This glossary explains specialized terminology used across Financial Services, focusing on the technologies, operating models, regulations, and performance concepts central to the Fintech And Insurtech Practice. It helps executives and practitioners navigate digital finance, embedded services, regulatory technology, digital assets, and technology-enabled insurance.
A B C D E F G H I K L M N O P Q R S T U V X Z
| A | |
| ACORD | Association for Cooperative Operations Research and Development: A global insurance standards organization that maintains standardized forms, data models, and electronic messages used to connect carriers, distributors, service providers, and insurance technology platforms. |
| ADAS | Advanced Driver Assistance Systems: Vehicle technologies such as collision warnings and automated braking that generate data relevant to telematics-based underwriting, risk prevention, and motor claims analysis. |
| AI | Artificial Intelligence: Computer systems that perform tasks involving prediction, classification, language, or decision support. Applications include underwriting, fraud detection, customer service, compliance monitoring, and claims automation, all of which require appropriate model governance. |
| AIS | Account Information Service: An open-banking service that accesses a customer’s payment-account information with consent, enabling aggregation, financial management, affordability assessment, and other data-driven products. |
| AISP | Account Information Service Provider: A regulated provider authorized to retrieve customer-permitted payment-account data from account-holding institutions under European open-banking rules. |
| AML | Anti-Money Laundering: The legal, operational, and technological controls used to detect and prevent the movement of illicit funds. Relevant capabilities include customer due diligence, transaction monitoring, sanctions screening, investigations, and regulatory reporting. |
| AMM | Automated Market Maker: A decentralized-finance protocol that uses smart contracts and liquidity pools to price and exchange digital assets without a conventional order book. |
| API | Application Programming Interface: A defined interface through which software systems exchange data or invoke services. APIs underpin open banking, embedded finance, modular insurance, identity verification, and integrations with regulated financial institutions. |
| ASPSP | Account Servicing Payment Service Provider: A bank or other institution that maintains a customer’s payment account and provides authorized third parties with account access under European open-banking rules. |
| B | |
| BaaS | Banking as a Service: A model through which licensed institutions provide regulated banking capabilities to nonbank companies through APIs and platform partnerships. It requires clear allocation of compliance, operational, data, and customer-protection responsibilities. |
| BSA | Bank Secrecy Act: The principal U.S. statute establishing recordkeeping, reporting, and anti-money-laundering obligations for covered financial institutions, including programs delivered through fintech partnerships. |
| C | |
| CASP | Crypto-Asset Service Provider: A regulated category under European crypto-asset law covering activities such as custody, trading-platform operation, exchange, execution, placement, transfer, and advice involving crypto-assets. |
| CBDC | Central Bank Digital Currency: A digital form of central-bank money designed for wholesale or retail use. Its architecture can affect settlement models, wallet design, privacy, financial intermediation, and integration opportunities for technology providers. |
| CDD | Customer Due Diligence: The process of identifying customers, verifying their identities, understanding relationship purposes, assessing risk, and maintaining current information throughout the relationship. |
| CeFi | Centralized Finance: Digital-asset services delivered through an identifiable intermediary that controls customer accounts, assets, or transactions, in contrast with decentralized smart-contract protocols. |
| CEX | Centralized Exchange: A platform operated by an intermediary that facilitates digital-asset trading and may also provide custody, conversion, staking, or other services subject to applicable licensing and conduct rules. |
| CFPB | Consumer Financial Protection Bureau: The U.S. federal agency responsible for administering and enforcing consumer financial protection laws, including requirements affecting digital financial products, data access, servicing, disclosures, and unfair or deceptive practices. |
| CFT | Countering the Financing of Terrorism: Controls intended to prevent funds or other assets from supporting terrorist activity. These measures are generally integrated with customer screening, transaction monitoring, investigations, and anti-money-laundering programs. |
| CFTC | Commodity Futures Trading Commission: The U.S. regulator for derivatives markets, with enforcement and oversight responsibilities that can extend to digital-asset commodities, trading venues, intermediaries, and related products. |
| CTR | Currency Transaction Report: A report that covered U.S. financial institutions must file for qualifying cash transactions above the regulatory threshold, making reliable aggregation and reporting important platform capabilities. |
| CV | Computer Vision: Artificial-intelligence techniques that extract information from images or video. Insurance applications include property inspection, vehicle-damage assessment, document processing, and claims triage. |
