Regfiler by WBP
Regfiler is a fully managed FATCA and CRS reporting service for BaFin-supervised funds and institutions. We prepare, validate, and transmit your reports to the BZSt as your authorised sender (Datensender), and return the official receipt. You get advisory-grade rigour at a fixed annual fee, and legal ownership of the filing remains with you.
Reporting › FATCA › 2025
FATCA 2025, Submitted
Receipt
4F8D · 2A11
Submitted
14 Jan
Records
12,847
Authorised BZSt sender (Datensender) · Data processed in the EU · ISO/IEC 27001:2022 certified
The Problem
FATCA and CRS look like routine annual filings. Three things make them harder to get right than they appear.
01
Most institutions hand FATCA and CRS to a Steuerberater, a consultancy, or a Big Four team. All are expensive, billed by the hour, and slow to turn around, and the regulatory accountability remains entirely with you.
02
The BZSt has retired ELMA's browser upload for the BOP/DIP interface: certificate-authenticated, schema-validated, and machine-to-machine. Meeting it requires engineering capability that compliance and finance teams are not resourced to maintain.
03
Having no US investors removes FATCA exposure but not CRS, which covers tax residents of every participating jurisdiction, and a fund's capital accounts can be reportable. Germany requires no nil return, but the obligation to classify each account and complete due diligence stands regardless. Misjudging scope is where obligations are missed.
How It Works
We take on the entire technical process. You provide the data; we handle preparation, validation, transmission, and the receipt.
Submit your account data by secure upload, structured template, or API. We specify exactly which fields each filing requires.
We generate the BZSt-compliant XML, validate it against the official schema, and transmit it to the BZSt as your authorised sender. Your team never accesses the portal or the BOP/DIP interface.
The BZSt receipt is returned to your dashboard alongside every prior filing and its full audit trail, ready for examination.
The outcome
Each cycle, your team confirms the data and receives the receipt. There is no XML to build, no certificates to manage, and no BZSt validation errors to resolve. Every filing is documented and auditable.
What's included
Advisory engagements are scoped, re-scoped, and billed by the hour. Regfiler is a fixed annual fee covering the full reporting cycle, from data intake to the official BZSt receipt. No change orders and no variable billing.
Data & Security
FATCA and CRS filings contain sensitive investor data. Vendors require careful security and residency review.
We have addressed that in advance, and the data never leaves a controlled environment for a spreadsheet or an AI tool.
Live and historical service availability: System status
GDPR-compliant processing
All processing under a data processing agreement (DPA) — roles, obligations, and audit rights defined for you.
Limited access
Access restricted to the personnel directly handling your filing — not shared across teams or external tools.
Retention under your control
You control all retention periods under your contract — data deleted or returned in full at agreement end.
Data encrypted
Account holder data encrypted in transit and at rest — from secure upload through to final BZSt transmission.
EU data residency
Data stored and processed only in the EU — never leaving European infrastructure for preparation or filing.
ISO/IEC 27001:2022 certified
Our information security management system is certified to ISO/IEC 27001:2022 — certificate and scope published in our Trust Center.
The stakes
FATCA and CRS reports are due to the BZSt by 31 July each year. A missed deadline or an incorrect filing carries concrete consequences.
30%
US withholding
FATCA, non-participating FFI
If significant non-compliance goes unresolved for 18 months, a German institution can be treated as a non-participating FFI, and its US-source payments, chiefly interest and dividends, then face 30% withholding.
Up to €50,000
CRS reporting fine
FKAustG §28
A late, incomplete, or incorrect report is an administrative offence under §28 FKAustG, punishable by a fine of up to €50,000. Lesser breaches carry up to €10,000.
Sources: §28 Abs. 1a FKAustG (CRS); IRC §1471 and Article 5(2) of the Germany–US FATCA agreement; filing deadline 31 July per §27 Abs. 2 FKAustG.
The team behind Regfiler
Regfiler is built and operated by people who run its authorised BZSt/DIP filing pipeline and who have built a full AML and KYC compliance platform end to end under German regulatory conditions. The regulatory judgment is built into the service, not billed back to you by the hour.
Mohan Paranthaman
Co-Founder
20+ years in AML and KYC compliance across retail, corporate, and private banking at Citi, BNP Paribas, and Akbank, including BaFin examinations from the institution side.
Karthik Iyengar
Co-Founder
Principal architect behind Regfiler. Built a full AML compliance platform for a regulated client end to end, from data model to regulatory workflows, across a career in payments and credit at Klarna and Shopify.
FAQ
Book a demo with a founder who has filed these reports before.
Book a Demo