Klavius is a regulatory compliance platform built for Luxembourg AIFMs and ManCos, providing a single connected system for regulatory watch, compliance risk management, and DORA oversight. The platform uses AI to automate regulatory monitoring, risk assessment, and delegate oversight, replacing manual spreadsheets and consultant dependencies with a live, auditable compliance record.
Funding
Funding not disclosed
Founders
Product
Problem
Compliance teams in Luxembourg fund management firms rely on overgrown Excel files, external consultants, and manual monitoring to track regulatory changes and manage risk. Every new CSSF circular or EU regulation lands on the same desk, and the annual DORA register of information becomes a rebuild rather than an extract, leading to late filings and costly resubmissions.
Solution
Klavius provides a single connected platform that runs regulatory oversight across Regulatory Watch, Compliance Risk Management, and DORA operations. The system automatically reads and triages publications from CSSF, ESMA, EUR-Lex, and other sources, scoring their impact on the firm's specific entity. Compliance risk assessments are continuously updated with live control testing, and delegate oversight tracks third-party providers with supporting documentation in one place. The DORA register of information is maintained as a living record throughout the year, so the annual CSSF filing becomes a simple extract rather than a rebuild. AI assists with drafting and risk scoring, while human officers retain sign-off authority on every decision.
Target Audience
Primary customers are Luxembourg-based AIFMs and ManCos, including regulated fund managers and their compliance officers, who need to manage regulatory watch, compliance risk, and DORA obligations in a single auditable system.
Features
- Automated Regulatory Watch that ingests and triages publications from CSSF, ESMA, EUR-Lex, and other EU sources, with impact scoring per entity
- Compliance Risk Assessment module with live control library, residual risk scoring by function, and automated breach surfacing
- DORA module covering ICT third-party readiness, register of information with cross-reference validation, and major-incident clock tracking
- Delegate oversight with provider files, contract tracking, and supporting evidence attached to each delegation
- PostgreSQL row-level security enforcing tenant isolation at the database layer, with an append-only, HMAC-SHA256 signed audit trail for all AI analyses and officer sign-offs
- AI-powered drafting and analysis via Anthropic Claude, with content not used for model training and no advertising or analytics processors receiving compliance data