| D | |
| DAO | Decentralized Autonomous Organization: A blockchain-based organizational structure whose governance and treasury rules are partly implemented through smart contracts and token-holder voting, creating distinctive legal, control, and accountability questions. |
| DApp | Decentralized Application: An application that uses smart contracts or distributed networks for core functions rather than relying entirely on a centrally controlled backend. |
| DeFi | Decentralized Finance: Financial products and transaction mechanisms implemented through blockchain-based smart contracts, often without a conventional financial intermediary. Key concerns include protocol risk, governance, custody, market integrity, and regulatory classification. |
| DEX | Decentralized Exchange: A blockchain-based protocol that permits users to exchange digital assets through smart contracts, commonly using liquidity pools or on-chain order books rather than a central operator holding customer funds. |
| DID | Decentralized Identifier: A standards-based identifier that can be created and controlled independently of a central identity provider. It can support reusable digital identity and verifiable-credential models while reducing unnecessary data sharing. |
| DLT | Distributed Ledger Technology: A shared-record architecture in which multiple network participants maintain synchronized transaction data. It supports blockchain networks, tokenized assets, smart contracts, and alternative settlement models. |
| DORA | Digital Operational Resilience Act: A European Union regulation governing information and communications technology risk, incident reporting, resilience testing, and third-party technology oversight across regulated financial entities. |
| DPIA | Data Protection Impact Assessment: A structured assessment required under European data-protection law when processing is likely to create high risks for individuals. It is especially relevant to large-scale profiling, biometric processing, and automated financial decisions. |
| E | |
| EBA | European Banking Authority: The European Union authority that develops regulatory standards and guidance affecting banking, electronic money, open banking, outsourcing, operational resilience, and financial-crime controls. |
| EDD | Enhanced Due Diligence: Additional investigation and control measures applied to customers, beneficial owners, geographies, products, or transactions presenting elevated financial-crime risk. |
| eIDAS | Electronic Identification, Authentication and Trust Services: The European Union framework for electronic identification, signatures, seals, timestamps, and related trust services used in secure digital onboarding and contracting. |
| EIOPA | European Insurance and Occupational Pensions Authority: The European Union authority responsible for supervisory convergence and policy across insurance and pensions, including digital distribution, outsourcing, consumer protection, and technology risk. |
| eKYC | Electronic Know Your Customer: Digital customer identification and verification using electronic documents, authoritative data, biometrics, or remote identity checks. Effective implementation must balance conversion, fraud prevention, privacy, and regulatory compliance. |
| EMD2 | Second Electronic Money Directive: The European Union directive establishing the legal framework for electronic-money issuance and authorization of electronic-money institutions, subject to subsequent amendments and related national rules. |
| EMI | Electronic Money Institution: A regulated entity authorized to issue electronic money and provide permitted financial services. The license is widely used by wallet, stored-value, embedded-finance, and cross-border financial platforms in relevant jurisdictions. |
| ESMA | European Securities and Markets Authority: The European Union authority responsible for securities-market supervision and regulatory convergence, including areas affecting investment platforms, crowdfunding, tokenized products, and crypto-asset services. |
| F | |
| FAPI | Financial-grade API: A security profile from the OpenID Foundation designed for high-value and sensitive data sharing. It strengthens authorization and authentication for open-banking and open-finance implementations. |
| FATF | Financial Action Task Force: The international standard-setting body for combating money laundering, terrorist financing, and proliferation financing. Its recommendations shape national requirements for financial institutions and virtual-asset businesses. |
| FCA | Financial Conduct Authority: The United Kingdom regulator responsible for conduct, market integrity, competition, and authorization across many financial-services activities, including electronic money, open banking, digital assets, and insurance distribution. |
| FDIC | Federal Deposit Insurance Corporation: The U.S. agency that insures qualifying bank deposits and supervises state-chartered nonmember banks. Its rules and guidance influence fintech-bank partnerships, deposit representations, third-party risk, and resolution planning. |
| FinCEN | Financial Crimes Enforcement Network: A bureau of the U.S. Department of the Treasury that administers the Bank Secrecy Act, receives financial-intelligence reports, and regulates covered money-services activities. |
