TaxDo

CRS 2.0, FATCA & CARF Reporting Compliance for Financial Institutions

Account-holder due diligence, self-certification and CRS 2.0, CARF and FATCA reporting, with evidence retained for every check.

Banks, custodians, insurers and fund managers run CRS 2.0, DAC8, FATCA and CARF compliance on a single operating system, from account holder self-certification through regulatory XML reporting, with a 95%+ auto-cure rate.

  • Tier-1 Banks
  • Private Banks
  • Custodians
  • Insurers
  • Fund Managers
  • Wealth Managers
The Regulatory Landscape

Four Frameworks Concurrent Enforcement. One Institution

Financial institutions operate under the most concentrated regulatory burden in tax transparency. CRS 2.0 and DAC8 apply together in the EU. FATCA never stops. CARF extends obligations to crypto custody. Every framework demands verified identity, due diligence, and reporting — on its own terms.

Rolling Out 2026

CARF

75+ jurisdictions. CARF compliance for crypto asset reporting by institutions offering custody, exchange, or transfer services, extending CRS-like obligations to digital assets.

Enforced Jan 2026

DAC8

EU member states. DAC8 compliance means mandatory TIN collection and real-time validation. Crypto-asset users who have not self-certified after two reminders and at least 60 days must be blocked from reportable transactions. Banks that offer crypto-asset services must also apply DAC8's blocking rule to those transactions. Penalties are set by each member state.

EU From Jan 2026

CRS 2.0

130+ jurisdictions. CRS 2.0 compliance software for enhanced due diligence, new entity classifications, and stricter self-certification requirements on all reportable financial accounts.

Active Globally

FATCA

US indicia detection, W-8/W-9 management, withholding agent obligations, and annual XML FATCA reporting to the IRS for all participating FFIs.

How the OS Works

Foundation. Intelligence. Result

Every compliance workflow — self-certification, due diligence, reporting — depends on verified identity. The OS starts there, then builds intelligence on top.

FoundationGlobal Tax Identity

Verified Identity at Onboarding

Every account holder identity is validated in real time — TINs verified against 130+ countries, entities confirmed through 120+ official business registries, and identity intelligence feeds from 290+ authoritative sources. This verified foundation is not a separate step. It is the first layer every compliance workflow depends on.

IntelligenceForensic Intelligence Engine

Forensic Due Diligence & Curing

The Forensic Intelligence Engine performs multi-category indicia detection across every reportable account — assessing self-certification reasonableness, identifying undisclosed tax residencies, and flagging discrepancies that require resolution. When discrepancies are found, the engine initiates automated curing — authoritative source correction, targeted account holder outreach, document requests, and entity re-classification.

Result

95%+

Auto-Cure Rate Across All Frameworks

Because verified identity is native to the OS, the intelligence layer starts with truth. The result: 95%+ of discrepancies resolve automatically, before a compliance officer intervenes.

Key Capabilities

Built for How Financial Institutions Actually Operate

Not a compliance bolt-on. An operating system designed for the scale, complexity, and regulatory precision financial institutions require.

Conversational Self-Certification

Account holders never fill forms. They answer guided questions in a conversational flow — while the system validates TINs, tax residency, and entity classification in real time. A pre-populated self-certification form is presented for digital signature. Fully white-label: your branding, your domain, your experience.

Native Identity Verification

Real-time TIN validation and business registry verification are not external lookups — they are native to the platform. Every TIN is checked against official government sources in real time. Every entity is verified through authoritative registries. Identity intelligence enriches every record with address, phone, and AML screening data.

Regulatory XML Reporting

Jurisdiction-specific XML generation for every framework — CRS XML, FATCA XML, DAC8 XML, CARF XML. Reporting schemas stay current with every regulatory update. Submission-ready output for local competent authorities, with full audit trail from self-certification through final report.

Compliance Dashboard

Real-time visibility across all accounts, frameworks, and remediation workflows. Track self-certification rates, due diligence coverage, curing status, and reporting readiness — across your entire account base. Drill into individual accounts with full evidence trails for audit and regulator inquiries.

Forensic Due Diligence

The Forensic Intelligence Engine runs multi-category indicia detection across every reportable account — identifying undisclosed tax residencies, assessing self-certification reasonableness, and flagging discrepancies across CRS 2.0, DAC8, FATCA, and CARF requirements simultaneously.

Intelligent Curing

When discrepancies are detected, the engine resolves them automatically — through authoritative source correction, targeted account holder prompts, document requests, and entity re-classification. 95%+ of cases cure without human intervention. The remaining exceptions surface with full context for compliance officers.

Back-Book & Legacy Portfolio Remediation

New regulations extend beyond new accounts. CRS 2.0 and DAC8 require legacy portfolio remediation through data re-validation, entity re-classification, and discrepancy resolution. TaxDo's Forensic Intelligence Engine identifies self-certification gaps, expired documentation, and outdated classifications at scale, auto-curing 95%+ without manual intervention.

