What belongs in a licensing evidence binder

Licence packages grow thick with policies. The files that decide whether a readiness audit moves quickly are thinner: the ones that show a control operating on a named date with a named approver.

Policies are necessary, not sufficient

We still read your AML policy, outsourcing standard, and incident playbook. We spend more hours on exception registers, alert disposition logs, and dual-control release records. If the binder has chapter tabs but empty registers, fieldwork will surface that on day two.

Board minutes that help

Minutes that note risk appetite changes, accepted residual risks, and follow-up on prior findings give us a trail. Minutes that only record attendance force us to reconstruct decisions from email — slower and noisier in the management letter.

A short pre-audit list

1. Current organisation chart with compliance reporting lines
2. Last two board or risk committee packs
3. Exception and alert registers for the agreed period
4. Sample of KYC files across risk tiers
5. Vendor inventory for critical payment services

Bring these to the scoping call and your fee outline will be tighter. Missing items are not a moral failure — they are simply estimate factors we need to price honestly.