Policy Register

This register lists all active policies forming part of Zeyro’s Compliance Framework.

Archived, historic, versions of all policies are stored in Confluence.

---

Conduct & Governance Policies

Policy Code	Policy Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-GOV-001	Governance Framework	Defines senior management structure, SMF roles, and accountability for compliance.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-RISK-001	Risk Management Policy	Defines how risk are identified and managed	Gareth Malna	Zeyro Board	1.0
ZYC-COM-001	Compliance Oversight Policy	Outlines compliance monitoring, reporting, and regulatory liaison.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-CON-001	Conflicts of Interest Policy	Identifies, manages, and records conflicts arising from financial promotions or arranging activities.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-ETH-001	Code of Conduct & Ethics Policy	Sets behavioural expectations aligned with FCA Conduct Rules (COCON).	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-WHB-001	Whistleblowing Policy	Provides safe reporting routes for wrongdoing.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-REM-001	Remuneration & Incentives Policy	Ensures remuneration does not encourage misconduct or non-compliance.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-CONSUMER-001	Consumer Duty & Vulnerable Customers Policy	Defines how Zeyro meets the FCA’s Consumer Duty (PRIN 12)	Wayne Green	Zeyro Board	1.1

---

Financial Crime & Integrity

Policy Code	Policy Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-AML-001	AML / CTF / Anti-Proliferation Policy	Prevents use of Zeyro’s services for ML/TF/PF; linked to BWRA and DotFile controls.	Gareth Malna	Zeyro Board	2.0	Oct 2026	Active
ZYC-ABC-001	Anti-Bribery & Corruption (ABC) Policy	Defines approach to inducements, gifts, and hospitality.	Gareth Malna	Zeyro Board	1.3	Oct 2026	Active
ZYC-FRD-001	Fraud Prevention Policy	Sets procedures to identify and respond to suspected internal/external fraud.	Gareth Malna	Zeyro Board	1.2	Oct 2026	Active
ZYC-MAR-001	Market Abuse & Insider Information Policy	Ensures confidential information is handled appropriately.	Gareth Malna	Zeyro Board	1.1	Oct 2026	Active

---

Clients & Services

Policy Code	Policy Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-ONB-001	Client Onboarding & Due Diligence Policy	Describes DotFile use, CDD/EDD thresholds, and approval process.	Gareth Malna	Zeyro Board	1.1	Oct 2026	Active
ZYC-CLCAT-001	Client Categorisation Policy	Classifies clients under MiFID rules (retail/professional).	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-FINPROM-001	Financial Promotions Approval & Withdrawal Policy	Defines criteria for approving and withdrawing cryptoasset and OFR promotions.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-CRYRISK-001	Cryptoasset Risk Assessment Policy	Details methodology for manual cryptoasset risk scoring in Confluence.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-COMPL-001	Complaints Handling Policy	Defines complaint receipt, acknowledgement, and response procedures.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active

---

Operational & Information

Policy Code	Policy Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-INFO-001	Information Security & Data Protection Policy	Governs personal data handling and cybersecurity.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-REC-001	Record Keeping & Data Retention Policy	Defines record-keeping and destruction schedules across policy areas.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-OUT-001	Outsourcing & Third-Party Risk Policy	Describes oversight of vendors (e.g. DotFile, cloud services).	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-BCP-001	Business Continuity & Incident Response Policy	Outlines contingency plans for critical systems and data.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active

---

Culture & HR

Policy Code	Policy Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-FIT-001	Fit & Proper (SMCR) Policy	Details fitness and propriety checks for staff and senior management.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-TRN-001	Training & Competence Policy	Ensures staff remain competent and receive ongoing training.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-DIV-001	Equality, Diversity & Inclusion Policy	Encourages equal opportunity and a positive working culture.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active

---

Meta-Compliance Documents

Document Code	Document Name	Purpose / Scope	Owner	Reviewer	Version	Next Review	Status
ZYC-COMP-HDBK	Compliance Handbook	Explains policy structure, governance, and monitoring.	Gareth Malna	Zeyro Board	1.0	Oct 2026	Active
ZYC-COMP-MON	Compliance Monitoring Plan	Defines testing frequency, evidence, and reporting cycle.	Gareth Malna	Zeyro Board	1.0	October 2026	Active
ZYC-REG-001	Register Suite	Collection of logs: conflicts, gifts, breaches, complaints, training, and promotions.	Gareth Malna	Zeyro Board	Living doc	Continuous	Active
ZYC-DOC-001	Policy Governance & Publication Policy	Explains how policy document are to be created, published and maintained.	Gareth Malna	Zeyro Board	1.0	October 2026	Active
ZYC-RSK-001	Business-Wide Risk Assessment (BWRA) Policy	Explains our methodology for creating and updating our BWRA.	Gareth Malna	Zeyro Board	1.0

---

Notes:

• All policies are reviewed at least annually or following material business change.

• Version control and approval records are maintained in Confluence under “Governance → Policy History.”

• The GitBook version constitutes the master live policy for operational use.