Your Engines

Two Engines Power Financial Institution Compliance

Financial institutions primarily operate on the Tax Identity and Regulatory Compliance engines. Together, they cover every obligation from onboarding through reporting.

Core Engine

Global Tax Identity

The verified foundation. Real-time TIN validation across 130+ countries and 1,000+ tax ID types. Entity verification through 120+ official business registries. Identity intelligence from 290+ authoritative sources — address, phone, AML screening, adverse media. Every compliance workflow in the OS depends on this layer.

  • TIN Engine
  • Business Registry
  • Verify+
  • AML Screening
Explore Tax Identity
Core Engine

Regulatory Compliance & Reporting

Automated due diligence, forensic indicia detection, intelligent curing, and regulatory XML reporting — across CRS 2.0, DAC8, FATCA, and CARF. Day-1 readiness from the moment an account is opened. A 95%+ auto-cure rate means compliance officers focus on the exceptions, not the accounts.

  • Due Diligence
  • Indicia Detection
  • Curing
  • XML Reporting
Explore Regulatory Compliance
Deployment

Your Infrastructure. Your Terms

Financial institutions have strict data residency, sovereignty, and security requirements. TaxDo deploys where your compliance mandate demands.

Cloud

Multi-Tenant SaaS

Fully managed infrastructure with enterprise-grade security and encryption at rest and in transit. Fastest deployment path for institutions ready to move.

Private

Dedicated Single-Tenant

Isolated infrastructure dedicated to your institution. No shared resources, no co-tenancy. Full data isolation with your choice of cloud region for data residency compliance.

Sovereign

On-Premise Air-Gap

Deploy within your own data centre. Air-gapped, fully isolated, zero external data transmission. Designed for Tier-1 banks and institutions with the strictest regulatory and sovereignty mandates.

Financial Institutions Tax FAQ

Questions from Compliance Teams

We will respond to you at any time.
Just use our help center or contact us.

Financial institutions (banks, custodians, insurers, and fund managers) are subject to CRS 2.0 (130+ committed jurisdictions, with the amendments applying in the EU from January 2026), DAC8 (enforced January 2026 across EU member states, with mandatory blocking of crypto-asset users who do not self-certify after two reminders and at least 60 days), FATCA (active globally for US tax reporting), and CARF where they provide crypto custody services. TaxDo covers all four frameworks on a single platform.

TaxDo replaces static PDF forms with a conversational self-certification experience. Account holders answer guided questions — not fill forms — while the system validates TINs, tax residency, and entity classification in real time. A pre-populated self-certification form is then presented for digital signature. The entire flow runs under the bank's branding with full white-label support.

The Forensic Intelligence Engine performs automated due diligence across every account — detecting indicia, assessing reasonableness of self-certifications, and identifying discrepancies that require resolution. It then resolves 95%+ of those discrepancies automatically through authoritative source correction, targeted account holder outreach, document requests, and entity re-classification — without compliance officer intervention.

Yes. TaxDo offers three deployment tiers: Cloud (multi-tenant SaaS), Private (dedicated single-tenant infrastructure), and Sovereign (on-premise, air-gapped deployment). Sovereign deployment keeps all data within the institution's own infrastructure — critical for banks with strict data residency and regulatory requirements.

On the CRS side, DAC8 requires institutions to collect and validate the self-certification. Where, in exceptional circumstances, a new account has none in time, the institution applies the pre-existing account procedures until it is obtained and validated. Blocking applies to crypto-asset users, after two reminders and at least 60 days. Banks that offer crypto-asset services must also apply DAC8's blocking rule to those transactions. TaxDo's self-certification workflow validates TINs and tax residency in real time during account opening — ensuring Day-1 compliance. If discrepancies arise, the Forensic Intelligence Engine initiates curing workflows automatically, tracking remediation deadlines and escalation triggers to resolve gaps before they become reporting failures.

TaxDo's Global Tax Identity engine validates TINs in real time across 130+ countries, covering 1,000+ tax identification number types. Validation runs against official government sources and 120+ business registries — providing authoritative verification, not pattern matching. This covers the full jurisdictional scope of CRS 2.0, DAC8, FATCA, and CARF obligations.

TaxDo provides API-first integration for embedding compliance workflows directly into existing core banking, onboarding, and CRM systems. The self-certification experience, TIN validation, and due diligence intelligence are all available via REST APIs. For reporting, TaxDo generates jurisdiction-specific regulatory XML — CRS XML, FATCA XML, DAC8 XML — ready for submission to local competent authorities.

TaxDo achieves a 95%+ auto-cure rate across all supported frameworks. The Forensic Intelligence Engine detects discrepancies and resolves them through multiple automated resolution methods — including authoritative source lookups, targeted account holder prompts, document requests, and entity re-classification. Because verified identity data is native to the platform, the intelligence layer starts with truth, not assumptions.

See How the OS Works for Your Institution

CRS 2.0, DAC8, FATCA, CARF — four frameworks, one operating system. From self-certification through regulatory reporting, automated end to end.