PI / EMI
A “watertight” application file: from theory to evidence
“We turn Bank of Spain requirements into actionable documentation: organization, policies, controls, records and a compliance plan.”
Bank of Spain Authorization
We assist you with Bank of Spain authorization using a practical approach: pre-application / pre-notification, preparation of the application file, corporate governance, policies and procedures, controls and evidence. We design a roadmap to reduce requests for information, speed up processing and reach registration in the Register of Entities with consistent documentation and operations.
Pre-application
An orderly start to reduce requests for information
“We define scope, regulatory fit and checklist: what is submitted and how it is evidenced, from the outset.”
Governance
Organization, roles and internal control
“We align functions (compliance, risk, internal audit) and evidence so that the structure can be defended before the Bank of Spain.”
Requests for information
A solid response to the Bank of Spain
“We answer precisely: what is requested, what we provide and which measures apply to close observations and remedy deficiencies.”
What a Bank of Spain authorization application includes
Activity, scope and authorization
We define the regulatory fit and the type of authorization/registration that applies: services, clients, channels, structure and associated risks.
Checklist and planning
We prepare the kick-off: core documentation, timeline, owners and evidence to submit a consistent application from the start.
Corporate governance + internal control
Organization, key functions, manuals, procedures and records: what matters is consistency between policy and actual operations.
A complete, “defensible” application file
Reports, annexes and evidence: business plan, resources, capital (if applicable), outsourcing, technology, security and document traceability.
Remedying deficiencies and responding to the Bank of Spain
We answer requests for information precisely: providing documents, clarifications, corrective measures and closing observations.
Changes and maintenance
Additions, changes and subsequent notifications: extending services, agents/third parties, outsourcing, organizational changes and updated documentation.
Cryptocurrency Taxation
Tax forms, taxes and defense before the Spanish tax authorities.
Related pages
Key milestones and timelines in Bank of Spain authorization
Processing depends on the type of entity/activity. What matters is to arrive with a consistent application, respond quickly to requests for information and document governance, controls and evidence.
If you want to see the procedure step by step, with the time limits set by law, we explain it in how to obtain an authorization from the Bank of Spain.
Pre-application / pre-notification: regulatory fit, scope, checklist and planning of the application.
Electronic submission: application and annexes through the Bank of Spain’s Registry/Electronic Office.
AML/CFT coordination (if applicable): evidence and policies; in some procedures, a report on money laundering prevention is part of the process.
Requests for information: clarifications and corrections to close observations.
Decision + registration: authorization and entry in the register, with a focus on document consistency and traceability.
Processing and dealing with the Bank of Spain
In a Bank of Spain authorization application, form matters as much as substance: complete documentation, signatures, consistency across annexes and responses to requests for information. We assist you throughout the cycle: pre-application, submission, remedying deficiencies and closing. When the regulatory perimeter requires it, we strengthen the AML/CFT section (policies, evidence and traceability) to minimize friction.
Application scope: what will we review?
We build a complete and consistent application: regulatory fit, organization, policies, controls and evidence. The goal is to reach authorization with as little “back-and-forth” as possible.
1. Documentation and annexes
We organize reports, forms, annexes and evidence. The key is to avoid contradictions and demonstrate compliance in a clear and verifiable way.
2. Governance, controls and records
We align organization and operations: key functions, internal control, records and evidence of execution so that the model is sustainable and defensible.
3. Liaison and requests for information
We manage corrections and requests for information: technical and legal responses, corrective measures and closing of observations with traceability.
Pre-application or formal application?
In Bank of Spain authorizations, a good pre-application reduces friction: it defines scope, documentation and evidence before the formal application is filed.
| Feature | Pre-application (Preparation) | Formal application (Application file) |
|---|---|---|
| When does it apply? | Before filing: regulatory fit, scope and evidence checklist. | When the application is ready to be filed and reviewed. |
| Scope | Work plan, structure, documentation and risks of the model. | Application, reports, annexes, policies, records and complete evidence. |
| Objective | Reduce requests for information and avoid early inconsistencies. | Obtain authorization and registration with as little “back-and-forth” as possible. |
| Outcome | A clear roadmap and an application ready to file. | Processing, corrections and decision. |
*Guides and forms help structure the application, but the key is consistency between operations, controls and evidence.
How we handle your Bank of Spain authorization
A clear, actionable methodology: regulatory fit, pre-application, application file and responses to requests for information. In authorizations, documentary detail makes the difference.
01
Regulatory fit and scope
We define the activity, services, clients and structure. We identify the applicable authorization/registration and the critical supervisory points.
02
Pre-application and checklist
We plan the application: forms, annexes, policies, evidence and timeline. Less improvisation = fewer requests for information.
03
Complete application file
We draft and organize the documentation: governance, functions, procedures, records, outsourcing and operational evidence ready for review.
04
Requests for information and closing
We answer requests for information and to remedy deficiencies precisely: submissions, clarifications and corrective measures until observations are closed.
Operational checklist
Evidence that speeds up Bank of Spain authorization
If the application has to “withstand” a review, what makes the difference is evidence: organization, policies, records and real internal control (not just documentation).
Regulatory fit defined
Policies approved
Traceable records
Action plan
-
Clear model and scope
Activity, services, clients, channels and perimeter: what is required depends on the actual model.
-
Governance and key functions
Defined roles, independence, internal reporting and evidence of oversight and control.
