CIF authorisationCore route
CIF authorisation is the anchor permission SKY7 maps for Cyprus. The work starts by matching the product, client flow and revenue model to the regulator's activity perimeter.
- Lead
- 6–10 mo
- Capital
- €125K — €730K
- Fit
- Primary
SKY7 · CYPRUS PROFILEUpdated · May 2026 · SKY7.LEGAL
CY
ISO 3166-1Republic of CyprusNicosia · GMT +2
- Region
- Europe
- Regulator
- CySEC
- Currency
- EUR
- Working week
- Mon – Fri
- Filing language
- Greek / English
- FATF status
- Compliant
European Union · CIF · MiFID IIAvailable · active scoping
Cyprus. A MiFID investment-firm route for EU brokerage models.
MiFID-oriented EU route for brokerage, investment services, and financial intermediary models. CySEC materials identify Cyprus Investment Firms as requiring prior authorisation for professional investment services under Law 87(I)/2017, which transposes MiFID II. The file is governance-heavy and needs clear services, instruments and capital classification. SKY7 treats the route as a working legal and operational file: permissions, capital, substance, banking and regulator questions are mapped before the filing strategy is fixed.
- Lead time
- 6–10 mo
- Indicative planning window; live regulator queue and client readiness can change it.
- Capital floor
- €125K — €730K
- Indicative planning assumption; final treatment depends on category, volume, safeguards and local interpretation.
- Primary scope
- CIF
- CySEC authorisation for Cyprus Investment Firms under MiFID II / Law 87(I)/2017.
Route overview
What this route is really for
Cyprus should be assessed against the live regulator source, not only a headline licence name.
Cyprus is a financial-services authorisation route in European Union. The working file starts with CIF · MiFID II, CySEC, and the practical evidence a bank, counterparty or supervisor will expect after approval.
CySEC materials identify Cyprus Investment Firms as requiring prior authorisation for professional investment services under Law 87(I)/2017, which transposes MiFID II. The file is governance-heavy and needs clear services, instruments and capital classification.
The route is strongest when the team can explain ownership, source of funds, governance, AML/CFT controls, technology vendors and launch volumes in one consistent story. SKY7 uses the first pass to decide whether Cyprus should be primary, backup or removed from the shortlist.
Best fit
- Operator profileBrokerage, advisory, portfolio-management and investment-service teams that need an EU MiFID perimeter.
- Regulator sourceCySEC authorisation for Cyprus Investment Firms under MiFID II / Law 87(I)/2017.
- TimingUseful when the project can support a 6–10 mo planning window and staged document production.
Watch points
- Core risksClient-money permissions, conduct rules, local governance, board structure, investment services and instruments schedule.
- Capital€125K — €730K is an indicative assumption; the live requirement can change with permissions, volumes and risk profile.
- Sources checkedCySEC investment services law file · CySEC policy statement
Permission map
The file is built around specific permissions
SKY7 separates the headline route from the permissions that actually matter for product launch, banking and investor diligence.
MiFID II investment servicesAdjacent permission
MiFID II investment services is checked against ownership, governance, AML/CFT, capital and banking expectations so the filing tells one consistent story.
- Lead
- 6–10 mo
- Capital
- €125K — €730K
- Fit
- Optional
EU passporting perimeterEvidence layer
SKY7 converts eu passporting perimeter into an evidence pack: application forms, policy set, role map, financial model, local substance and response plan.
- Lead
- 6–10 mo
- Capital
- €125K — €730K
- Fit
- Support
Capital and evidence
Budget the route before the filing starts
The capital number is only one line in the file. Regulators and banks also look for runway, safeguards, governance and credible operating substance.
| Item | Planning range | Working note | Owner |
|---|---|---|---|
| Primary routeCySEC | CIF · MiFID II | CySEC authorisation for Cyprus Investment Firms under MiFID II / Law 87(I)/2017. | SKY7 |
| Paid-up capitalHeadline marker | €125K — €730K | May vary by category, volume, client-money model, risk profile and current local interpretation. | Client |
| Operating runwayBudget evidence | 6–12 mo | A realistic runway supports regulator confidence and bank onboarding. | Client CFO |
| Governance packFit and proper | Role-based | Directors, MLRO/compliance, risk owner, outsourcing owner and escalation lines need to match the model. | Joint |
| Source packResearch | Official sources | CySEC investment services law file · CySEC policy statement | SKY7 |
Planning ranges onlySource check completed 27 May 2026Confirm rulebook and local counsel before filing
Execution timeline
A regulated launch is a sequence of evidence
The 6–10 mo marker is a planning window. The live calendar depends on client readiness, source checks, regulator queue and quality of responses.
- 01Month 0
Source check and route memo
Confirm the live regulator position for Cyprus, the activity perimeter and whether the route should be primary, fallback or avoided.
- 02Month 1
Entity and role map
Confirm ownership, directors, compliance roles, local presence, bank narrative and fit-and-proper evidence.
