Techstars ABN AMRO Future of Finance backs Umbra

Backed by

The AI-native GRC for financial services

Purpose-built for risk and compliance teams. Scale your business without the risk

Regulatory scope +
Integrated with +

Entity

Identity

Basic company identification and classification

Entity name

Northstar

Company type

Crypto-Asset Service Provider

License and permission

Regulatory licenses and permissions held by the company

Regulatory license

Authorised as a crypto-asset service provider in accordance with Article 63 of Regulation (EU) 2023/1114 (MiCA), granted by the Authority for the Financial Markets (AFM)

Permission

Exchange of crypto-assets for funds

Execution of orders for crypto-assets on behalf of clients

Products and services

Products and services offered by the company

Product or service

Spot trading (order book)

Geography

Jurisdictions and passporting footprint

Entity jurisdiction

Netherlands

Parent jurisdiction

Netherlands

Passport

Belgium

Branch

France

Cross-border

Germany

Cross-border

Austria

Cross-border

Financial scale

Key financial metrics and regulatory capital

Balance Sheet Total (€)

Enter last audited amount

Own Funds / Regulatory Capital

Enter amount or description

Headcount (FTE)

400

Class under MiCA

Class 3

Extra details

Additional custom fields for this entity

Not exercised:

No derivatives or leverage; no deposit-taking; no issuance of asset-referenced or e-money tokens; no advice or portfolio management; no insurance distribution

Target segment:

Broad-market crypto investors in the EEA, plus business and institutional clients.

Umbra tracks what regulatory obligations apply, then builds and runs the compliance program behind them

Know what applies

Track and assess EU, UK, and member-state legislation, including supervisory guidance

Find the gaps

Map obligations to policy, systems and controls, then remediate in one system

Build your program

From AMLR to DORA, assign key controls, collect evidence and monitor continuously

The legislation we cover: Level 1 to Level 4 across the EU and the UK

Level 1: EU & UK legislation

Primary law, including DORA, MiFID II, AMLR, and MiCA

Level 2: Technical standards

Regulatory and implementing technical standards under Level 1

Level 3: EBA, ESMA & AMLA

Guidelines and Q&As from the European supervisory authorities

Level 4: Jurisdictions

Member-state rules and supervisory guidance

Don’t see what you require?

Book a call and tell us your requirements, we can get it sorted

Integrations

Embedded in the
tools you already use

Investment firms

Enter new markets and stay compliant
Crypto

Launch new products without the risk
Payments

Navigate nuanced scheme rules
Banks

Handle prudential and conduct obligations
Book an intro

You aren’t here?

Umbra meets the demands of any regulated financial firm

DORA

Umbra is DORA compliant, aligned with the EU standard for operational resilience

GDPR

We operate under GDPR — the world’s strictest standard for data privacy

ISO 27001

Working toward ISO 27001 certification, the standard for information security

In progress

SOC2 Type 2

Working toward secure and compliant management of data across all our systems

In progress

At Google, Boston A hundred funded startups came together at Google’s office in Boston. Oct 17, 2026

Techstars ABN AMRO backs Umbra Umbra Ai got into Techstars to redefine risk and compliance for regulated financial firms. We’re building the AI-native GRC: track obligations, monitor controls, assess risks continuously. Sep 20, 2026

Paula Steiner: Advisory Board Paula Steiner joins the advisory board, bringing over a decade in compliance, law, and risk across fintech. She joins as we build the agentic operating system for regulated financial firms. May 29, 2026

SOLUTIONS

Umbra streamlines everything from risk assessments to drafting and review.

Review financial products

Launch regulated financial products without getting stuck waiting for compliance approvals.

Map legislation

Filter relevant regulations to find the business requirements that apply to your legal profile.

Policy and control analysis

Run gap analyses using your internal documentation and address blind spots with actionable suggestions.

			Documentation
MiFID II	Article 1Art. 1	Applicable	[13] Structural Risk AssessmentRisk Assessment	No gap
MiFID II	Article 2Art. 2	Applicable	[19] Outsourcing	Gap
MiFID II	Article 3Art. 3	Not Applicable
MiFID II	Article 4Art. 4	Not Applicable
MiFID II	Article 5Art. 5	Applicable	[37] Financial ReportingFin. Reporting	Gap
MiFID II	Article 6Art. 6	Applicable	[49] IT Infrastructure	No gap
MiFID II	Article 7Art. 7	Applicable	[3] Access ManagementAccess Mgmt	No gap
MiFID II	Article 8Art. 8	Not Applicable

IT Access Management

Access to systems is granted according to the principle of least privilege, in line with DORA Article 9 requirements for ICT risk management. Access requests must be approved by the user’s manager and the system owner. Periodic access reviews are conducted quarterly as part of the controls mandated under DORA Article 9(2)(d).

Product Governance and Launch Controls

Before launching any new financial product, the product governance team must identify document the target market and intended distribution strategy, and assess the product’s risks. All product information must be reviewed and approved by compliance. All product approvals must include a sign-off from compliance and a periodic review schedule to ensure ongoing suitability, in line with MiFID II Article 16.

Require review 3

Approved 14

The AI-native GRC for financial services

Identity

License and permission

Products and services

Geography

Financial scale

Extra details