Company Service Providers
The Authority is responsible for the supervision of company service providers, who are entities or individuals providing corporate services, by way of business, including formation of companies, directorship/company secretary services and the provision of registered office, business or correspondence address for businesses. The overall aim is to monitor the supervision of registered company service providers and their level of compliance with the applicable legislative framework so as to ensure an appropriate degree of protection for the clients of persons carrying on such regulated activity. Company Service Providers are deemed to be gatekeepers to the financial system in view of the fact that the structures which they set up may have wide-ranging effects and uses within the financial sector as a whole. In this respect the MFSA’s scrutiny of the company service providers is taken very seriously in view of the heightened risks which these sectors may pose.
The Authority adopts a risk based approach with respect to the supervision of Company Service Providers (‘CSP’). A risk monitoring system is utilised whereby the data collated through the offsite supervision and any other intelligence available is inputted and a risk score is allocated to each company service provider. This risk score will determine the type and frequency of supervision conducted by the Authority.
The Authority adopts a mixture of tools with respect to supervision, with onsite inspections being the most frequently utilised method. This may take the form of either a comprehensive top down review of all the systems and procedures of the authorised person, or a focused inspection on a specific area.
Company Service Providers
Legislation regulating company service providers providing services in Malta, in order to prevent the use of the financial system for the purpose of money laundering and terrorist financing.
Company service providers are defined as natural or legal persons providing services to third parties, namely, the incorporation of companies and other legal entities.
In this section you will find the Rules applicable to company service providers issued by the MFSA, as well as additional guidance notes, Frequently Asked Questions, and other relevant documentation and forms. These Rules and related documents supplement the requirements contained in the Main Legislation and in the Subsidiary Legislation which applies to company service providers. They address in more detail certain requirements including the application process including the fitness and properness criteria, conduct of business, general organization requirements and internal management controls, compliance issues, reporting obligations and disclosure requirements. Company service providers are legally bound to comply with these Rules.
Company Service Providers Rulebook
Limited Company Service Providers Rulebook
Guidance Note on the Application of the Company Service Providers Act
Guidance Note on the Notification Process for Restricted Company Service Providers
Company Service Providers – Frequently Asked Questions
Guidance Note on the Fulfilment of Post-Authorisation Requirements
Company Service Providers – Request Form for Risk Management Function Derogation
The information on returns provided below will remain valid until end of year 2026. Following that, it will be replaced by a new return format.
Learn more on the ‘Home Grown Returns’ tab.
The Annual Compliance Return (‘ACR’) to be submitted in 2026 may be downloaded from the below link. Kindly ensure to download and submit this version of the ACR as previous versions will not be accepted. Kindly also refer to the Authority’s Circular explaining the changes made to the file upload system to be used when uploading this regulatory submission.
The Circular with respect to the submission of the Annual Compliance Return for Limited Company Service Providers will be issued in the coming days.
This Annual Compliance Return is to be completed by all Company Service Providers in terms of the Company Service Providers Act.
Annual Compliance Return: All Company Service Providers – February 2026
This Annual Compliance Return is to be completed by Limited Company Service Providers in terms of the Company Service Providers Act.
Annual Compliance Return: Limited Company Service Providers – March 2026
Welcome to the HRRF Framework submission portal. This section provides the market with all necessary technical specifications, guidance, and machine-readable formatting requirements for home-grown regulatory returns.
Return Specifications & Examples
Select a version below to access the relevant machine-readable schema, data dictionaries, and sample submissions for your specific reporting obligations.
Version 1.0 (Current)
Class A Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Class B Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Class C Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Under threshold Class A Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Under threshold Class B Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Limited Return
JSON Modules Schemas – Primary JSON schema definitions for relevant modules in HRRF Framework.
Converter Tool – Helper Excel to facilitate converting to the JSON machine readable format.
Data Dictionary – Detailed field-by-field requirements, enumerations, and validation rules.
Rulebooks & Guidance Documents
Download the official Submission guidelines applicable to all returns for compiling and validating your HRRF submissions.
JSON Schema Handbook for Non-Technical Users – A non-technical guide to understanding JSON Schema.
Converter Tool Handbook – Technical instructions on converter tool usage and error handling.
Frequently Asked Questions
What is the cut-off time for submissions?
All home-grown returns must be pushed to the MFSA regulator portal by 17:00 CEST on the reporting date.
