Nasser RahalMBA, P.Eng
Dubai--:--Toronto--:--Riyadh--:--  GCC hours: 06:00–10:00 Toronto is 14:00–18:00 Dubai
Digital assets & VASPs

Technology and control evidence for virtual asset firms

For VASPs, payment token issuers and custodians licensed or applying in the UAE, and for banks adding digital asset services. I cover the architecture and the evidence; your legal counsel covers the licence.

UAE2–3 weeks

Inspection-readiness assessment

VARA-licensed VASPs and payment token firms
  • Evidence review against VARA Rulebook technology, custody and Travel Rule expectations
  • Traceability check of your business risk assessment method
  • Red, amber, green evidence map
  • Remediation plan with owners
Delivered alongside your counsel or MLRO
UAE6–10 weeks

Custody, settlement and Travel Rule architecture

VASPs, custodians and stablecoin issuers
  • Hot, warm and cold custody design; MPC or HSM options
  • Travel Rule vendor selection and integration
  • Fiat on- and off-ramp and banking partner flows
  • Control evidence built into the design
Leads to build oversight
UAE6–12 months

Fractional chief architect

Growing VASPs without senior technology governance
  • Input to the technology risk committee
  • Change-control evidence
  • Vendor oversight
  • Support for regulator walkthroughs
Monthly retainer
Scope boundary. This is technology and operating-model advisory to your firm. It isn't legal advice, and I don't make recommendations on buying, selling or holding virtual assets. I work alongside your counsel and your MLRO. For payments-rail work outside digital assets, see payments engagements. Read the VARA inspection hub for how evidence walkthroughs usually go.
Not sure where to start? Book a 30-minute call and I'll tell you whether an inspection-readiness assessment or a custody design engagement is the right next step.