-
Policies, procedures and records
“Operational” documentation: records of decisions, reviews, controls and exceptions. Avoid “paper-only compliance”.
-
Outsourcing and technology
Contracts, provider governance, security, continuity and evidence of monitoring.
-
Action plan and closing of observations
If there are gaps, define owners, deadlines and verifiable evidence of remediation.
Common mistakes we avoid in Bank of Spain applications
The goal is not just to “file” but to prove with evidence. These are the typical weaknesses that trigger requests for information and delays.
⚠️
Inconsistencies between annexes
Reports, organization chart and policies do not “match”. A classic weak point that forces documentation to be redone and delays processing.
⚠️
Generic policies without records
A “nice-looking” manual but no evidence of execution: records, reviews, approvals and operational traceability.
⚠️
Uncontrolled outsourcing
Critical providers without governance: contracts, KPIs, continuity, security and evidence of monitoring.
⚠️
“Last-minute” corrections
Responding without a strategy or after the deadline causes delays. We prepare complete, verifiable responses from the first request for information.
What a Bank of Spain application must be able to prove
Beyond the “document”, what matters in the review is traceability: scope, governance, controls, records and responses to requests for information.
Scope
Governance
Controls
Evidence
Scope and regulatory fit
- Activity, services and clients defined without ambiguity.
- Organizational structure consistent with the model.
- Outsourced functions identified and governed.
- Documentation aligned with actual operations.
A clear model reduces requests for information.
Controls and evidence (what is expected)
- Operational policies: actionable procedures, not generic ones.
- Records: decisions, reviews, approvals and exceptions.
- Traceability: from rule to process and from process to evidence.
- Action plan: gaps, owners, deadlines and verification.
Quality tip
If a decision cannot be “reconstructed” with evidence, it usually becomes an observation.
Governance and internal oversight
- Key functions defined, with reporting lines.
- Independence and segregation where applicable.
- Minutes and follow-up of controls and reviews.
- Availability of information to answer requests for information.
Internal consistency reduces supervisory risk.
Handling requests for information
- Clear and complete written responses.
- Providing proof and relevant annexes.
- Corrective measures with deadlines and evidence of closure.
Responding well speeds things up and reduces friction.
Important note:
Request a readiness checklist
To avoid inconsistencies, align your documentation with actual operations: procedure → control → record → review → improvement.
Risks and roadblocks if your Bank of Spain authorization is not properly prepared
Repeated requests for information due to inconsistencies or lack of evidence in the application.
Delays due to corrections: documentary “back-and-forth” is usually the biggest bottleneck.
Risk of refusal or demanding conditions due to weak evidence or an unclear model.
Operational roadblocks: difficulty launching products, signing partners or opening bank accounts without authorization/registration.
Reaction costs: correcting late is usually more expensive than planning the application well from the start.
Do you need Bank of Spain authorization?
We help you prepare a complete and defensible application: pre-application, documentation, policies, evidence and responses to requests for information.
All about Bank of Spain authorization
What is a Bank of Spain authorization?
Bank of Spain authorization is the procedure by which an entity obtains permission to carry out activities subject to supervision (depending on the type of entity and services). Success depends on a complete, consistent application backed by evidence.
It normally includes submission (preferably electronic), document review, requests for information/corrections and a decision with entry in the relevant register.
It is not a mere “formality”: it is the basis for operating with stability and without regulatory friction.
Which activities usually require authorization or registration?
It depends on the model: for example, payment institutions, electronic money institutions and other financial activities subject to authorization/registration. Getting the regulatory fit right is the first step.
If in doubt, it is advisable to define the scope before launching the product or onboarding clients.
What is the pre-application and why does it help?
It is a preparation phase: checklist, application structure, evidence and timeline. It reduces requests for information because the application is consistent from the start.
It saves time because it avoids redoing documentation midway through the process.
Which documentation is usually critical?
Business model, organization and key functions, operational policies and procedures, records/evidence, outsourcing and technology, and evidence of internal control.
What makes the difference:
- Consistency between reports, annexes and the organization chart.
- Records and traceability (not just “manuals”).
- Governance of critical providers, security and continuity.
- An action plan to close observations.
What happens if the Bank of Spain asks you to remedy deficiencies?
It is common. What matters is to respond on time, precisely and with evidence: what is requested, what you provide and how it closes the observation.
A good response reduces further rounds and speeds up the closing of the application.
What are the risks if the application is weak?
Repeated requests for information, delays, more demanding conditions or refusal. There is also often friction with partners, banks and clients due to a lack of regulatory clarity.
Preparing evidence from the start is usually the cheapest way to reduce risk.
How long does a Bank of Spain authorization take?
It depends on the type of entity, the complexity of the model and the quality of the application. Delays usually come from documentary inconsistencies or repeated corrections.
With a pre-application and clear evidence, the “back-and-forth” is reduced and speed improves.
How much does it cost to prepare the application?
It depends on the scope, the volume of documentation and the maturity of policies/controls. The deciding factor is how much evidence already exists and how much has to be built.
We give you a tailored quote after reviewing the model and the documentation available.
Book a call
Official sources
Key legislation, linked to the official text:
- Law 10/2014 of June 26 on the Regulation, Supervision and Solvency of Credit InstitutionsBOE · consolidated text
- Royal Decree-law 19/2018 of November 23 on Payment Services and Other Urgent Financial MeasuresBOE · consolidated text
Legislation and links reviewed in .