| FIU | Financial Intelligence Unit: A national authority that receives, analyzes, and disseminates reports concerning suspected money laundering, terrorist financing, and related financial crimes. |
| FNOL | First Notice of Loss: The initial report that starts an insurance claim. Digital intake, data prefill, image capture, fraud screening, and automated routing at this stage strongly influence claims cost and customer experience. |
| FRAML | Fraud and Anti-Money Laundering: An integrated approach that combines data, analytics, investigations, and case management across fraud prevention and financial-crime compliance to reduce duplicated controls and reveal connected risks. |
| FS-ISAC | Financial Services Information Sharing and Analysis Center: A member-based organization through which financial institutions and technology providers exchange cyber-threat intelligence, incident information, and resilience practices. |
| G | |
| GDPR | General Data Protection Regulation: The European Union data-protection framework governing lawful processing, transparency, individual rights, security, international transfers, and automated decision-making involving personal data. |
| GLEIF | Global Legal Entity Identifier Foundation: The organization that oversees the global system for standardized legal-entity identification, supporting more reliable onboarding, counterparty verification, regulatory reporting, and transaction data. |
| GLBA | Gramm-Leach-Bliley Act: A U.S. law governing financial institutions’ handling and protection of nonpublic personal information. Its privacy and safeguards requirements affect regulated firms and many technology providers serving them. |
| GWP | Gross Written Premium: The total premium written before deductions for reinsurance and certain adjustments. It is a central scale and growth measure for digital insurers, insurance platforms, and technology-enabled distribution models. |
| H | |
| HSM | Hardware Security Module: A tamper-resistant device that generates, stores, and uses cryptographic keys. It protects sensitive activities such as transaction signing, token issuance, credential management, and digital-asset operations. |
| I | |
| IaaS | Insurance as a Service: A model that exposes modular insurance capabilities—such as product configuration, pricing, policy administration, or claims—through technology platforms and APIs for integration into third-party propositions. |
| IAIS | International Association of Insurance Supervisors: The global standard-setting body for insurance supervision. Its principles influence national approaches to governance, market conduct, operational resilience, outsourcing, and technology-enabled insurance models. |
| ICO | Initial Coin Offering: A fundraising method in which an issuer sells newly created digital tokens. The legal treatment depends on the token’s characteristics and may trigger securities, consumer-protection, disclosure, or financial-crime requirements. |
| ICO | Information Commissioner’s Office: The United Kingdom authority responsible for data-protection and information-rights regulation, with oversight relevant to digital onboarding, profiling, direct communications, security, and personal-data processing. |
| IDD | Insurance Distribution Directive: The European Union framework governing the sale and distribution of insurance products, including customer information, product oversight, remuneration, professional standards, and digital sales journeys. |
| IDV | Identity Verification: The process of confirming that a person or organization is genuine and matches presented identity information. Digital methods may use documents, databases, biometrics, device signals, and authoritative registries. |
| IoT | Internet of Things: Networks of connected sensors and devices that collect and transmit real-world data. Insurance uses include vehicle telematics, property monitoring, industrial risk prevention, health engagement, and usage-based coverage. |
| ISO/IEC 27001 | Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements: An international standard specifying requirements for an information-security management system. Certification is frequently used to demonstrate structured security governance to regulated clients and partners. |
| K | |
| KYB | Know Your Business: The process of verifying a business customer, its registration, ownership, control, activities, and risk profile before and during a commercial relationship. |
| KYC | Know Your Customer: The controls used to identify and verify customers, assess their risk, and maintain appropriate records and monitoring. Efficient digital execution is critical to both compliance and onboarding conversion. |
| KYT | Know Your Transaction: The analysis of transaction attributes, counterparties, wallet addresses, and behavioral patterns to identify financial-crime risk, particularly in digital-asset environments. |
| L | |
| LEI | Legal Entity Identifier: A globally standardized identifier for legally distinct entities participating in financial transactions. It improves entity matching, counterparty transparency, onboarding, and regulatory reporting. |
| M | |
| MiCA | Markets in Crypto-Assets Regulation: The European Union framework governing crypto-asset issuance, stablecoins, service-provider authorization, market conduct, consumer protection, and operational requirements. |
| ML | Machine Learning: A branch of artificial intelligence in which models learn patterns from data to generate predictions or classifications. Common applications include risk scoring, fraud detection, personalization, pricing, and claims triage. |
