Find the control gaps before your examination

Range's forward deployed engineers and compliance specialists test required controls against your real transaction history. In 1 to 4 weeks, your team receives a control-by-control report with evidence and a remediation plan for each gap.

Audit evidence

Show which controls work on the transactions you actually process

A policy describes the intended control. An examination needs evidence that it operated on real data. Range maps the requirements that apply to your business into tests, runs them against your transaction history and shows which controls hold and which need remediation.

Audit scope

Test the controls your operation depends on

The scope is agreed around your obligations, providers and transaction flows. Controls can include:

Docs links describe the underlying controls. The audit scope determines which tests apply to your firm.

Real-data testing

Test the full history in scope

Range tests your transaction history across the agreed accounts, providers and periods. The audit connects the control result to the records behind it.

  • A requirement for each control

    Map each test to the applicable obligation and control requirement.

  • Records across the stack

    Bring bank, wallet, custodian and screening-provider data into the audit.

  • A result for each control

    Identify controls that hold and those that fail on real transactions.

  • Evidence behind the finding

    Retain the source transactions supporting the result.

The deliverable

A report your team can review control by control

The audit produces a reviewable record of the tests, findings and work required to close the gaps.

Requirement and control mapping

See the obligation behind each test and its result.

Supporting transaction evidence

Trace findings back to the real records tested.

A plan for each gap

See the actions needed to address a failing control.

How it works

Run the agreed control audit

Range compliance experts and engineers run the audit with your team.

  1. 01

    Agree the obligations and scope

    Define the applicable requirements, controls, accounts and periods.

    • MiCA CASP
    • EMI
    • PI
    • US MTL
    • UK FCA
    • VASP
  2. 02

    Connect the source records

    Bring your existing provider and transaction data into the audit.

  3. 03

    Test the controls

    Run the agreed tests against the full transaction history in scope.

  4. 04

    Review and remediate

    Receive the report, inspect the evidence and agree the actions for each gap.

Existing systems

Assess the stack your firm already operates

No rip and replace. Range tests your controls through the custody, screening and accounting systems you already run, against the same records your examiners will ask for.

Explore integrations

Onchain risk and screening

Bring your existing provider through your API key.

  • Chainalysis
  • TRM Labs
  • Elliptic
  • Merkle Science
  • Crystal

Identity and business verification

  • Sumsub
  • Persona
  • AiPrise

Custody and wallet platforms

  • Fireblocks
  • Anchorage Digital
  • Utila
  • Safe

The audit team

Run the audit, then keep testing between examinations

Range's forward deployed engineers and compliance specialists run the audit with your team. We connect the tools, test the controls and prepare the report. Your team provides context and reviews the findings.

  • A baseline audit in 1 to 4 weeks

    The timeframe depends on your providers, networks and transaction volume.

  • Findings with a path to closure

    Receive a remediation plan for each control gap. Your team reviews the findings and agrees the actions.

  • Ongoing checks and current evidence

    Keep testing new transaction activity and retest as requirements and laundering patterns change. Retain current control results and supporting records for your next examination.

Audit questions

What compliance teams ask

Every required transaction control across your custodians, wallets, banks, screening providers and networks, tested against the BSA/AML, Travel Rule and MiCA obligations that apply to you.

A report mapping each control to its obligation, recording every result against real data and providing a remediation plan for each gap. Continuous testing keeps the evidence current between examinations.

Start with the one-off audit when you need a baseline before an examination or license application, or after an incident. Continuous testing then runs the same controls on live data and retests as rules and typologies change.

1 to 4 weeks, depending on your networks, providers and transaction volume.

No. Range supplies controls, audit trails, evidence and reporting. Your regulated firm remains responsible for determining and meeting its obligations.

More questions on compliance testing, see the full FAQ.

Case Studies

Simplify stablecoin transfers and improve transparency

“I've had the privilege of collaborating with Range since their early days. Most recently, we worked together on a pioneering project aimed at simplifying and enhancing transparency around USDC cross-chain transfers. Throughout our ongoing collaboration, Range has consistently demonstrated exceptional technical and security-focused expertise.”

John Letey, Director of Engineering at Noble

Noble logo

Security for audit data and evidence

Customer data is isolated and encrypted. Range does not hold your assets or private keys.

Workspace isolation

Screening activity, policies and sensitive workspace data are separated between customers.

Data protection

Range maintains GDPR-aligned processing, access, retention and privacy controls.

SOC 2 Type II audit

Range is undergoing an independent external SOC 2 Type II audit.

Layered security

Encryption, role-based access, least privilege and monitoring protect the platform.

Test the controls your examination will depend on

Bring your obligations, providers and transaction history. Agree the audit scope with our compliance team.