Software
Selection and implementation of new software systems
Syngeon supports you in the selection and introduction of modern software systems that optimise your business processes and increase your efficiency.
Implementation of digitisation projects
We support your company in its digital transformation, from strategy development to the implementation of customised solutions.
Realisation of AI concepts
With innovative AI solutions, Syngeon helps you to automate business processes, fulfil customer needs and make data-driven decisions.
Software solutions
Digitalisation and
AI in the financial sector
AI in the banking and finance sector: Our perspective at Syngeon
The evolution of digital customer experiences in other industries has led to continuously rising customer expectations in the banking sector as well. Today’s customers are accustomed to the advantages of digitalisation and expect comparable standards from their banks. To meet these evolving demands,
financial service providers must transform into hybrid banks. This shift unlocks significant growth potential, enhances efficiency, and reduces costs.
At Syngeon, we recognize the exponential advancement of artificial intelligence (AI) as a key driver in establishing new benchmarks within the banking and financial sector, while also enabling efficient compliance with increasing regulatory requirements. AI empowers us to strengthen customer loyalty through exceptional service and to automate compliance processes, thereby increasing both reliability and efficiency.
Strategic use of AI for sustainable success
In a constantly changing regulatory environment, banks and financial service providers are increasingly required to remain compliant without losing their competitiveness. At Syngeon, we are convinced that the strategic integration of AI, such as through the use of chatbots and RegTech solutions, is crucial in order to fully exploit optimisation and innovation potential while ensuring compliance with legal requirements.
Compliance and automation: efficiency through AI
Compliance departments are faced with the challenge of managing a variety of complex tasks, from IT security and sanctions screening to ESG requirements. Traditionally, these requirements lead to an increase in bureaucracy and rising costs. Our AI solutions offer a way to automate recurring and time-consuming tasks. This allows employees to focus on critical areas while AI processes large amounts of data in real time to identify compliance risks faster and more accurately. One example of this is AI-supported sanction screening, where systems automatically flag conspicuous transactions and inform employees for further review.
Challenges and transparency in the use of AI
Despite the many advantages, the use of AI also brings challenges, such as a lack of expertise and a lack of transparency in so-called ‘black box’ processes. At Syngeon, we rely on state-of-the-art algorithms that make it possible to open these ‘black boxes’ and thus ensure explainability and transparency. This approach not only helps to fulfil regulatory requirements, but also strengthens trust in AI-based systems.
AI Regulation: Framework conditions for the use of AI in the financial sector
The European AI Regulation (AI Regulation) further specifies the legal framework for the use of artificial intelligence in the financial sector. The AI Regulation is intended to ensure that AI systems are used transparently, safely and fairly. It places special requirements on high-risk AI applications, which include many systems in the financial sector. At Syngeon, we take these developments very seriously and design our AI solutions in such a way that they not only comply with current legal requirements, but are also future-proof. Our technologies enable financial service providers to fulfil the new regulatory requirements while taking full advantage of AI without jeopardising compliance.
Risk levels for AI systems according to the EU AI Act
Unacceptable risk
AI systems that are prohibited (AI systems to exploit user vulnerabilities / social rating systems by authorities / manipulative AI systems that exploit human behaviour)
-> These systems are prohibited under Art. 5 of the AI Regulation.
High risk
AI systems with strict requirements (AI-based credit rating systems, AI systems for controlling critical infrastructure, e.g. water, gas, electricity and heat supply / AI in personnel management for analysing and evaluating applicants / Biometric identification and categorisation systems / AI safety components in medical devices, lifts and vehicles-> Subject to comprehensive regulation and far-reaching obligations in accordance with Art. 6 to 51
Limited risk
Limited risk: AI systems with transparency obligations (AI systems for interaction with customers that are subject to transparency obligations / chatbots e.g. for customer service / emotion recognition systems / biometric categorisation systems)
-> According to AI Regulation Art. 52, these are subject to transparency obligations
Minimal or no risk
Minimal or no risk: AI systems without restrictions (spam filters / AI-powered optical character recognition solutions for invoice data extraction / AI-powered video games / inventory management systems / recommendation systems / predictive maintenance systems for machines
-> Do not fall within the scope of the AI Regulation and are not subject to restrictions
Regulatory Radar
Our proximity to European institutions allows us direct contact and early insight into legal requirements and developments. This enables us to analyse regulatory requirements for financial service providers, derive implications and develop efficient solutions.
