Back to Blog | Announcement

VSO Expands VCP Regulatory Submissions to Six Strategic Jurisdictions

Luxembourg, Malta, Lithuania, Poland, Cayman Islands, and Bermuda. 50 jurisdictions, 74 regulatory bodies, $10+ trillion in supervised assets.

January 2, 2026
25 min read
VeritasChain Standards Organization
Language: EN JA ZH
Editorial note (added October 7, 2026). This article was published on January 2, 2026 and is kept as a dated record: versions, dates, figures and regulatory timelines are those of the publication date. Specification versions have changed: the current texts are VCP v1.1 (published) with v1.2 as a Release Candidate, VAP v1.2.0 Draft 3, CAP v1.0 and CPP v1.4. MiFID II RTS 25 (Delegated Regulation (EU) 2017/574), cited here, was replaced on 2 March 2026 by Delegated Regulation (EU) 2025/1155. Statements in this article about legal requirements and about what VSO specifications do were corrected on October 7, 2026. Current status: standardization · VAP and its profiles.
Global Expansion Milestone

VCP regulatory submissions now cover 50 jurisdictions and 74 regulatory bodies, supervising over $10 trillion in assets under management.

Executive Summary

On January 2, 2026, the VeritasChain Standards Organization (VSO) submitted the VCP v1.0 specification to regulatory authorities across six strategically selected jurisdictions:

Luxembourg Luxembourg (CSSF)

€6.1 trillion AUM • Europe's fund gateway

Malta Malta (MFSA & MDIA)

Blockchain Island • Dual-authority advantage

Lithuania Lithuania (Bank of Lithuania)

282 fintechs • Europe's licensing champion

Poland Poland (KNF)

CEE's largest market • WSE hub

Cayman Islands Cayman Islands (CIMA)

30,150 funds • 70% of global hedge funds

Bermuda Bermuda (BMA)

$1.52T insurance • Tamper-proof mandate

The Strategic Imperative

These six jurisdictions were selected based on three criteria:

  1. Regulatory Sophistication: Explicit requirements for algorithmic trading oversight, record-keeping, and emerging AI governance
  2. Market Significance: Financial centers where VCP adoption creates meaningful industry impact
  3. Innovation Receptivity: Established sandbox programs and demonstrated openness to compliance technology

Luxembourg: Europe's €6 Trillion Fund Superpower

The Commission de Surveillance du Secteur Financier (CSSF) supervises the world's second-largest investment fund industry:

  • €6.1 trillion in assets under management
  • 298 authorized fund managers
  • 15 registered Virtual Asset Service Providers

VCP aligns with Luxembourg's MiFID II implementation through RTS 25 clock synchronization support, 7-year retention with cryptographic integrity, and EU AI Act Article 12 logging capabilities.

Malta: The Blockchain Island's Dual-Authority Advantage

Malta's unique regulatory structure combines:

  • MFSA: Traditional financial services and crypto licensing
  • MDIA: Technology certification and AI system oversight under EU AI Act

The MDIA operates a Technology Assurance Sandbox with up to 4-year residency—a potential pathway to official VCP technology certification.

Lithuania: Europe's Fintech Licensing Champion

The Bank of Lithuania has transformed into a fintech powerhouse:

  • 282 active fintech companies
  • €152 billion in annual payment transactions
  • 70% licensing success rate for Newcomer Programme

Lithuania operates LBChain—the world's first blockchain sandbox developed by a financial regulator—and launched a dedicated AI regulatory sandbox in January 2025.

Poland: Central and Eastern Europe's Financial Hub

The Polish Financial Supervision Authority (KNF) oversees:

  • Warsaw Stock Exchange: Largest in CEE with PLN 2.3 trillion market cap
  • 7.9 million cryptocurrency users (20% of population)
  • Three-layer sandbox infrastructure for innovation

Cayman Islands: 70% of Global Hedge Funds

The Cayman Islands Monetary Authority (CIMA) regulates an ecosystem of extraordinary scale:

  • 30,150 registered funds (exceeding 30,000 for first time in 2024)
  • $2 trillion+ in assets under management
  • 70% of global hedge fund market

CIMA's VASP Framework Phase 3 will introduce sandbox licensing for innovative technologies—a structure accommodating VCP as licensed compliance infrastructure.

Bermuda: Explicit Tamper-Proof Requirements

The Bermuda Monetary Authority (BMA) supervises:

  • $1.52 trillion in long-term insurance assets
  • 35% of global reinsurance capital
  • 36 digital asset business licensees

Bermuda's Digital Asset Business Act (DABA) contains language on record integrity (note: VCP provides tamper-evidence, meaning alterations are detectable; it does not make records unchangeable or "tamper-proof"):

"Integrity controls must be in place to ensure that records and audit trails cannot be changed"
"Information stored in an accurate and tamper-proof manner"

Submission Details

Jurisdiction Authority Contact
Luxembourg CSSF innovation@cssf.lu
Malta MFSA fintech@mfsa.mt
Malta MDIA info@mdia.gov.mt
Lithuania Bank of Lithuania sandbox@lb.lt
Poland KNF fintech@knf.gov.pl
Cayman Islands CIMA innovation@cima.ky
Bermuda BMA innovate@bma.bm

What This Means for the Industry

For Algorithmic Trading Firms

VCP has now been sent to 74 regulatory bodies in 50 jurisdictions. A submission is one-way: it does not mean that any regulator has reviewed, recognised or endorsed VCP.

For Fund Administrators

The Cayman Islands and Luxembourg submissions are particularly significant. VCP's efficiency gains—hash-indexed retrieval, cryptographic verification without complete log downloads—directly address operational compliance challenges.

For Regulators

VCP is not a regulatory proposal—it is technical infrastructure supporting existing requirements. We provide tools that help supervised entities meet current obligations more effectively.

Resources

© 2026 VeritasChain Standards Organization. This blog post is licensed under CC BY 4.0 International.

Related Posts

Ready to Explore VCP?

Discover how VCP can bring cryptographic transparency to your trading systems.