AQMetrics: regulatory reporting, investment compliance and portfolio risk

AQMetrics provides cloud software for regulatory reporting, investment-compliance controls and portfolio-risk monitoring. The platform combines data preparation, rules, alerts and reports with an audit history. For a brokerage or investment firm, its role is to turn operational records into controlled reporting and monitoring workflows. The same technology also serves asset managers and service providers handling reporting for multiple funds. A shared platform does not make the submission route or required data identical across regimes.[2]

The MiFID workflow applies checks both when data enters the system and against the reporting rules and reference data used for the final submission. Its dashboard exposes file and transaction status, rejections, corrections and reporting history. This gives operations staff a route to investigate an individual failure and to compare submitted transactions with expected records. Back-reporting is a separate capability for missing or incorrect historical transactions, rather than a substitute for monitoring the daily submission cycle.[4]

Ownership monitoring covers major shareholdings, short selling, takeover situations, sensitive industries and issuer restrictions. Position and beneficial-owner data feed configurable threshold logic; reports can then be generated and reviewed for relevant disclosures. The distinction between identifying a threshold event and completing a filing matters: the product includes workflow around the alert, so the institution still needs assigned reviewers and a defined submission process.[10]

The regulatory data framework normalises transaction, position and reference information into a common model. APIs connect internal systems, administrators and third-party sources. Validation, classification and calculation rules run on that shared data, with logged changes and actions. This architecture allows a correction to an underlying record to be traced through its downstream reporting use. Integration scope therefore includes mapping fields and identifiers, controlling the transformations and agreeing how exceptions return to the source-data owner.[3]

MiFID inputs can arrive by SFTP, existing ARM file formats, Excel upload or manual entry. AQMetrics describes retaining existing file formats during migration, with mapping and validation inside the platform. That reduces the need to redesign every upstream extract, although a migration must still reconcile the meaning and completeness of the supplied fields.[4]

For EMIR, AQMetrics describes normalising and enriching incoming files, checking reporting schemas and reference data such as LEIs, UPIs and FIRDS records, and generating ISO 20022 XML for DTCC Global Trade Repository. Repository feedback then feeds the reporting history and exception process. AQMetrics is supplying the preparation and connectivity workflow in this arrangement; the named trade repository is a separate participant.[5]

Annex IV reporting uses security classification, gross and commitment leverage calculations, exposures and risk measures. Users can compare periods and review results before approval; documented outputs include XML, Excel and PDF. That workflow differs from transmitting individual transaction reports because portfolio aggregation, calculation assumptions and period-level sign-off are central to the result.[6]

The public contact route is a business enquiry and demonstration process. It does not publish a numeric platform tariff, minimum deal size or a standard per-transaction price. Commercial scope needs to identify the selected reporting services and the institutions or funds covered by the proposal.[14]

AQMetrics describes a standard sequence of kick-off, data mapping, user acceptance testing and sign-off, typically taking one to two months. This is a vendor estimate that varies with source-data complexity and the number of regimes. Its SaaS is hosted through AWS in Europe, with role-based controls over access and export. DataMapper and RulesBuilder support configuration of data mappings and APIs.[1]

Consulting adds project definition, regulatory gap analysis, change management, mock audits and assistance around reporting deadlines. The published delivery method moves from discovery and analysis through implementation to evaluation. These services can address the operating process around the software: which team owns a rejected record, how a rule change is assessed and what evidence is retained after review. The service description is broader than installation, while the professional-services agreement determines the work actually commissioned.[12]

The security trust centre describes encryption in transit and at rest, independent penetration testing, vulnerability monitoring and incident-response and continuity processes. It states that its ISO/IEC 27001:2022 scope includes hosting, engineering, infrastructure operations and customer support. These are the supplier’s published control statements. The centre also identifies client-data handling, retention and data-processing policies, but does not reproduce their complete operational terms or a customer-specific recovery commitment.[13]

