FCA Safeguarding Regime: New Document Requirements for UK Payment Firms from May 2026 | Arhivix

FCA Safeguarding Regime: New Document Requirements for UK Payment Firms from May 2026

FCA Safeguarding Regime: New Document Requirements for UK Payment Firms from May 2026

New FCA Safeguarding Rules for Payment Firms

Effective May 7, 2026, the FCA's Supplementary Safeguarding Regime applies to all UK payment institutions and e-money firms. With e-money institutions safeguarding approximately 26 billion GBP of consumer funds (up from 11 billion GBP in 2021), the FCA is imposing significantly enhanced record-keeping requirements.

Key Document Requirements

  • Instant-access records — firms must maintain records that distinguish safeguarded funds from operational funds at any time and without delay
  • Monthly regulatory returns — a new FCA return must be submitted monthly with safeguarding position data
  • Enhanced reconciliation records — daily reconciliation between internal records and bank statements must be documented
  • Governance documentation — board-level oversight of safeguarding must be evidenced in meeting minutes and policies

NHS Digital Technology Assessment Criteria

The UK Data Use and Access Act 2025 gives statutory backing to the NHS DTAC (Digital Technology Assessment Criteria). Any digital health technology must now pass five mandatory criteria: Data Protection, Clinical Safety, Technical Security, Interoperability, and Usability. The NHS Cyber Assessment Framework aligned with the NCSC is being rolled out to all NHS suppliers by 2026-27.

US B2G E-Invoicing via IPP

In the US, federal agencies require electronic invoice submission via the Treasury Invoice Processing Platform (IPP). The Digital Business Networks Alliance (DBNAlliance) is building voluntary B2B e-invoicing infrastructure following the Peppol model. IRS electronic recordkeeping rules require indexing, integrity controls, and prompt retrieval, with records retained 3-7 years depending on tax scenario.

How Arhivix Helps

Arhivix delivers the instant-access, audit-ready document management that the FCA Safeguarding Regime demands. All records are encrypted with AES-256 and stored on AWS S3 infrastructure, ensuring safeguarding documentation is available without delay for FCA inspections. The comprehensive Arhivix audit trail provides the reconciliation evidence and governance documentation trail that both the FCA and NHS DTAC require.