infrastructure

Reporting, settlement governance and operational resilience built for institutional throughput.

  • Treasury workflows
  • Regulatory reporting
  • Settlement governance
  • Risk escalation
  • Operational resilience
Compliance Operating Model

The institutional architecture of a defensible compliance program.

Eight capability pillars Mercantil designs, tests and operationalizes for regulated digital asset and financial institutions. Built around FATF Recommendations, Wolfsberg Principles and supervisory expectations — not dashboards.

mercantil · operating-model · framework
METHODOLOGY
01 · Risk Governance ENTERPRISE

Enterprise risk framework, board oversight and three-lines-of-defense model — covering risk appetite, escalation pathways and committee charters.

Risk Appetite Board Oversight 3LoD
02 · AML Program Design FATF · WOLFSBERG

FATF-aligned policies, procedures and controls. End-to-end program architecture from risk assessment through training, with audit-ready documentation.

Policies Procedures Controls
03 · KYC / KYB Controls CDD · EDD

Customer and counterparty due diligence — beneficial ownership determination, source-of-funds analysis and enhanced due diligence for higher-risk relationships.

CDD UBO EDD
04 · KYT Monitoring ONGOING

Transaction monitoring program design — rule calibration, threshold tuning, alert investigation workflows and effectiveness reviews for blockchain and fiat rails.

Rules Calibration Alerts
05 · Sanctions Screening OFAC · UN · EU · UK

Real-time screening against OFAC, UN, EU, UK and applicable local consolidated lists — onboarding screening, payment screening and ongoing rescreening cycles.

Onboarding Payments Rescreening
06 · Travel Rule FATF R.16

FATF Recommendation 16 implementation — protocol selection, counterparty VASP diligence, sunrise issue management and threshold-aware data exchange.

Protocols VASP DD Sunrise
07 · Independent Testing ANNUAL

Annual independent AML testing, control effectiveness reviews and prioritized remediation programs — aligned to supervisory examination methodology.

Independent Effectiveness Remediation
08 · Regulatory Reporting SAR · CTR

SAR/STR drafting and filing, currency transaction reporting, supervisory returns and threshold reporting — with quality control and lookback capability.

SAR/STR CTR Supervisory
Independent Audits

Institutional assurance & independent reviews.

Independent testing, governance reviews and remediation programs designed to meet the standards of Tier-1 correspondent banks and supervisory examinations.

Audit & Assurance Request DDQ Pack
A-01 AML Independent Testing Annual · ISO 37301
A-02 KYT Effectiveness Reviews Quarterly
A-03 Sanctions Control Testing Semi-annual
A-04 Governance Reviews Annual
A-05 Operational Risk Reviews ISO 31000
A-06 Audit Remediation Project-based
A-07 FI Due Diligence Preparation Banker-grade
A-08 Correspondent Banking Readiness Wolfsberg-aligned
International Standards

Designed around international frameworks.

Mercantil's programs, controls and operating procedures are designed considering the leading international standards for compliance, security, risk and continuity. These are framework alignments — not certifications of the firm — applied to client programs and infrastructure.

ISO 37301
Compliance Management Systems
Framework-aligned
ISO 27001
Information Security Management
Framework-aligned
ISO 31000
Risk Management
Framework-aligned
ISO 22301
Business Continuity Management
Framework-aligned
FATF Recommendations
AML/CFT international standards
Built considering
Wolfsberg Principles
Correspondent banking, AML
Built considering
FinCEN-aligned controls
U.S. financial crime controls
Reference framework
Risk-Based Approach
FATF methodology
Applied across programs
Institutional Counterparties

Designed for institutional counterparties.

When a correspondent bank, fund administrator or institutional investor opens a diligence file on your operation, what they find should answer their questions before they're asked. Mercantil packages your operation to that standard.

Request DDQ Package
DDQ Package · Contents v3.2
  • 01 · Entity & ownership structureREADY
  • 02 · Licensing & regulatory permissionsREADY
  • 03 · AML/CFT program documentationREADY
  • 04 · Independent testing reportsREADY
  • 05 · Sanctions & PEP screeningREADY
  • 06 · Transaction monitoring frameworkREADY
  • 07 · Travel Rule implementationREADY
  • 08 · Governance & board oversightREADY
  • 09 · Risk assessment & methodologyREADY
  • 10 · Operational resilience & BCPREADY
Coverage

Jurisdictional coverage across LATAM & offshore.

Direct coverage in regulated markets where Mercantil holds practice presence; allied coverage where matters extend through trusted institutional partners.

DOMDominican RepublicDirect · LATAM HQ
USAUnited StatesDirect · FinCEN
PANPanamaDirect
COLColombiaDirect
MEXMexicoDirect
SLVEl SalvadorDirect · BCR DASP
CRICosta RicaDirect
ESPSpainAllied
KYCCayman IslandsAllied
BVIBritish Virgin IslandsAllied
SGPSingaporeAllied
CHESwitzerlandAllied
UAEUnited Arab EmiratesAllied
GBRUnited KingdomAllied
Insights

Regulatory intelligence for digital asset operators.

All Insights

Travel Rule across LATAM: where VASPs stand 18 months after FATF R.16 implementation pressure.

A jurisdiction-by-jurisdiction map of Travel Rule adoption status in the Dominican Republic, Mexico, Colombia, Brazil and Panama — including supervisory expectations, threshold differences, and the impact on cross-border VASP-to-VASP flows.

OFAC's 2026 secondary-sanctions framework for stablecoin infrastructure.

Implications for issuers, on/off-ramps and reserve custodians touching restricted markets.

VASP licensing maturity in the Dominican Republic.

Where the framework stands, what BCRD and DGII are signaling, and what operational readiness looks like in 2026.

How crypto-native businesses survive correspondent banking diligence in 2026.

The DDQ patterns Tier-1 banks now apply, what fails, and what closes accounts within 60 days.

KYT effectiveness reviews: what regulators actually want to see.

From tooling selection to rule calibration evidence and false-positive economics.

Q1 2026 enforcement: parsing the seven largest VASP actions.

A consolidated read of FinCEN, NYDFS, FCA, MAS and CNBV actions and the operational patterns they target.

Institutional Access

Talk to compliance.

Schedule an institutional call with our compliance practice. Discuss your licensing posture, jurisdictional structuring, audit posture or counterparty readiness — under NDA from the first conversation.