Estonia

Financial Supervision Authority (Finantsinspektsioon)

Payment and e-money institutions, investment firms and CASPs.

Estonian Tax and Customs Board

Gambling licences and supervision.

Financial Intelligence Unit

AML/CFT supervision and reporting.

• Plan for licensing: company formation is fast, licensing considerably more demanding.
• Budget for the substance and local management expected of licensed entities.

This overview is general information, summarised at a high level. Requirements change and depend on the specific activity; seek advice on your circumstances before acting.

Services we support across the jurisdictions in our directory, described once on their own pages. We deliver each to the requirements that apply locally, coordinating local specialists where local law, registration, representation or professional requirements require it.

• Privacy & Data ProtectionExternal DPO services and working privacy programmes: GDPR and global privacy laws, DPIAs, data mapping, transfers and ISO/IEC 27701.
• Information Security & CybersecurityFractional CISO support, ISMS and security programmes, certification and audit readiness, DORA, NIS2 and customer assurance for enterprise sales.
• AI GovernanceGovernance that lets AI adoption scale: EU AI Act readiness, ISO/IEC 42001 management systems, AI risk and impact assessments, and vendor risk.
• AML & Financial Crime ComplianceAML/CFT programmes, MLRO-as-a-Service, independent AML/CFT audits, risk assessments, monitoring, sanctions and inspection support.
• IP Registration & ProtectionTrademark and patent registration, copyright, domain disputes and enforcement that protect your brand, software and content across markets.
• Legal OpinionsRegulatory, business model, perimeter, payment, gaming, crypto-asset and cross-border opinions that answer what banks and investors ask.
• Bank Account OpeningHelp organising your banking with banks and EMIs that fit your model, from the onboarding file and account structure to periodic reviews.
• Merchant Account / Acquiring SetupMerchant applications, acquiring structure and negotiated terms for online and high-risk merchants that need stable card and local payment acceptance.

• Regulatory & LicensingStrategy, applications and regulator engagement for the gaming, payments and crypto routes listed above.
• Corporate StructuringGroup architecture, incorporation, substance and governance built around your licences, banking and investors.
• Market Entry & Regulatory StrategyMarket prioritisation, regulatory roadmaps and launch readiness that let you expand into new jurisdictions in the right order.
• Information Security & CybersecurityDORA, NIS2 and the information security obligations that apply under EU law.