FinSA and FinIA: authorisation was only the first file

In January 2020, independent asset managers and trustees crossed a new threshold: anyone operating on a professional basis now needed FINMA authorisation. Many firms saw the reform as an administrative race to the end of the transitional period. The economic reality is more interesting. Authorisation does not freeze a firm’s ownership, management, organisation or capital. Every material change can reopen a file, involve the supervisory organisation and delay a business decision. This article follows the move from initial authorisation to ongoing compliance. It explains who is affected, why more than 3,200 change applications had already been recorded, which documents make a change ready for review and which first B2B engagement can be offered without promising authorisation. It then shows how to identify observable corporate events and build measured acquisition aimed at professionals, not private investors. General analysis updated on 7 August 2026. It does not replace legal advice or a decision by FINMA or a supervisory organisation.

FinSA and FinIA placed professional asset managers and trustees within an enduring authorisation and supervision framework. FinIA governs market entry and institutional requirements; FinSA governs, among other matters, the provision of financial services. The task is therefore not to complete a single form, but to maintain an organisation capable of remaining compliant.

Since 1 January 2020, an asset manager or trustee operating on a professional basis has needed FINMA authorisation before starting business. Existing firms benefited from a three-year transitional period. Its expiry prompted an initial wave of applications, but does not define the whole market: authorisation relies on facts that continue to change after the decision.

FINMA distinguishes authorisation from day-to-day supervision. Authorisation rests with FINMA; ongoing prudential supervision is generally performed by an authorised supervisory organisation. If a deficiency is not remedied, the matter may be referred to FINMA. A provider supporting a firm must therefore know where documentary preparation ends and the competent body’s decision begins.

How to read the diagram. A corporate event opens an assessment. The partner prepares evidence and responsibilities; the supervisory organisation and FINMA retain their respective powers.

Text alternative. A change is assessed, documented and reviewed by the supervisory organisation, then submitted or corrected before FINMA reaches its decision.

The most defensible first purchase is not “obtain authorisation”. It is a bounded review: classify the change, inventory the documents, assign responsibilities and map the route to the supervisory organisation. The promise concerns a coherent file, never the regulatory outcome.

The end of the transitional period did not close the market because authorisation conditions must be met at all times. New management, a qualified participation, reorganisation or pressure on capital or own funds may require notification and, in some cases, prior authorisation. Demand therefore shifts from the initial application to ongoing change management.

FINMA received 1,699 applications before the end of 2022. By the end of February 2025, more than 94% of those cases had been completed. This confirms that the initial wave was largely absorbed and rules out continuing to market a 2022 emergency. Authorised institutions had, however, already submitted 3,221 change applications, and FINMA estimated the future flow at roughly 1,700 applications a year.

The second figure describes a pool of situations, not available mandates. One institution may submit several applications, and some changes are handled internally. For acquisition, the useful information lies elsewhere: the trigger may be visible before the need is expressed. An appointment, acquisition, change of control, new service model or organisational expansion creates a point at which management must determine what needs to be reported.

The clearest buying events change a fact on which authorisation was based: management or ownership changes, a new qualified participation, reorganisation, an extended business scope or foreseeable pressure on capital or own funds. They are dated, attributable and lead to a specific documentary decision before any campaign starts.

Account monitoring can identify a commercial-register notice, acquisition, senior hire or new offering. That signal does not prove that the change is reportable. It supports a professional question: has the change been classified, and do the existing controls cover the new scope?

The first deliverable can be purchased promptly because it is narrow. It captures the facts, compares the position before and after the event, identifies documents to update and assigns each action. The partner must state a price, start date and delivery deadline. Without all three, getfishnet does not launch acquisition.

A useful review starts with an actual change, a named scope and a defined outcome. A general compliance service accumulates topics without connecting documents to an event. The first can be bought and completed; the second risks becoming an unlimited project that is difficult to price and impossible to attribute.

The minimum file includes the event description, before-and-after organisation charts, responsible persons, participations, delegations, controls and assigned documents. It also states what is missing and what the supervisory organisation must confirm. This boundary protects the client from support that presents itself as an authority.

The review ends with one of four possible outcomes: no material change identified within the reviewed scope; a straightforward notification; an application requiring confirmation from the supervisory organisation; or specialist advice before action. The partner provides preparation and analysis. The decision remains with the professional or competent authority.

