Any Report Lab
Self-hosted Regulatory reporting platform

Regulatory reporting, automated — and under your control.

From source data to the regulator's receipt, in one self-hosted platform for investment firms, brokers, fund managers and crypto-asset providers in the EU, the UK and Cyprus.

Runs on your servers One price, every regime CySEC forms included
reporting.yourfirm.eu/runs/2026-11-02/preview
EMIR REFIT · Daily trades
Run of 2 Nov · Live preview
Demo mode
12,480records
12,477valid
3to fix
RecordValidChecks failedUTI
10,231UTI without the LEIXKZ7…0193
10,874Expiry before execution2594…77C1
10,229—2594…A1B2
10,230—2594…A1B3
10,232—2594…A1B5
Caught before sending
Record 10,231 · UTI — the rule that failed, the field and the value, in one click.
Receipt: accepted
Yesterday's file · 08:14
60+reporting regimes and forms
5,700+regulator rules built in
10M*EMIR reports in 59 minutes: 100 XSD-valid files
1price per organisation, all regimes included
* 10,000,000 synthetic trades on one 32 GB machine, November 2026. Your volumes and hardware will differ: we run the test on yours.
EMIR EU · UKMiFIR EU · UKSFTR EU · UKDORA EUIFR EUMiCA EUCySEC forms CYCRS · FATCA TaxASIC AUMAS SGCFTC US
The problem

Reporting teams build files instead of controlling them

ARL takes over the assembly, so your team's time goes into control.

Without ARL

  • Manual assemblyDays of Excel, copying and checking before every deadline.
  • Late errorsMistakes surface only when the regulator rejects the file.
  • Waiting for ITEvery rule change becomes a ticket, a sprint and a release.
  • No safety netNo test environment, no versions, no quick rollback.

With ARL

  • Assembled on scheduleFiles, SFTP or your database in; the regulator's format out.
  • Errors caught firstThe regulator's rules on every record and field, before sending.
  • Your team changes the rulesNo-code, tested on real data, signed off, live.
  • Versions and rollbackEvery change kept; compare two versions, roll back in one step.
How it works

From data to receipt in five steps

Load

Files, SFTP or straight from your database — on schedule.

Enrich

No-code rules, reference data and calculations.

Validate

The regulator's rules on every record and field, before sending.

Generate

XML, CSV, Excel forms, xBRL-CSV, XBRL.

Submit and track

SFTP or FIX, the response, corrections, resubmission.

Every step is versioned and written to the audit log.
Quality

Caught before the regulator sees it

  • Every record, every fieldErrors are shown exactly where they are, with the rule that failed.
  • History-awareChecked against what you have already reported — a cancellation of a trade never sent, a second report under one identifier.
  • Reference data insideLEIs, instruments (FIRDS, FITRS), market codes, CCPs, sanctions lists, tax jurisdictions — refreshed from the source.
  • Check any provider's fileIndependent control of files made elsewhere.
LEI active in GLEIF
Checked today, 06:00
Record 10,231EMIR REFIT · new trade
2 checks failed
Reporting counterparty●●●● Ltd
Action typeNEWT
UTIXKZ7QW…0193 Must start with the LEI of the entity that generated it
Expiration date2026-10-30 Earlier than the execution date, 2026-11-02
ISINEZ1234567890
History
First report under this UTI
Control

Your team changes the rules — not a release cycle

  • No-codeFormulas and reference tables in the interface; no programming.
  • VersionsEvery change kept: compare two versions, roll back in one step.
  • Four eyesSeparate roles to build, sign off and run reports.
  • AI assistant (optional)Drafts a configuration from a plain description.
Notional in EURMiFIR transactions · field rule
v13 · awaiting sign-off
− ROUND(Notional * RateOn(TradeDate), 2)
+ ROUND(Notional * RateOn(ExecutionDate), 2)
Edit Test on real data Sign-off Live
Test run8,912 records · 0 new errors
Compared with v1214 values changed
Built byDesigner role
Signs offApprover role
Roll back to v12
One step, written to the audit log
Submission