Current developments
FiDAR Financial Data Access Regulation
The design of the Financial Data Access Regulation (FiDAR) is currently in the final negotiation phase between the EU institutions:
- Status of the negotiations: After the EU Council determined its negotiating position in December 2024, negotiations between the Commission, Parliament and Council have been ongoing since April 2025. Points of contention include the scope of data categories, security requirements and the design of the customer dashboard.
- Adoption: The ordinance is expected to be adopted this year, with an implementation phase starting in 2027 (24-month transition period after entry into force).
Aims of FiDAR
FiDAR serves to create a standardised legal framework for the exchange of financial data between banks, insurance companies and other financial service providers in the EU. It extends the scope of open banking to open finance and enables authorised third-party providers to access customers’ financial data in order to offer innovative and personalised services. This enables the exchange not only of payment account data, but also of other financial data such as mortgages, loans, investments and insurance products.
- More innovative financial products: Promoting highly personalised services through better data exchange.
- Increasing competition: improving access to finance for consumers and SMEs.
- Data protection and security: Strict security standards to protect customer privacy.
Regulatory requirements
- Data is exchanged between three players:
- Customers: Natural or legal persons who use financial services.
- Data controller: Financial institutions such as banks or insurance companies.
- Data users: Organisations that are granted access to customers’ data with their consent.
- The use of the data requires authorisation as a financial information service provider and requires the consent of the customer. In addition, regulations such as the GDPR must be complied with.
Realisation
National authorities are authorised to monitor and sanction violations of FiDAR. Financial service providers must be compliant within 18 to 24 months of the regulation coming into force. In order to fulfil the new market requirements, comprehensive preparations are required immediately, which are divided into one-off measures to establish compliance and ongoing tasks to maintain this compliance.
MiFID III
There are currently several important developments regarding MiFID III and the associated changes. Here are the key points:
Timetable and entry into force:
The amendments to MiFID III are to be fully implemented by the end of September 2025. The MiFIR amendments have already come into force, which means that financial institutions must start implementing them in order to meet the deadlines.
Main objectives of the reform:
The key objectives include improved transparency on the capital markets, the introduction of a consolidated tape provider (CTP) and greater harmonisation of market structures. In addition, the availability of market data will be improved in order to promote a level playing field between trading centres.
New requirements:
The reform entails extended reporting obligations and transparency requirements. These include adjustments in the areas of investor protection (e.g. through the Retail Investor Strategy) and technical standards (RTS and ITS), which financial institutions must integrate into their processes and IT systems.
Connection with other regulations:
MiFID III is closely linked to other regulatory frameworks such as EMIR REFIT, SFTR and PRIIPS. This harmonisation is intended to enable more consistent data reporting to ESMA.
The reforms require extensive preparations on the part of financial institutions, particularly with regard to IT infrastructure, processes and compliance.
Fund Risk Limitation Act (FoRG) and Amendments to the KAGB
Explanation and background
The Fund Limitation Risk Act (FoRG) constitutes a legislative initiative to transpose the European requirements set out in the Alternative Investment Fund Managers Directive II (AIFMD II) into German law, primarily through amendments to the German Capital Investment Code (Kapitalanlagegesetzbuch – KAGB).
The FoRG has been developed to introduce new regulatory standards governing the extension of credit by Alternative Investment Funds (AIFs), to enhance transparency and reporting obligations applicable to capital management companies (KVGs), and to strengthen the regulatory framework for outsourcing arrangements and risk management practices. It represents the second legislative effort to implement the EU-wide harmonized provisions of AIFMD II within the KAGB, with the current draft aligning more closely with the precise wording of the directive.
Timeline and implementation
The Fund Risk Limitation Act (FoRG) was published in October 2025 and mandates the implementation of the new regulations into national law by no later than April 2026. Capital management companies must accordingly adjust their sales documents and investment terms to comply with these changes.
Objectives
The main objectives of the Fund Risk Limitation Act (FoRG) are to limit the risks that can arise from investment funds, strengthen Germany’s financial center, and prevent systemic risks through new liquidity management tools. At the same time, the law aims to maintain the competitiveness of German fund managers through harmonization with EU regulations despite stricter requirements. Additionally, the legislation seeks to create more uniform competitive conditions compared to other EU member states.
