Regulatory reporting for fintechs

One integration for all your reporting obligations.

Regway takes your data, validates every record and builds the file in each regulator’s current layout. It files through the official channel when there is an API, and hands you a ready file when there isn’t.

Book a demo See how to integrate

Launch December 1, 2026

Covered obligations: CCS · SCR · SVR · SISBAJUD · COSIF · COAF · DECRIPTO · e-Financeira · DIMP

Delivery queue January 2027

SCR BACEN
Documents 3040 and 3044 · period 12/2026
Validating
CCS BACEN
Daily batch · 18,402 records
Delivered
DIMP SEFAZ SP
Period 12/2026 · ready to send
Scheduled
DECRIPTO Receita
Period 12/2026 · file ready for you to submit
Ready
COAF SISCOAF
Suspicious activity report · 2 pending reviews
Action

Next deadline DECRIPTO 12/2026 and annual — Jan 29, 2027

Layouts maintained and versioned by us

BACEN
Receita Federal
COAF
SEFAZ
CVM
SUSEP

How it works

Three steps from your database to the filing receipt.

01
Ingestion
Send the data through the API or a signed link, created via the API or the portal. Other ways of sending on request.
REST API · signed link
02
Validation and generation
Each regulator’s rules run on every record. The file comes out in the layout version in force, signed when required.
Errors per record · versioned amendments
03
Delivery
Where the regulator offers an API, we file through the official channel within the window. Where it doesn’t, the file is ready for you to download and submit. Either way, the receipt goes into the audit trail.
Receipt · protocol · status webhook

Coverage

Each obligation with its own layout, frequency and channel.

When a regulator publishes a new layout version, updating is on us. Nothing changes in your integration.

Obligations covered by Regway
Obligation	Regulator	Format	Frequency	Available from
CCS Customer Registry of the National Financial System	BACEN	Fixed-width	Daily	Dec 1, 2026
SCR Credit Information System — documents 3040 and 3044	BACEN	XML	Monthly	Dec 1, 2026
SVR Values Receivable System	BACEN	API / file	Daily	Dec 1, 2026
SISBAJUD Court orders to freeze and transfer funds	BACEN	Standard file	Daily	Dec 1, 2026
COSIF Trial balances and balance sheets under the chart of accounts — documents 4010, 4016, 4111 and others	BACEN	XML	Daily to semiannual	Dec 1, 2026
COAF Suspicious transaction reports and nil reports	COAF	SISCOAF / XML	Per event	Dec 1, 2026
DECRIPTO Crypto-asset transactions	Receita Federal	TXT · IN RFB 2.291/2025	Monthly and annual	Dec 1, 2026
e-Financeira Account holders’ financial transactions	Receita Federal	Signed XML	Semiannual	Dec 1, 2026
DIMP Payment Methods Information Return	SEFAZ	Confaz layout	Monthly	Dec 1, 2026

Need an obligation that isn’t listed? Talk to us — we map new layouts on request.

Control

What the compliance team gains every day.

Obligations calendar
Every deadline by regulator in one view, with an alert before the window closes.
Audit trail
Who sent what, and which layout version was used. Exportable for your auditor.
Always-current layouts
We follow regulators’ publications and version the layouts without requiring changes to your integration.
Controlled amendments
Reprocess a period and file the amendment while keeping the history of what was already filed.

Integration

You send the data. The rest is on us.

Send through the API or a signed link, created via the API or the portal. Other ways of sending on request. Validation runs before the filing window and returns errors at the record level.

01Staging environment with synthetic data
02Webhooks for status, protocol and receipt
03Versioned reprocessing and amendments

GET /v1/submissions/sub_01JD8Z6F3Q 200 OK

{
  "id": "sub_01JD8Z6F3Q",
  "obligation": "decripto",
  "period": "2026-11",
  "mode": "replace",
  "records": 184203,
  "validation": {
    "status": "passed",
    "errors": 0,
    "warnings": 3
  },
  "artifact": {
    "files": 1,
    "sha256": "9f2c4be1…e41a"
  },
  "delivery": {
    "channel": "manual",
    "status": "ready_for_download"
  }
}

Security

Regulatory data is sensitive data.

Encryption in transit and at rest
TLS 1.2 or higher on every connection and AES-256 for stored submissions.
Segregation by client
Each client’s data is isolated in the database, with least-privilege access.
LGPD and retention
Legal bases mapped per obligation and a retention policy matching each regulator’s required period.
Digital certificate
Custody of e-CNPJ A1 certificates, isolated per client, for the filings that require a signature.

See your next filing running on Regway.

Already filing DeCripto? Send us last month’s file and we’ll compare it with what Regway generates, with no change to your process.

We reply within one business day.

Prefer email? Write to contato@regway.com.br.

One integration for all your reporting obligations.

Three steps from your database to the filing receipt.

Ingestion

Validation and generation

Delivery

Each obligation with its own layout, frequency and channel.

What the compliance team gains every day.

Obligations calendar

Audit trail

Always-current layouts

Controlled amendments

You send the data. The rest is on us.

Regulatory data is sensitive data.

Encryption in transit and at rest

Segregation by client

LGPD and retention

Digital certificate

See your next filing running on Regway.

Book a demo