Client Notes

What fieldwork felt like for compliance teams

Specific recollections from audits and reviews — including where Harborline insisted on deeper samples than clients first preferred.

Client and auditor reviewing notes after a closing conference

“They insisted on expanding the false-positive band after our first walkthrough. It slowed week three, but the copied disposition phrases would have stayed invisible otherwise. Our partner bank later asked for exactly that evidence trail.”

Mei-Ling Chen Compliance officer · electronic payment institution · Taipei

“The pre-licence matrix was blunt about our call-centre vendor gap. Uncomfortable in the moment; useful before we filed.”

Jonas Park Founder · remittance startup · Taichung

“Closing conference language was plain enough for our independent directors. We still disagreed with one amber rating’s residual-risk wording — and they documented our dissent fairly.”

Yu-Hsuan Tsai Board chair · digital lending operator · Kaohsiung

“Half-day workshop turned twelve findings into seven owned actions with dates our staffing plan could survive. Not glamorous. Exactly what the minutes needed.”

Farah Ismail Head of legal · payment institution · New Taipei
Engagement stories

Two recent audits in context

Team in a glass meeting room during audit interviews

Electronic payment institution — AML Control Testing

A Taipei operator faced a partner-bank questionnaire with a six-week window. Harborline stratified 18 months of alerts, re-performed 64 dispositions, and highlighted template language reused across analysts. Management accepted five amber findings and hired two investigators before the bank visit.

Duration: 4 weeks · Deliverable: findings memo + sample index

Director presenting remediation owners at a board table

Digital lender — Regulatory Compliance Audit

Multi-product lending group preparing for FSC attention. Fieldwork covered onboarding, collections-related complaints handling, and board packs. One red finding on enhanced due diligence for a high-risk segment drove a temporary onboarding pause until controls were restated and retested.

Duration: 9 weeks · Deliverable: board-ready report + closing conference

Commission a review for your licence perimeter

Share your timing and entity map. We will recommend the engagement that fits — and decline work that would conflict with our independence.

Request an audit brief