Enterprise Software Development in Zurich, Switzerland

Insurance / Compliance / Multi-Entity / Multi-Jurisdiction

A Zurich-based insurance group (CHF 12B gross written premium — operating in Switzerland, Germany, Austria, and Liechtenstein, 4,500 employees, regulated by FINMA and BaFin) needed a custom compliance management platform. (1) Regulatory complexity: operating under 4 regulatory regimes — FINMA (Switzerland), BaFin (Germany), FMA (Austria), and FMA (Liechtenstein). Each: each regulator having different reporting requirements, timelines, and formats. Current: compliance managed through 6 separate spreadsheets, 3 document repositories, and email — no single system tracking regulatory obligations across jurisdictions. Risk: missed regulatory deadlines resulting in CHF 1.2M in fines over 3 years — 3 instances of late submissions, 2 instances of incomplete reporting. (2) Multi-entity: 12 legal entities across 4 countries — each with specific regulatory obligations. Inter-company: reinsurance arrangements between entities creating complex reporting — elimination of inter-company transactions for group-level reporting. Consolidation: FINMA requiring consolidated group-level compliance reporting — aggregating from 12 entity-level reports. Each entity: entity-level compliance officers needing their view, group compliance needing the aggregate view, and board needing the executive summary. (3) Sanctions: sanctions screening across all entities — screening customers, counterparties, and reinsurance partners against Swiss, EU, US, and UN sanctions lists. Volume: 2.8 million customers and 15,000 counterparties screened quarterly. Manual: sanctions screening results manually reviewed — 1,200 potential matches requiring investigation per quarter. False positives: 94% of matches being false positives — enormous manual effort for low yield. (4) KYC/AML: Know Your Customer and Anti-Money Laundering across jurisdictions. Swiss: Swiss AML Act (GwG) requirements — customer identification, beneficial ownership, and risk classification. EU: EU AML Directive requirements for German and Austrian operations — different KYC requirements and thresholds. PEP: Politically Exposed Person screening — different PEP definitions across jurisdictions. Risk: customer risk assessment — different risk factors and thresholds per jurisdiction, per product line, and per entity. (5) Reporting: 47 recurring regulatory reports across 4 jurisdictions — each with specific formats, timelines, and approval workflows. SST: Swiss Solvency Test — complex quantitative report requiring actuarial calculations and compliance sign-off. ORSA: Own Risk and Solvency Assessment — qualitative and quantitative risk assessment. BaFin: German regulatory returns — different format from FINMA equivalents. Timeline: regulatory calendars not aligned — submissions due at different times creating continuous compliance workload.

