El Salvador – DASP Policy Set (Outline)

Licensing touchpoints, wallet/custody controls, consumer protection, AML/CFT & Travel Rule, outsourcing, incident response, and reporting — a structured outline for Digital Asset Service Providers.

Updated: 2025-09-02 · Jurisdiction: El Salvador/DASP · File: DOCX

What’s inside

  • Regulatory perimeter & licensing — services map, Key Persons, capital, dossier.
  • Conduct & consumer protection — disclosures, fees, complaints, conflicts.
  • KYC/KYB & Travel Rule — screening, risk scoring, monitoring, STR/SAR.
  • Wallets & custody — segregation, MPC/HSM, allowlists, daily recon, corp. actions.
  • Market integrity & listings (if venue) — DD, suspensions, surveillance.
  • Outsourcing — DD, SLAs, oversight, exit & resilience.
  • IT & cybersecurity — access/change, vuln mgmt, logging, backups.
  • Incidents & BCP/DR — severity matrix, runbooks, regulator notices.
  • Data protection — lawful bases, DSARs, transfers, retention.
  • Reporting & registers — returns, disclosures, mandatory logs.

Educational template — not legal advice. Align with current Salvadoran rules and your regulator’s guidance.

Download & next steps

Download the outline and map each policy to your licence scope, outsourcing model, and wallet architecture. We can expand this into a full policy suite and application pack.