Pillar 04 · Compliance & Governance

Corporate Compliance & Governance in Uzbekistan

Two things keep a regulated company out of trouble: how well it follows the rules, and who controls it. We run both — the ongoing compliance function that keeps you clean as regulation shifts, and the governance that keeps owners in control.

Most firms draft you a policy and a charter and leave. We've operated the function those documents describe — inside licensed institutions, through actual inspections — so what we build is made to run, not to file.

Financial regulation in Uzbekistan
2
financial-institution restructurings — governance & compliance built to operate.

The basics, plainly

Compliance & governance,
defined plainly.

Two functions, one system — what regulators inspect, and what keeps owners in control while they do.

DefinitionCorporate compliance

Corporate compliance is the standing function that keeps a licensed company aligned with its regulator over time — the controls, policies, regulatory-change management, and reporting that turn a one-time approval into ongoing good standing. It is examined mainly through regulator inspections, so it has to work in operation, not only on paper.

DefinitionCorporate governance

Corporate governance is the structure of control — the boards and corporate bodies, charters, shareholder agreements, reserved matters, and fit-and-proper requirements that decide who makes which decisions. For a licensed financial institution, governance is also a regulatory condition: the regulator checks that control sits where the rules require and that key people clear fit-and-proper standards.

DistinctionOne system, not two silos

The two work together. Compliance keeps you clean against rules that move; governance keeps owners in control while satisfying the regulator that control is held by people it accepts. Run separately, they leave gaps an inspection finds. We run them as one.

Why us, specifically

Built to run
through inspections.

We've operated compliance and governance inside licensed institutions — so we know what an inspection actually tests, not just what the statute lists.

01 · Current

Compliance that keeps up.

Regulation here moves constantly. We build the controls, policies, reporting, and change-management that keep you compliant as it does — and stand with you in inspections, not just before them.

02 · Operated

We've run it, not just drafted it.

We've built compliance functions inside licensed institutions — programs, controls, and the people to operate them — not just a binder of policies. We know which controls an inspection actually tests.

03 · Control

Governance that keeps you in control.

Boards, charters, shareholder agreements, reserved matters, fit-and-proper — structured so owners stay in control and the regulator stays satisfied at the same time.

What we run
·Compliance program & policies ·Internal controls ·Regulatory-change management ·Regulatory reporting ·Inspections & regulator liaison ·Internal investigations ·Boards & corporate bodies ·Shareholder agreements & control ·Fit & proper / related-party

For a licensed institution, compliance isn't a document you finish — it's a function you run. It needs internal controls that match the product, policies that stay current as the rules change, regulatory reporting that goes out on time, and someone who can stand in front of an inspection and answer for it. Regulation in Uzbekistan moves often enough that change-management is itself a control: a program that was compliant last year can quietly fall out of line. We build the function and keep it current — alongside your licensing path and your AML/CFT program.

Inspections are where compliance is actually tested. The regulator looks past the policy binder to whether the controls run, the reporting reconciles, and the people know the program. We've operated that function from the inside, so we prepare you for how inspections actually run — and stand with you through them, including internal investigations and regulator liaison when something needs explaining. That operational layer sits on top of the AML controls every licensed institution already carries.

Governance is the other half — who controls the company and how decisions get made. Boards and corporate bodies composed the way the rules require, charters and shareholder agreements that hold under pressure, reserved matters that keep owners in control, and fit-and-proper and related-party rules satisfied. For a licensed institution governance is also a supervisory condition, so we structure it to satisfy the regulator and protect the owners at once — aligned with your entry and deal structure and the product you operate.

Business handshake — M&A deal in Uzbekistan
Compliance that runs

From the policy
to the inspection room.

Questions, answered

Concrete, not "it depends."

Compliance structure, governance bodies, data protection, related-party rules, and enforcement — answered directly.

As a standing function, not a document. A licensed institution needs internal controls matched to its product, current policies, regulatory reporting, a compliance officer who can operate, and change-management to keep pace as rules shift. The exact bodies and lines depend on the license and sector. We've built these inside licensed institutions and structure yours to run.
It depends on the entity and license — typically a general meeting of shareholders, a supervisory or management board, and an executive body, with composition and independence requirements that tighten for licensed financial institutions. Fit-and-proper standards apply to key roles. We map the required bodies for your license and structure them so owners keep control.
Foreign directors are generally permitted, but licensed financial institutions carry residency, presence, and fit-and-proper expectations for key management that pure holding companies don't. Running a regulated board entirely from abroad rarely satisfies a financial regulator. We structure board and management so the regulator is satisfied and you keep operational control.
Financial institutions handle personal and financial data under Uzbekistan's data-protection rules, including obligations around how customer data is processed, secured, and — for some data — stored. The requirements interact with AML recordkeeping and, for fintechs, with localization rules. We align data-protection, AML, and product so they don't contradict each other.
They carry heightened approval and disclosure requirements — large transactions and related-party (interested-party) transactions typically need board or shareholder approval and proper disclosure, with stricter treatment for licensed institutions. Getting the approval chain wrong can void the deal or draw a regulator finding. We build the approval and disclosure process into governance up front.
Licensed institutions are expected to run conflict-of-interest controls, related-party rules, and anti-bribery and anti-corruption policies as part of the compliance function — and to evidence that they operate. These overlap with AML and governance. We build the policies and the controls that show they're real, since an inspection checks operation, not just existence.
A range — from corrective orders and administrative fines to restrictions on activity and, in serious cases, license consequences. For governance failures the practical cost is often a voided transaction or a control finding. The pattern matters more than any single figure: findings compound across an inspection. We build to avoid the finding, not just survive it.
Largely through regulator inspections — and we know how they run. Enforcement here is less about a published penalty schedule and more about what an inspection finds: whether controls operate, reporting reconciles, and governance sits where it should. We've been through them from the inside, so we prepare you for how they actually run, not how the statute reads.

No memo. A map.

Tell us what you're licensed for — we'll build the compliance function that keeps you clean and the governance that keeps you in control.

You leave knowing what the function needs, what the regulator will test on inspection, and what to fix first.

The proof

2 financial-institution
restructurings.

Governance & compliance built for 20+ companies structured from scratch.

2
Financial-institution restructurings — governance & compliance built for 20+ companies structured from scratch.
Restructurings
2 institutions
From scratch
20+ companies
Scope
Compliance · governance