AI-powered compliance training.
Built for your jurisdiction.
Compliance training grounded in the actual regulation that governs your firm. Completed in under 10 minutes, with audit-ready PDF records.
Supporting Gibraltar (GFSC) and Luxembourg (CSSF).
DLT / Crypto scenario
Sarah, the MLRO at a Gibraltar-licensed DLT firm, receives an internal report that a customer has made three large deposits from different bank accounts within 48 hours. What should she do first?
Regulation reference: POCA 2015, Section 28: Nominated officer reporting obligations.
Conply at a glance
Powered by regulated AI
AI agents that only speak from the law
Conply doesn't use generic AI prompts. Purpose-built agents retrieve the actual text of the regulation that governs your firm, whether that is Gibraltar statute or Luxembourg/EU law, and generate training scenarios constrained to what the law says, not what a language model guesses it says.
Retrieve
Agents pull the relevant sections from your jurisdiction's primary sources before generating anything. For Gibraltar: POCA 2015, GFSC Principles, the Gambling Act. For Luxembourg: the AML Law of 12 November 2004, MiCA (EU 2023/1114), DORA, and CSSF circulars.
Generate
Scenarios are built from retrieved regulation text. Each session produces three unique, realistic situations with four options and a scored answer.
Cite
Every explanation ends with a specific regulation reference: the Act, the section, the principle. No vague "best practice" hand-waving.
The training lifecycle
From team onboarding to audit-ready records. A fully managed loop.
Admin invites team
Add staff from the dashboard. They receive an email with a sign-in link. Assign each person a sector (Crypto, iGaming, or Both) and Conply maps the right modules.
Slack or Teams delivers training
Each working day, one message lands in Slack or Microsoft Teams with a direct link. Staff click, complete three AI-generated scenarios grounded in their firm's regulation, and return to work. Works on the mobile apps they already have, train on the commute, between meetings, wherever.
AI generates scenarios
Purpose-built agents retrieve real regulation text (POCA 2015 and GFSC Principles for Gibraltar firms, or the AML Law of 2004, MiCA, and CSSF guidance for Luxembourg firms) then generate unique scenarios. Every explanation cites the specific section.
Scores are recorded
Every completion writes a timestamped record: user, module, score. The compliance matrix updates in real time. No manual data entry.
Audit trail ready
Admins see who is compliant, who is overdue, and can download a PDF completion record for any user. The evidence a regulator asks for during a supervisory visit.
What you get
Everything a regulator expects
Jurisdiction-specific regulation
Every scenario references actual statute for your jurisdiction. Gibraltar firms get POCA 2015, GFSC DLT Principles, and the Gambling Act 2025. Luxembourg firms get MiCA (EU 2023/1114), the AML Law of 12 November 2004, DORA, and CSSF supervisory guidance. Not generic EU templates.
Regulated AI agents
Purpose-built AI agents retrieve the real regulation text that governs your firm and generate unique scenarios grounded in actual statute. Every explanation cites the specific section. No hallucinated law.
Delivered in Slack & Teams
One message per day in Slack or Microsoft Teams, with a direct link. No login portals, no extra apps. Staff train on the apps they already have open, including on mobile, on the go.
Audit-ready compliance records
See exactly who has completed which modules, their scores, and their status. Download PDF records per user. The audit trail regulators ask for, built in from day one.
From the blog
Stay ahead of regulation
Practical guidance on Gibraltar and Luxembourg compliance obligations, covering POCA 2015, MiCA, CSSF supervisory requirements, AML/CFT, and more.
What Gibraltar's Gambling Act 2025 means for your staff training obligations
The Gambling Act 2025 came into force in October 2025. Here is exactly what it requires from your compliance training programme and which roles it targets.
GFSC Principle 7 and what it actually requires from your DLT staff
DLT Regulatory Principle 7 requires firms to have systems and controls commensurate with the risks they face. Training is a core part of that, and the GFSC is checking.
How POCA 2015 defines your MLRO's training responsibilities
The Proceeds of Crime Act 2015 places specific training obligations on the MLRO, and on the firm as a whole. Here is what the statute actually requires.
Get your team compliant in days, not weeks
Select your jurisdiction, onboard your staff, and send the first training module within 24 hours. No implementation project, no content to write.