Gebruik jij AI-tools in je bedrijfsvoering?

Veel MKB-bedrijven gebruiken AI-tools zoals ChatGPT zonder formeel beleid. Vanaf augustus 2026 gelden AI Act-verplichtingen voor alle organisaties die AI-tools gebruiken.

Does your organisation fall under NIS2?

The Dutch Cybersecurity Act (NIS2 implementation) takes effect on 15 August 2026, with no transition period. Organisations in critical sectors must comply from day one.

Wat kost een outsourced compliance officer?

CompliAdvice biedt retainerpakketten vanaf €450 per maand voor MKB-bedrijven die compliance willen uitbesteden zonder de kosten van een fulltime medewerker.

Compliance as a Service — for SMEs and financial institutions

You do
business.
We do compliance.

Started on the trading floor. Moved into compliance — not because I had to, but because I saw where it goes wrong when you follow rules without understanding the market.

Growing market: Compliance as a Service is projected to reach $19.5 billion by 2030. Compliance is no longer a back-office function — it is a board-level priority.

Schedule a call ↗ Does this apply to you?

30+ years experience

30+

Years Experience

100%

Independent

CAMS

Certified Anti-Money Laundering Specialist

DSI

Dutch Securities Institute

FSA

Financial Services Authority

Series 7

General Securities Representative

New to this?

What is compliance, anyway?

Compliance simply means that your business demonstrably follows the rules that apply to you. No more, no less. The problem is that nobody tells you which rules those are. A staffing agency faces different laws than an IT company or a mortgage adviser. Some rules apply to everyone, others only above a certain turnover or with certain clients.

That is why you suddenly hear about it everywhere: on LinkedIn, from your bank, from your accountant. The rules are getting stricter and regulators are inspecting more often, including smaller businesses. Those who have not sorted it out find out at the worst possible moment: during an inspection, an incident, or when a major client demands guarantees.

The good news: for most SMEs, compliance is perfectly manageable, as long as you know where to start. Further down this page you will find our free scans, which show you in five minutes which obligations apply to your business and where you are exposed today.

Go to the free scans ↓

Free online scans

Know where you stand within five minutes

No intake, no strings attached. Our online scans give you an immediate, professional picture of your obligations and risks — using the same analytical framework we apply in client engagements.

Laws & regulations

SME Compliance Quickscan

Not every law applies to every business. Find out which obligations apply to your company — from AML and GDPR to NIS2 — and where you are exposed today.

3–5 minutes
Instant results
Free

Start the Quickscan

Cyber resilience

Cyber Risk Scan

Eleven focused questions on incident response, NIS2 readiness and security basics. See how your organisation scores per domain and what the first logical step is.

11 questions
Score per domain
Free

Start the Cyber Risk Scan

Your answers are only used for your results. Prefer an on-site deep dive including a report? See the NIS2 Quickscan under Services.

Limited offer — Cybersecurity Act in force as of 15 August 2026

NIS2 Quickscan

Does the Dutch Cybersecurity Act apply to you? Half a day of analysis gives you a direct answer and a concrete list of priorities.

€ 750 – 1.500

One-off — half day incl. report

Request now

What we do

Services

From a dedicated compliance partner for SMEs to senior interim assignments at major financial institutions — and everything in between.

Outsourced Compliance

Your dedicated compliance partner on a retainer basis. Just as you have an accountant or lawyer — always available, always up to date, without the cost of a full-time hire.

RetainerSMEAFM

Interim Compliance Officer

Temporary but fully embedded. We step into the role, work alongside your team and keep things running — without months of searching for a permanent candidate.

PensionsBanksDORA

Compliance Training

Compliance only works when people understand and feel it. We deliver tailored training — from AML awareness and integrity to NIS2 and the AI Act.

BespokeOn-siteOnline

Retainer packages — fixed monthly fee, no surprises

Basic

€ 450 / month

For organisations that simply want compliance taken care of.

Quarterly meeting (1 hour) — status update
Available by email for short questions
Monitoring of relevant regulatory changes
Annual quick scan (half day)

Max. 2 hours contact per month. Additional work € 175/hr. Min. duration 6 months.

Our Approach

No standard intake forms or weeks of onboarding. We get up to speed quickly and start with what matters.

Intake & assessment

Where do you stand? Which regulations apply, what is already in place and where are the gaps. No assumptions — just an honest look at what is there.

Setting priorities

Not everything at once. Based on the assessment we determine together what carries the most risk. That becomes the roadmap.

Policy & documentation

Getting the basics right — procedures, registers, policy documents. No more than necessary, but complete and verifiable.

Implementation & training

Policy only works when people know it. Training staff on what it means for their day-to-day work.

Monitoring & reporting

Compliance is not a one-off project. Periodic checks, tracking regulatory changes and reporting to management.

Audit readiness

Always prepared when the supervisor comes calling — no panic, but a file that demonstrates you are in control.

Where we operate

Sectors

Some sectors know they need compliance. Others have not yet realised it. We know both.

Asset Management & Pensions

Wtp transition, MiFID II, fiduciary management, SFTR. Deep knowledge of the regulatory pressure on asset managers and pension funds.

Wft · MiFID II · Wtp · SFTR · DORA

Mortgage Advisers & Financial Planners

Thousands of small AFM-licensed firms. Tightened supervisory guidelines raise the bar directly. No budget for an in-house CO.

Wft · Wwft · AFM · AVG

Fintech & Payment Institutions

High regulatory pressure, limited internal compliance capacity. DNB/AFM supervision from day one. DORA and MiCA hit them directly.

PSD2/3 · DORA · MiCA · Wwft

IT Service Providers & MSPs

Classified directly under NIS2 as essential entities. Smaller IT firms are impacted through supply chain responsibility.

