Skip to content
EBA · EU-wide

Reporting channels compared — the enrolment problem

Fintech Passport
August 20, 2026 · 4-min read
Reporting channels compared — the enrolment problem

The most under-planned item in any market-entry reporting project is not the file. It is the ability to send it. Every supervisor in this cluster operates its own submission infrastructure, with its own enrolment, its own credentials and frequently its own test environment. Enrolment is routinely the longest single lead time in a first submission — and in several markets it is granted per process rather than once per firm.

1. The channels

MarketChannelNotable feature
SpainEDITRAN, plus the tax administration’s own channelRegistration granted per process, not once per firm
ItalyInfostat-UIF and the supervisory portalsPortal registration required within 30 days of commencing activity
NetherlandsThe DNB centralised channel; Digipoort for taxOne XBRL channel for most returns; a certificate problem for foreign PSPs on the tax route
GermanyBundesbank ExtraNet and the supervisory portalsSupervision and collection sit at different institutions
LuxembourgThe CSSF channelsFilings accepted in more than one language
AML, several marketsgoAMLA registration duty that can bind independently of any filing

2. Why enrolment dominates the critical path

Three features combine to make it the binding constraint:

  • You do not control the duration. Every other task in a reporting project can be resourced; this one waits on an external party.
  • It is often per process. A firm with six returns can face six enrolments, each with its own paperwork.
  • It gates testing, not just filing. A test environment usually needs its own credentials, so an enrolment delay does not merely postpone the live submission — it postpones the rehearsal that would have found the problems.

The planning rule that follows is simple and rarely applied: start enrolment when the obligation is identified, not when the deadline appears. It costs nothing to hold credentials you are not yet using.

3. Certificates and identity

Several channels authenticate with certificates rather than passwords, and that introduces a specific failure mode for cross-border firms: the certificate has to identify the filing entity, and national certificate schemes are not always straightforward for a foreign entity to obtain. The Dutch tax route is a documented example of exactly this friction for foreign payment service providers.

The practical checks are worth doing early, because each has a long tail if it goes wrong: which legal entity must the certificate name; can a foreign entity obtain one directly or is an intermediary needed; what is the renewal cycle; and who is notified when it is about to expire. That last question causes more outages than any of the others — a certificate that expires unnoticed takes a channel offline without any warning that a reporting calendar would catch.

4. The acknowledgement is part of the channel

A submission is not complete when the file is sent. It is complete when the acknowledgement is received and recorded — and acknowledgements are frequently asynchronous, arriving minutes or hours later through a different route than the submission.

A process with no named owner for the acknowledgement will eventually record a rejected file as filed, and will discover it when the supervisor asks about a missing return. The control is trivial and almost universally absent: the submission is not marked complete in the internal record until the acknowledgement is matched to it.

5. Planning it

Facts: a firm entering three markets plans reporting as a post-launch workstream.

What the analysis produces: at least one enrolment carries its own deadline independent of filing — Italy’s 30-day portal registration — so “post-launch” is already non-compliant in that market. At least one obligation in the Netherlands is a connection that must exist before a product can launch at all. And Spanish enrolment is per process, so the count of enrolments equals the count of returns rather than one.

What the practitioner does: lifts channel onboarding out of the reporting workstream and into the market-entry plan, alongside licensing and banking arrangements — as a dependency with its own owner, its own tracker and its own escalation. It is the only part of a reporting build whose duration is set by someone else.

FAQ

Is one enrolment enough per market?

Not necessarily. In Spain, registration is granted per reporting process, so each return can require its own enrolment.

What is the most common silent failure?

An unmatched acknowledgement, and an expired certificate. Neither generates an alert in a calendar-based reporting process.

When should enrolment start?

When the obligation is identified. It is the only task in a reporting project whose duration the firm does not control, and it gates testing as well as filing.


Related: Testing a new return · EDITRAN · The DNB channel

Related reads.