- 03Month 2
Control architecture
Draft the AML/CFT, risk, safeguarding/client-asset, outsourcing, complaints and technology controls around the actual product.
- 04Mid-file
Application file
Prepare regulator forms, business plan, financial model and supporting evidence for CySEC.
- 05Regulator queue
Questions and evidence
Run a query tracker, refresh documents, collect additional evidence and keep management answers consistent.
- 066–10 mo
Approval and operating handover
Convert the authorisation into reporting calendars, control owners, registers, renewal triggers and banking follow-through.
Substance
The supervisor needs to see an operator, not a shell
Cyprus should be approached with a substance plan that can survive regulator questions and later bank diligence.
Governance
Board and senior management
Define decision rights, reporting lines, committee cadence and escalation routes before the application is filed.
- /Fit-and-proper evidence
- /Board minutes and registers
- /Conflict management
Financial crime controls
AML/CFT and sanctions
Translate customer journeys into onboarding, monitoring, screening, suspicious-activity and recordkeeping procedures.
- /Risk assessment
- /KYC/KYB workflow
- /Monitoring and reporting
Operating presence
People, premises, vendors
Show where the regulated work happens, which vendors are outsourced and how the local team controls critical functions.
- /Local role map
- /Outsourcing register
- /Business continuity
Financial model
Capital and runway
Tie capital, revenue, cost base and transaction assumptions to the actual regulated permissions and first-year operating plan.
- /€125K — €730K
- /12-month forecast
- /Banking narrative
Route comparison
Compare it against nearby routes
The right answer is often a primary route plus a fallback. These comparison cards use the same route-planning fields so the trade-off stays visible.
Cyprus
- Regulator
- CySEC
- Lead
- 6–10 mo
- Capital
- €125K — €730K
Bulgaria
- Regulator
- BNB
- Lead
- 6–9 mo
- Capital
- €125K+
Czech Republic
- Regulator
- ČNB
- Lead
- 5–8 mo
- Capital
- €20K — €125K
Estonia
- Regulator
- FIU Estonia
- Lead
- 3–4 mo
- Capital
- €250K
Comparison uses current route metadata and source-checked profile notes; it is not a legal ranking and should be refreshed before client-facing use.
SKY7 workplan
What SKY7 prepares for Cyprus
The engagement turns route choice into a document set, decision log and handover pack that the client can keep operating after approval.
Source-backed route memo
A decision memo covering CIF · MiFID II, source links, regulator expectations, capital marker, timing and go/no-go issues.
Gap list
A practical checklist of missing documents, owners, approvals and evidence required before drafting starts.
Application architecture
Document map, ownership chart, regulated activity perimeter, compliance role map and filing sequence.
Policy and control pack
Policies and procedures adapted to the product, customers, transaction flow, vendors and technology stack.
Regulator response desk
Query tracker, revised documents, evidence bundles and weekly status notes during review.
Operating calendar
Post-approval obligations, reporting dates, control owners, renewal triggers and banking follow-through.
FAQ
Questions clients ask before choosing Cyprus
These answers keep the pre-filing conversation grounded while SKY7 confirms the live rulebook and the client-specific risk profile.
01Is Cyprus available for new applications?
Available · active scoping. Availability should still be checked at the time of instruction because regulator appetite, category restrictions, queue length and transitional rules can change.
02What official sources did SKY7 check?
CySEC investment services law file: https://www.cysec.gov.cy/el-GR/Files/Various/76183.aspx/ | CySEC policy statement: https://www.cysec.gov.cy/en-GB/entities/investment-firms/cypriot/
03How long does Cyprus usually take?
The indicative planning window is 6–10 mo. A ready file can move faster; weak ownership evidence, unclear source of funds, missing policies or regulator questions can extend the calendar.
04What is the minimum capital?
The current indicative assumption is €125K — €730K. Final capital treatment depends on the exact permissions, activity volume, safeguarding/client-asset model and local interpretation.
05Which activities fit Cyprus?
The current route scope is CIF · MiFID II. SKY7 confirms whether each product feature is regulated, exempt, prohibited or better placed in another jurisdiction.
06Can SKY7 provide a ready-made entity?
Where clean shelf or licensed inventory exists, SKY7 checks history, ownership, filings, bankability and transfer mechanics before recommending a handover.
07Do we need local staff or office space?
Usually some level of real substance is expected. The exact requirement depends on the permission, risk profile and regulator; it is scoped before filing.
08What does SKY7 need to start?
Product description, ownership chart, source-of-funds evidence, management CVs, transaction flows, target countries, vendor stack and any existing policy drafts.
Cyprus desk
Need a source-backed route memo for Cyprus?
Send SKY7 the product model, target customers and launch timing. We will confirm whether Cyprus should be primary, backup or removed from the shortlist.
Desk
Cyprus licensingCySEC · European Union
ResponseOne working day after receiving the product summary.
Bring
Product mapActivities, customers, flows, counterparties and countries.
Current statusNew filing, ready-made acquisition, migration or regulator query.