| MLRO | Money Laundering Reporting Officer: The designated officer responsible for overseeing a firm’s financial-crime compliance framework and evaluating whether suspicious matters should be reported to the relevant authority. |
| MNO | Mobile Network Operator: A telecommunications provider that can supply connectivity, distribution, identity signals, agent networks, or wallet infrastructure for mobile-money and digital-finance services. |
| MPC | Multi-Party Computation: A cryptographic method that distributes a calculation or private-key operation among multiple parties so no participant holds the complete secret. It is widely applied to digital-asset wallet security and transaction authorization. |
| MRM | Model Risk Management: The governance framework for model development, validation, approval, monitoring, change control, and retirement. It is essential where automated models influence underwriting, pricing, fraud controls, or customer outcomes. |
| MSB | Money Services Business: A U.S. regulatory category covering specified activities such as money transmission, currency exchange, and certain prepaid or digital-asset services, with registration and financial-crime compliance obligations. |
| N | |
| NAIC | National Association of Insurance Commissioners: The U.S. standard-setting and regulatory support organization governed by state insurance regulators. Its model laws, data standards, and guidance influence digital insurance products, artificial intelligence governance, and market conduct. |
| NFT | Non-Fungible Token: A uniquely identifiable blockchain token representing a distinct digital or real-world item, entitlement, or record. Financial applications raise questions concerning custody, valuation, ownership rights, and regulatory classification. |
| NLP | Natural Language Processing: Artificial-intelligence methods for analyzing or generating human language. Applications include document extraction, customer support, complaint analysis, compliance review, underwriting submissions, and claims correspondence. |
| NMLS | Nationwide Multistate Licensing System and Registry: The U.S. system used by participating regulators to administer licenses and registrations for mortgage, consumer-finance, debt, and money-services businesses. |
| O | |
| OCC | Office of the Comptroller of the Currency: The U.S. federal agency that charters and supervises national banks and federal savings associations. Its expectations affect bank-fintech partnerships, third-party risk management, digital activities, and banking-service delivery. |
| OCR | Optical Character Recognition: Technology that converts text in scanned documents or images into machine-readable data. It supports automated onboarding, document verification, underwriting, policy servicing, and claims processing. |
| OFAC | Office of Foreign Assets Control: The U.S. Treasury office that administers and enforces economic and trade sanctions. Financial platforms must incorporate applicable screening, blocking, rejection, recordkeeping, and reporting controls. |
| P | |
| P2P | Peer-to-Peer: A platform model that directly connects participants for activities such as financing, transfers, investing, or pooled insurance arrangements, while the platform provides matching, servicing, controls, or infrastructure. |
| PAS | Policy Administration System: The core insurance platform used to issue, modify, renew, cancel, and maintain policies and associated billing or coverage data. Modern systems emphasize configurable products, automation, and API connectivity. |
| PAYD | Pay-As-You-Drive: A usage-based motor insurance model in which premium calculations reflect distance driven, typically using telematics, connected-vehicle, or mobile-device data. |
| PEP | Politically Exposed Person: An individual entrusted with a prominent public function, along with relevant family members or close associates under applicable rules. Such relationships generally require heightened risk assessment and monitoring. |
| PHYD | Pay-How-You-Drive: A motor insurance model that uses driving behavior—such as braking, acceleration, speed, and time of travel—to inform pricing, feedback, or risk-management interventions. |
| PII | Personally Identifiable Information: Data that identifies or can reasonably be linked to an individual. Its collection, processing, retention, sharing, and protection are central to privacy and cybersecurity controls in digital financial services. |
| PIS | Payment Initiation Service: An open-banking service that initiates a payment from a customer’s bank account with authorization, allowing merchants or applications to offer account-based checkout and transfer experiences. |
| PISP | Payment Initiation Service Provider: A regulated third party authorized to initiate account-based payments on a customer’s behalf under European open-banking rules. |
| PoS | Proof of Stake: A blockchain consensus mechanism in which participants commit tokens to validate transactions and secure the network. Its design affects governance, rewards, custody, liquidity, and regulatory analysis. |
| PSD2 | Second Payment Services Directive: The European Union directive that established major requirements for payment services, open-banking access, customer authentication, licensing, security, and consumer protection. |
| PSD3 | Third Payment Services Directive: The proposed successor directive intended to update European payment-services rules alongside a directly applicable payment-services regulation, including provisions for fraud, open banking, authorization, and consumer protection. |