Opportunities and risks
Opportunities
- Creation of clear and uniform legal frameworks for AIFs in Germany.
- Increased transparency and improved risk monitoring in investment funds.
- Enhanced liquidity management to stabilize the financial market.
- Harmonization of regulations within the EU, strengthening competition
- Clarification of long-term legal uncertainties, particularly regarding loan issuance by AIFs
Risks
- Increased administrative burden and costs for fund management companies due to expanded reporting obligations and stricter outsourcing requirements.
- Pressure to adapt, particularly for registered and open funds.
- Potential restrictions on flexibility in loan origination due to new limits and prohibitions.
Transitional risks and uncertainties in practical implementation, especially concerning the calculation of thresholds based on market values instead of HGB valuation, which may lead to more volatile classifications
NIS-2: Redefining Cybersicherheit in Europe
Explanation and background
The NIS-2 Directive is a key component of the European cybersecurity strategy. It aims to significantly increase the resilience of businesses and public institutions to digital threats and to establish uniform security standards across Europe.
The original NIS Directive (Network and Information Security) was introduced in 2016 to establish an initial common framework for IT security within the EU. In light of increasing cyberattacks and growing digitalization, the directive was further developed in 2023, resulting in NIS 2. This new version expands both the scope of application and the requirements for security measures and reporting obligations. A significantly larger number of sectors will be affected in the future, including energy, transportation, healthcare, public administration, and digital service providers.
Timeline and implementation
The NIS2 Directive came into force at the European level in January 2023. The original deadline for implementing the directive in Germany was October 17, 2024. Germany missed this deadline and is still in the process of transposing the directive into national law. A draft bill for the so-called NIS2 Implementation Act (NIS2UmsuCG) has been presented and was adopted by the Bundestag on November 13, 2025. The law is expected to enter into force at the end of 2025 or the beginning of 2026. Consequently, the new implementation date for the NIS2 Directive in Germany is expected to be the end of 2025.
There is no transitional period until the law enters into force – once it takes effect, the obligations will apply immediately.
Objectives
NIS2 aims to strengthen the overall cybersecurity posture within the EU by:
- Increasing the resilience of critical and important entities against cyberattacks.
- Establishing uniform security requirements across all EU Member States.
- Improving cooperation and information sharing between companies and public authorities.
- Enabling the early detection and reporting of serious security incidents.
Conclusion
NIS2 represents an important step toward a more secure and resilient digital Europe. Those who take action early not only meet legal requirements but also strengthen the trust of customers and partners.
New Anti-Money Laundering Regulation (AMLR)
Explanation and background
The new Anti-Money Laundering Regulation carries the official title “Regulation (EU) 2024/1624 of the European Parliament and of the Council of 31 May 2024 on the obligations of the private sector to combat money laundering” (EU Anti-Money Laundering Regulation). It is part of a comprehensive EU anti-money laundering package, which also includes Regulation (EU) 2024/1620 establishing the European Anti-Money Laundering Authority (AMLA) and the 6th EU Anti-Money Laundering Directive (AMLD 6). This regulation replaces existing directives and creates a uniform, directly applicable legal framework across all member states to harmonize the previously partly inconsistent implementation of national laws. The regulation introduces EU-wide consistent rules that apply directly without requiring transposition into national law, aiming to close gaps in previous frameworks and adapt to new risks such as cryptocurrencies and cross-border financial flows.
Timeline and implementation
The new EU Anti-Money Laundering Regulation (EU AMLR, Regulation (EU) 2024/1624) was adopted by the European Parliament on May 31, 2024. It was published in the Official Journal of the EU on June 19, 2024. The regulation formally came into force on July 9, 2024, that is, 20 days after publication, but with a transitional period until July 10, 2027. From that date, it will apply directly in all EU member states and largely replace the previous national anti-money laundering laws, for example in Germany.
This introduced a three-year transition period during which companies and authorities can prepare for the new regulations and implement necessary adjustments. The transition period ends with the start of the full application of the regulation on July 10, 2027.
In 2025, there were important current developments regarding the new EU Anti-Money Laundering Regulation that are relevant for implementation and practice.