Deadlines under watch, receipts read back

  • Filing calendarEvery report the organisation owes, and when.
  • Alerts before anything is lateA reminder while there is still time to act.
  • Submit and trackSFTP or FIX; the regulator's response is read back onto the records.
  • Corrections and resubmissionFix the rejected records and send them again from the same run.
Reminder sent
Quarterly return due in 3 days
Filing calendarNovember 2026
5 this week
3Tue
EMIR REFIT · daily tradesTrade repository · SFTP
Accepted
3Tue
MiFIR · transactionsRegulator · SFTP
Accepted
4Wed
APA · trade publicationFIX
Scheduled
6Fri
CySEC · quarterly returnExcel form
Sign-off
7Sat
SFTR · 14 rejected recordsCorrected, ready to resend
Resend
Why ARL

One platform instead of a patchwork

Trade-reporting tools stop at the trade repository. A Cypriot firm also owes CySEC returns, DORA, prudential and tax reports — ARL covers them in the same place.

A typical trade-reporting toolAny Report Lab
EMIR, MiFIR, SFTRYesYes
CySEC returns and formsNot coveredIncluded
DORA, IFR, MiCA, CRS / FATCAOther toolsSame platform
Where your data livesUsually the vendor's cloudYour servers
Who changes a ruleUsually the vendorYour team, tested and signed off

Based on our review of trade-reporting vendors' public sites, October 2026.

Coverage

60+ regimes. One platform.

EU, UK and Cyprus first — and Spain, Australia, Singapore, Canada and the US where you need them.

Transactions and transparency

MiFIREMIR REFITSFTRCSDRAPA trade publicationUK MiFIR · EMIR · SFTR · CSDR · APAASICMASCanadaCFTC

Tax, AML and crypto

FATCACRSCARF / DAC8STR (goAML)MiCA recordsART / EMT

Prudential and supervisory

IFRPillar 3AIFMD Annex IVCOREPRemunerationShort sellingCNMV IREBank of Russia XBRL

CySEC forms

QST / RBSF returnsComplaintsFeesICFPrudential informationFS lines entered once

Operational resilience

DORA register of informationDORA incidentsCosts and losses

Not on the list?

A new regime is a catalogue and a template, not a new product.

Security

Runs on your infrastructure

Self-hosted: your data never leaves your network.

One server

Delivered as Docker containers; no external cloud services.

Access

Roles, two-factor sign-in, single sign-on (OpenID Connect).

Audit trail

Who changed or ran what, and when.

Backups

Encrypted daily backups with restore checks.

GDPR

Retention periods and erasure of personal data; the export of all your data at any time.

DORA-ready

Your register of information rows, service notices, the Article 30 provider documents, a software bill of materials.

On-premises or your private cloud The AI assistant is optional and can run on a local model
Who it is for

Investment firms, brokers, fund managers and crypto-asset providers

In the EU, the UK and Cyprus — and the service providers who report for them.

A Cypriot investment firm

Every CySEC return, DORA and its EU transaction reporting in one place.

CySEC formsMiFIREMIRDORAIFR

A fund manager

AIFMD, CRS and the CySEC fund-manager forms.

AIFMD Annex IVCRSFATCACySEC forms

A crypto-asset provider

MiCA, CARF / DAC8 and the CySEC CASP forms.

MiCACARF / DAC8CASP formsSTR
Pricing

One price per organisation. All regimes included.

From € … a year

Implementation and the first reports with us: included / priced separately.

  • A fixed yearly subscription for the organisation
  • Every regime and form the organisation needs
  • No fee per message or per report
  • Runs on your servers

See it on one of your own reports.

A 30-minute walkthrough on a screen share: we take a file of yours and show the report, the checks and the regulator's format.