We built a unified compliance management platform over 14 weeks. (1) Regulatory obligation management: tracking every requirement. Obligation register: comprehensive register of 380 regulatory obligations across 4 jurisdictions — each obligation documented with: regulation source, entity applicability, frequency, deadline, responsible person, reviewer, and approval chain. Calendar: regulatory calendar — visual timeline showing all upcoming deadlines across all entities and jurisdictions. Automated: automated reminders — 30-day, 14-day, 7-day, and 2-day reminders to responsible persons and escalation to management for overdue items. Tracking: real-time status tracking — not started, in progress, in review, approved, submitted, and acknowledged. Dashboard: compliance officer dashboard — jurisdiction view, entity view, and timeline view of all obligations. Board: board-level dashboard — compliance health score, overdue items, and risk indicators — supporting FINMA corporate governance requirements. (2) Sanctions screening: automated and intelligent. Integration: daily automatic screening against OFAC (US), EU consolidated, Swiss SECO, and UN sanctions lists — via Dow Jones or World-Check data feed. Matching: fuzzy matching algorithm — handling name variations, transliterations, and partial matches. Scoring: risk scoring on matches — true match probability based on name similarity, date of birth match, nationality, and other identifiers. Automation: matches below 30% probability auto-dismissed (documented). Matches above 70% flagged as high-priority. Middle range (30-70%) queued for analyst review. Workflow: investigation workflow — analyst reviewing match, documenting decision (true match or false positive), and escalating confirmed matches to compliance officer. Volume: 2.8M customers screened — processing in 4 hours (overnight batch) with results available for morning review. (3) KYC/AML: unified customer due diligence. Per-jurisdiction: KYC requirements configured per jurisdiction — Swiss GwG, EU AMLD, and country-specific requirements. Risk: customer risk assessment — 15 risk factors (product type, geography, customer type, transaction pattern, PEP status, etc.) with jurisdiction-specific weighting. Automation: low-risk customers auto-classified with periodic review. Medium and high-risk requiring enhanced due diligence. Documentation: complete KYC documentation stored with customer record — ID verification, beneficial ownership, source of wealth, and risk assessment. Renewal: automated KYC renewal scheduling — risk-based review frequency (annual for high-risk, triennial for low-risk). Reporting: suspicious activity reporting — SAR/STR generation per jurisdiction format (MROS for Switzerland, FIU for Germany). (4) Regulatory reporting: automated compilation. Templates: report templates configured for each jurisdiction — FINMA SST, FINMA annual report, BaFin quarterly returns, and entity-specific reports. Data: automated data collection from source systems — policy administration, claims, finance, and investment — feeding into report templates. Calculation: automated calculations — SST capital requirements, technical provisions, and key ratios calculated from source data. Workflow: review and approval workflow — preparer, reviewer, approver chain with documented sign-off and audit trail. Submission: report submission tracking — submission date, acknowledgement, and any regulatory feedback recorded. Multi-entity: consolidation logic — group-level reports automatically aggregating entity-level data with inter-company elimination. (5) Audit and governance: complete compliance evidence. Audit trail: every action in the system logged — who did what, when, and what data was accessed or changed. Evidence: compliance evidence package — for each regulatory examination, the system generating a complete evidence package showing obligation tracking, screening results, KYC status, and reporting compliance. FINMA: FINMA examination readiness — all compliance data accessible, searchable, and exportable for regulatory examination. Board: quarterly compliance report auto-generated — compliance score, significant findings, regulatory changes, and remediation status.

Results over 12 months. Obligations: 380 regulatory obligations tracked — zero missed deadlines in 12 months (from 5 missed deadlines in prior 3 years). Fines: CHF 0 in regulatory fines (from CHF 1.2M over prior 3 years — estimated CHF 400K/year avoidance). FINMA: FINMA examination — examiner specifically commending the compliance platform as "exemplary" — first positive technology comment in the group's examination history. Sanctions: screening processing from 3 days (manual) to 4 hours (automated overnight). False positives: auto-dismissal of low-probability matches reducing analyst workload by 72% — from 1,200 manual reviews to 336 per quarter. True matches: 4 genuine sanctions matches identified in 12 months — all detected and escalated same-day. KYC: customer risk assessment from 45 minutes (manual) to 8 minutes (system-assisted) — 82% reduction. Renewal: KYC renewal compliance from 78% on-time to 99% on-time — automated scheduling eliminating missed renewals. Quality: KYC data completeness from 72% to 96% — system enforcing required fields and validation rules. Reporting: report preparation time reduced 65% across all 47 reports — automated data collection and calculation. SST: Swiss Solvency Test preparation from 6 weeks to 2 weeks — automated data aggregation and calculation. Error: reporting errors from average 4 per quarter to 0.3 per quarter — automated calculations eliminating manual errors. Staff: compliance team efficiency — 3 compliance analyst positions redeployed from routine processing to risk analysis and advisory (higher-value work). No redundancies. Board: board receiving real-time compliance dashboard — previously receiving quarterly static reports. Regulatory change: regulatory change management — new obligations added to the system within 48 hours of regulatory publication, with impact assessment and implementation plan auto-generated. Financial: annual value — fine avoidance CHF 400K (estimated), staff redeployment CHF 360K, reporting efficiency CHF 280K, screening efficiency CHF 240K, and examination preparation CHF 150K. Total annual value: CHF 1.43M. Development: CHF 680,000 (14-week project). Annual operation: CHF 120,000 (hosting, data feeds, and maintenance). ROI: 2.1x first-year return (modest but growing — compliance value compounds as the system accumulates history and institutional knowledge). Strategic: the compliance platform becoming a competitive advantage — faster market entry into new jurisdictions, faster product launches (compliance pre-assessed), and improved regulatory relationship.