Key Points of Developments in 2025:
- The Anti-Money Laundering Authority (AMLA), based in Frankfurt, was established and began its operations in 2025. It will take on a central supervisory and coordinating role, aiming to ensure uniform standards across all EU member states and to enhance the effectiveness of anti-money laundering efforts. AMLA can also impose administrative measures and fines.
• Currently, the level of control is increasing significantly, particularly with stricter monitoring and sanctions for violations. In 2025, substantial fines were already imposed on financial institutions.
• New are stricter requirements for the transparency of beneficial owners, extended monitoring obligations, and the introduction of IT systems for better information exchange between supervisory authorities.
• • In addition, there is a new delegated regulation (2025/1393) for reviewing third countries with a high risk of money laundering and a cash limit of 10,000 euros for commercial transactions in the regulation, which specifically increases controls on goods traders.
Objectives
The regulation pursues several overarching goals:
- Establish uniform and binding rules for all EU Member States.
- Close loopholes arising from nationally differing implementations.
- Increase the transparency of financial flows and beneficial owners.
- Improve the exchange of information between supervisory authorities and obliged entities.
- Promote a more risk-based approach to combating money laundering and terrorist financing.
This shifts the focus more strongly towards the effective prevention of financial crimes, while at the same time increasing legal certainty for companies.
Conclusion
The new anti-money laundering regulation marks a turning point in European regulatory practice. By creating a uniform EU framework, clear guidelines, and centralized supervision, the fight against money laundering becomes more efficient and transparent. For financial institutions, this means acting promptly, adjusting internal processes, and updating training.
Corporate Sustainability Reporting Directive (CSRD)
Explanation and background
Since 2023, the Corporate Sustainability Reporting Directive (CSRD) has brought significant changes to sustainability reporting for large companies in the EU, which will also be relevant in Germany in the coming years. The CSRD replaces the previous Non-Financial Reporting Directive (NFRD) and significantly expands reporting obligations. The aim is to create binding and comparable standards for sustainability-related corporate reporting across Europe. In the future, this will affect up to 15,000 companies in Germany alone, including publicly listed companies as well as large non-listed companies with 250 or more employees and certain revenue and balance sheet thresholds. The reporting obligation is based on detailed EU standards (ESRS) and is intended to increase transparency for investors and stakeholders.
Timeline and implementation
Current status: On April 16, 2025, the European legislator adopted the “Stop-the-Clock” Directive (EU 2025/794), which extends the original schedule for reporting obligations. For companies in the second and third wave, this means that the obligation to report on sustainability now only applies from the 2027 financial year, with the first report due in 2028. For large companies in the first wave, the original deadline of 2024/2025 remains in place.
In Germany, the implementation of this regulation is still in progress. The federal legislator plans to adjust the national CSRD law accordingly in order to align the deadlines with the EU directive. The final version of the law is expected to be passed by the end of 2025, so that companies can be prepared for the new reporting requirements in time.
The consequences are staggered reporting obligations:
- From 2025: Large publicly listed companies with more than 1,000 employees are required to report for the first time.
- From 2027: Extension to large companies with 501 to 1,000 employees as well as other large companies, regardless of public listing.
- From 2028: Reporting obligation for publicly listed SMEs, with a transitional period for implementation.
For practical implementation, it is advisable to start early with data collection, the development of a sustainable reporting system, and preparation for the standards (ESRS). Companies should also keep an eye on developments in legislation and current relief measures to efficiently meet the requirements in the coming years.
Objectives
The CSRD aims to make sustainability in corporate reporting mandatory and transparent. It is intended to help strengthen companies’ ecological and social responsibility, better inform investors, and promote sustainable investments. The integration of sustainability aspects into business decisions and reports is at the core of the EU’s strategy for sustainable business.
Conclusion
The CSRD presents major challenges for German companies, but at the same time offers opportunities for a sustainable transformation. Companies should use the phased introduction starting in 2025 to strengthen their sustainability management and report in a compliance-secure manner at an early stage. The coming years are crucial for adapting digital and organizational systems and implementing the new reporting requirements efficiently. The simplification efforts of the European Commission aim to increase practical applicability without diluting the requirements. Companies of all sizes should therefore now engage comprehensively with the requirements of the CSRD to remain competitive and transparent.
Our partners