NIS2 · AVG · DORA

⚡ Urgent Q2 2026

Staffing & Recruitment Agencies

From 1 January 2027, you may only supply temporary staff with an authorisation under the Wtta. It is that simple. The registration window for the transitional scheme runs from 1 November to 31 December 2026, and it requires an SNA certificate. Obtaining that certification takes months, so anyone who has not started yet is already behind. On top of that, staffing agencies are required to screen their clients for money-laundering risks — something many agencies only discover when the first questions arrive.

Wtta · Wwft · AVG

⚡ Registration window: 1 Nov – 31 Dec 2026

Notarial Practices

Notary offices are subject to Wwft and in daily contact with SME clients. Client due diligence, integrity policy and GDPR are structural obligations.

Wwft · AVG · Integriteit

Maritime, Shipbuilding & Luxury Yacht Industry

One wrong client and you are in the middle of a sanctions investigation. International buyers, opaque ownership structures and payments routed through multiple countries: exactly the profile that banks and regulators flag. Dutch shipyards and yacht builders are global players, but that makes the question "who is my client, really?" anything but a formality. We make sure you can prove the answer before anyone asks.

Wwft · Sanctiebeheer · UBO · Exportcontrole · KYC/CDD

Background

30 years in the market

Started on the trading floor. Then moved into compliance — not because I had to, but because I saw where it goes wrong when you follow rules without understanding how markets actually work.

1994–2015

Trading & Capital Markets

MeesPierson/Fortis · ABN AMRO · Nyenburgh/Virtu · Tradition — front office trading, equities, fixed income, FX. Global Head ETF/ETC.

2015–present

Senior (IT) Risk and Compliance (Ad Interim)

Senior interim assignments at Deloitte, KAS Bank, Rabobank, Viterra, DPD and NN Group — currently active at NN Group as Senior IT Risk, Legal & Compliance. From KYC and MiFID II to DORA and Enterprise Control Frameworks.

CompliAdvice — Compliance as a Service

Partner & Strategic Governance Adviser — governance, operational risk, regulatory transformation for SMEs and financial institutions

Why different

Front office understands compliance — not the other way around

Most compliance officers are lawyers or accountants. They know what the rule says. We also know how a trader thinks, how a deal is structured, and where the pressure sits that sometimes leads people to make the wrong call.
That makes the difference — not in theory, but on the floor. Compliance only works when the business understands it too. Our role is to make that translation.
No overengineering, no bureaucracy. We look at what your situation requires and get on with it — without an 80-page report that ends up in a drawer.

"Compliance only works when the business understands it too. Our role is to make that translation."

Jan Willem Nienhuis — CompliAdvice

Latest

Compliance News

Current developments in compliance, regulation and supervision.

NIS2

Dutch Cybersecurity Act expected to take effect mid-2026

The Dutch implementation of NIS2 — the Cybersecurity Act — is expected to come into force this year. Organisations in critical sectors are well advised to start preparing now.

Updated: June 2026

AI Act

Obligations for AI users apply from August 2026

From 2 August 2026, general obligations apply to organisations that purchase and use AI systems. This affects virtually every SME using tools such as ChatGPT or AI-driven software.

Updated: June 2026

Wtta

Staffing agencies: Wtta registration window opens 1 November 2026

Staffing and recruitment agencies can register for the Wtta transitional scheme from 1 November to 31 December 2026; this requires an SNA certificate, and certification takes months. The act enters into force on 1 January 2027, with enforcement by the Labour Inspectorate from 1 January 2028.

Updated: June 2026

How we work

The law-firm model, but for compliance

CompliAdvice is structured like a good law firm: senior professionals carry out the work, and the partner personally reviews every file. New team members are trained in-house and work under direct supervision. That keeps turnaround times short and quality consistent, and you always know who bears final responsibility.

Senior professionals carry out the work — no junior practising on your file.

The partner personally reviews every file before it leaves the firm.

One person bears final responsibility, one familiar face — no revolving team.

Case Studies

What we do in practice

Three anonymised examples of recent engagements.

Market Conduct & Sanctions

International trading firm

The global market conduct and sanctions programme was redesigned from the ground up. Screening and monitoring models for sanctions lists, embargoes and export controls were designed and integrated into trading platforms. MiFID II, EMIR, SFTR and sanctions legislation were translated into workable procedures for trading and control teams across EU, UK, US and other jurisdictions.

Regulatory Reporting

Bank specialising in asset servicing

EMIR, SFTR and MiFID II reporting frameworks implemented. End-to-end controls and validation logic designed for complex financial transactions, resulting in improved documentation quality and regulatory traceability.

KYC & Onboarding

Major bank — private banking

The onboarding process was redesigned including data models and workflows. Lead times were reduced and data quality structurally improved through process analysis and translation of compliance requirements into IT specifications.

Get in touch

Contact

"Tell me what is going on. The rest follows from there."

Fill in the form and we will be in touch within one working day.

Name *

Email address *

Company name *

Phone number

I am interested in *

Additional information

By submitting I agree to the privacy policy.

✓

Thank you for your message

We will be in touch within one working day.

Phone

+31 6 815 27 272

info@compliadvice.nl

Jan Willem Nienhuis

Chamber of Commerce

66388201

You dobusiness.We do compliance.

What is compliance, anyway?

Know where you stand within five minutes

SME Compliance Quickscan

Cyber Risk Scan

Services

Our Approach

Sectors

30 years in the market

Front office understands compliance — not the other way around

Compliance News

The law-firm model, but for compliance

What we do in practice

Contact

You do
business.
We do compliance.