Standard support is online during 09:00–17:00 Irish business hours, excluding Irish bank and public holidays; the order specifies details.[11]

The FCA’s authorised DRSP list, updated on 3 June 2026, names AQ Metrics Limited as an Approved Reporting Mechanism, with authorisation effective from 22 December 2021. The FCA describes an ARM as reporting transaction details to the regulator on investment firms’ behalf. That identifies a specific reporting activity; it does not establish an investment-dealing, custody or client-money permission for the wider AQMetrics software catalogue.[17]

ESMA’s 12 July 2022 supervisory announcement explicitly lists AQ Metrics Limited as an ARM under direct ESMA supervision. Its November 2025 assessment reported no changes to the existing DRSP supervisory designations and expected no changes for 2026 and 2027. These supervisory statements concern data-reporting providers, rather than approval of every calculation, monitoring rule or fund report produced by their software.[18][19]

Customers retain Received Data ownership and responsibility for accuracy and lawfulness. The internal-use licence is non-transferable and non-sublicensable; AQMetrics receives term-limited data-use rights to provide services.[11]

The February 2026 privacy policy identifies the website and customer-portal operator as AQ Metrics Limited, at H5 Maynooth Business Campus, Maynooth, County Kildare, Ireland. It separately describes customer personal-data retention for the contract duration and typically up to seven years afterwards for financial, regulatory and DRSP obligations. That is a personal-data policy statement, not a promise to delete every operational record immediately when a subscription ends.[15]

AQMetrics dates its platform launch to 2012, investment-restriction monitoring to 2014 and AIFMD reporting to 2015. Its history records expansion into the UK and France in 2019, a Singapore office in 2021 and a US presence through AQMetrics Inc in 2023. These milestones explain the combination of fund oversight and transaction-reporting capabilities in the current catalogue. The public company history does not provide a complete current shareholder table.[16]

Operator

AQ Metrics Limited

Service scope

Regulatory reporting, investment-compliance monitoring, portfolio risk and regulatory data management for financial institutions.

Customer types

Banks; Asset managers; Fund administrators; MiFID investment firms

Delivery

SaaS; API

Pricing publication

Quote only

Platforms

MiFID II transaction reporting; EMIR reporting; AIFMD Annex IV; DORA reporting; Investment compliance; Portfolio risk and liquidity; Beneficial ownership monitoring

Integrations

SFTP; APIs; Excel uploads; DataMapper; RulesBuilder; DTCC Global Trade Repository

Pricing scope

Order-specific setup and annual licence fees.

Implementation

Data mapping, user acceptance testing and sign-off, scoped to sources and reporting regimes.

Support

Online support in Irish business hours; order-specific terms.

Permissions and regulatory scope

The FCA lists AQ Metrics Limited as an ARM; ESMA names it in its direct-supervision framework.

Provider metadata checked 21 Oct 2026Source 1Source 2Source 3Source 4Source 5Source 6Source 7Source 8Source 9Source 10Source 11Source 15Source 17Source 18

Portfolio-risk calculations include parametric, historical and Monte Carlo value at risk, together with currency, counterparty, issuer and market exposures. Liquidity analysis covers time to liquidate, liquidity buckets, spreads, exit costs and redemption stress. AQMetrics describes its framework as calculating measures relevant to AIFMD II and UCITS VI while allowing extension as technical standards develop. Existing calculation functions and future reporting specifications are therefore distinct parts of that product description.[9]

Annual renewal is automatic unless written notice arrives at least 30 days before expiry. Licences end on termination, and the main standard terms prevail over inconsistent order provisions.[11]

DORA register production combines ICT inventory, contractual relationships, dependency mapping, validation and approval. Its role-based sign-off and audit trail support collaboration between technology, risk and compliance teams. Producing the register package addresses a defined reporting task within a firm’s broader operational-resilience obligations; it does not make the register tool a complete operational-resilience programme.[7]