| Q | |
| QES | Qualified Electronic Signature: The highest-assurance electronic-signature category under European trust-services law, created using a qualified signature device and certificate and carrying the legal effect of a handwritten signature. |
| R | |
| RBA | Risk-Based Approach: A compliance method that allocates controls and resources according to assessed exposure rather than applying identical treatment to every customer or transaction. It is a foundational principle of financial-crime programs. |
| RPA | Robotic Process Automation: Software automation that performs repetitive, rules-based tasks through existing user interfaces or workflows. Typical applications include reconciliation, data entry, policy servicing, reporting, and claims administration. |
| RWA | Real-World Asset: A physical or conventional financial asset represented, referenced, or administered through blockchain-based tokens. Implementations must address enforceable rights, valuation, custody, servicing, and investor protection. |
| S | |
| SAR | Suspicious Activity Report: A confidential report filed with the relevant financial-intelligence authority when activity may involve money laundering, fraud, terrorist financing, or another specified offense. |
| SCA | Strong Customer Authentication: A European requirement for authentication using at least two independent elements from knowledge, possession, and inherence categories, subject to defined exemptions. It affects login, consent, and transaction design. |
| SEC | Securities and Exchange Commission: The U.S. federal regulator responsible for securities markets, issuers, exchanges, investment intermediaries, and investor protection. Its jurisdiction can affect digital investment platforms, token offerings, and crypto-asset products. |
| SOC 2 | System and Organization Controls 2: An independent attestation framework evaluating controls relevant to security, availability, processing integrity, confidentiality, or privacy. Reports are widely requested during institutional vendor and partnership due diligence. |
| STO | Security Token Offering: The issuance of blockchain-based tokens representing securities or security-like rights. Offerings must address applicable registration, disclosure, transfer, custody, and investor-eligibility requirements. |
| STP | Straight-Through Processing: End-to-end processing completed without manual intervention. It is a key automation objective for digital onboarding, policy issuance, claims, compliance workflows, and financial transactions. |
| STR | Suspicious Transaction Report: A confidential filing used in many jurisdictions to notify the financial-intelligence authority of transactions suspected of involving financial crime. |
| T | |
| TFR | Transfer of Funds Regulation: The European Union regulation requiring specified originator and beneficiary information to accompany transfers, including covered crypto-asset transfers, to improve traceability and financial-crime controls. |
| TM | Transaction Monitoring: The automated and investigative process used to identify unusual or potentially illicit activity across customer accounts, payments, or digital-asset wallets. Effective systems combine rules, analytics, alert management, and documented escalation. |
| TPP | Third-Party Provider: In open banking, an authorized external provider that accesses account information or initiates payments with customer consent through interfaces supplied by account-holding institutions. |
| TVL | Total Value Locked: The aggregate value of assets deposited in a decentralized-finance protocol or set of smart contracts. It indicates platform usage and liquidity but does not by itself measure profitability, safety, or sustainable activity. |
| U | |
| UBI | Usage-Based Insurance: Insurance whose pricing or coverage reflects measured use or behavior rather than relying only on static rating factors. Telematics and connected devices enable common applications in motor, property, and commercial insurance. |
| UBO | Ultimate Beneficial Owner: The natural person who ultimately owns or controls a legal entity or arrangement. Accurate identification is essential to business onboarding, sanctions compliance, and financial-crime risk assessment. |
| V | |
| VASP | Virtual Asset Service Provider: A category defined by international financial-crime standards for businesses conducting specified virtual-asset activities for customers, including exchange, transfer, custody, or participation in issuance-related services. |
| VRP | Variable Recurring Payments: An open-banking capability that lets customers authorize a provider to initiate a series of account payments within agreed limits, supporting recurring bills, account sweeping, and flexible subscription use cases. |
| X | |
| XAI | Explainable Artificial Intelligence: Methods that make model outputs understandable to developers, risk teams, regulators, or affected customers. Explainability is particularly important when automated systems influence underwriting, pricing, fraud decisions, or access to financial products. |
| Z | |
| ZKP | Zero-Knowledge Proof: A cryptographic technique that allows one party to prove a statement without revealing the underlying sensitive information. Potential applications include privacy-preserving identity, compliance, authentication, and blockchain transactions. |