Price must reflect actual complexity: number of entities, extent of the change, quality of the documents and availability of decision-makers. Average fees published by FINMA for the initial procedure are not advisory prices. They are only an institutional reference point; the commercial offer must be based on the work delivered.

File quality affects timing because an incomplete application generates questions, iterations and additional dependencies. During the initial wave, more than 40% of applications required at least five requests for improvement. Speed therefore comes not from a promise of accelerated handling, but from preparation that is more coherent and easier to assess.

FINMA published an average processing time of 129 days for authorisations in the initial period, with cases ranging from 9 to 550 days. These historical figures do not support a current turnaround promise, still less a decision date. They illustrate the difference between a straightforward file and a complex case, and the importance of the applicant’s responses.

Support adds value by reducing avoidable inconsistencies. An organisation chart without delegations, a participation without documented funding or a new activity without suitable controls forces the reviewer to reconstruct the story. The file must make that story verifiable while keeping unknowns visible.

The B2B pool comprises authorised asset managers and trustees, new entrants and institutions facing a structural change. FINMA’s list makes some accounts identifiable; public events allow them to be prioritised. The market does not include private investors or wealthy individuals for prospecting purposes.

In February 2025, FINMA reported 1,532 authorisations from 1,864 applications submitted since the regime began. This provides an order of magnitude for the supervised institutional base, but says nothing about propensity to buy. Responsible acquisition combines that base with a recent event, delivery capacity and a bounded offer.

Useful segmentation distinguishes new firms, institutions in transformation and businesses whose controls need retesting. Outreach does not use fear of sanctions. It offers a concrete hypothesis: “Your recent change appears to affect a defined set of documents. Would you like to confirm the scope before proceeding?” The prospect can decline without being trapped in an alarmist diagnosis.

The wealth management market page should then organise related articles around these buying moments, not a static list of statutes.

A multichannel campaign should start with corporate events, then confirm the buyer, partner and capacity before opening channels. Search, content, professional networks, email, telephone and events serve different roles. No channel can turn a regulatory signal into certain demand or guarantee authorisation.

How to read the diagram. Monitoring selects events and qualification precedes activation. The first paid purchase and available capacity then determine whether to continue or pivot.

Text alternative. Accounts identified through monitoring are qualified, approached through several channels and assessed against a genuinely paid diagnostic. Without capacity or a transaction, the campaign pivots or stops.

Search responds to existing queries. Content explains a particular type of change. Referrer networks provide essential trust on a sensitive subject. Outbound messages are used only where the event is public and the hypothesis relevant. Events and webinars can bring several decision-makers together around one specific question without turning the session into case-specific advice.

The first purchase leads to recurring work when a later event objectively requires another review: a change in management, participation, organisation, activities or capital, or an annual information request. Continuity is not an automatic documentation subscription; it must be triggered by a timetable, change or control with a named owner.

A one-off diagnostic may lead to preparation of a notification and then updates to controls. After the decision, monitoring can track authorised facts and information deadlines. Each stage retains its own deliverable, price and completion criterion. The client knows what it is paying for and can decline the next stage without losing the benefit of the first.

Recurrence is measured in files renewed for a documented reason, not accounts retained by inertia. The partner must know delivery cost, gross margin, monthly capacity and payment timing. getfishnet can then compare channels by paid diagnostics, conversion time and continuity value actually triggered.

Before deployment, the partner must confirm expertise, insurance, scope, entry price, time to start, monthly capacity, margin and an escalation procedure. It must also accept that some files will be declined. Without this evidence, the opportunity remains at partner-research stage and no economic result is presented as established.

The delivery model requires both a commercial owner and an expert owner. It needs a document list, reporting template, confidentiality rules, secure channel and destruction or archiving method. The campaign must slow as soon as capacity is reached; excess demand on a regulated subject would destroy trust faster than it creates revenue.

Economic measurement begins when the diagnostic is paid. Meetings, downloads and replies are intermediate indicators. Recurring revenue is recognised only when a second, distinct service has been invoiced and paid. This discipline permits exploration while keeping potential and observed results separate.

The complimentary eligibility test examines your acquisition challenges, account pool, buying event, first deliverable and partner capacity. It prejudges neither authorisation nor an engagement. Its purpose is to decide whether there is sufficient alignment to justify developing a tailored strategy together.

The authoritative sources used are FINMA, the federal FinSA and FinIA legislation, implementing ordinances and supervisory communications published in 2023, 2025 and 2026. They establish the framework, volumes and limits. They do not publish commercial conversion rates, advisory prices or revenue promises.