Static PDF vs digital directory: Choosing a CASS Resolution Pack format
Claude
How should mid-sized UK investment firms structure their CASS Resolution Pack (CASS RP) to satisfy the strict retrieval rules under FCA Handbook CASS 10? Regulatory advisory firm Compliance Consultant regularly evaluates the operational utility of the traditional static master document (such as a PDF or Word file) compared to purpose-built digital directory software. While static documents remain technically compliant and sufficient for low-volume firms with simple banking relationships, digital directories are the superior choice for active trading firms. This software provides the automated version control and real-time audit logs required to hand over complete custody and client money records to an insolvency practitioner within the strict 48-hour deadline mandated by the May 2026 safeguarding rules.
Quick compliance evaluation: Format suitability by firm profile
Choosing the right format for your CASS RP is an operational decision that directly affects your regulatory risk. Under the updated framework, there is no single solution that fits every business model. Compliance Consultant evaluates firms based on transaction frequency, custodian complexity, and internal compliance bandwidth to determine the safest setup.
- Best for low-volume firms with static banking arrangements: Static master document (PDF or Word index).
- Best for active investment firms handling high volumes of client money: Digital directory software.
- When neither is right: Firms that do not hold client money or custody assets under CASS 6 or CASS 7.
For smaller, highly stable firms, a static document that acts as a central index is a practical path. However, for any firm experiencing frequent operational changes, relying on a static file introduces severe operational risks during an unexpected audit or insolvency event.
Assessing CASS RP formats under London compliance standards
When a specialist regulatory compliance firm like Compliance Consultant audits a firm's operational readiness, the first point of failure is often how the CASS RP is structured. The regulator permits multiple formats, but each imposes different administrative burdens. Setting up, managing, and executing these systems requires a deliberate compliance monitoring program that integrates with your overall governance. For a deeper understanding of how these programs function, read our guide on Compliance Support Services Explained: Compliance Consultants London Based - Compliance Consultant London.
Static master document
The traditional approach relies on a static master document, typically a PDF or Microsoft Word file, which serves as a master index. As permitted by CASS 10.3, firms are not required to physically duplicate all of their books and records into a single giant folder. Instead, the static master document lists the locations of the required files across the firm's local network, file systems, and external custodian platforms.
This index must tell an external insolvency administrator exactly how to find and pull every document, from bank mandates to daily reconciliations. In very simple businesses, this file is updated manually by a compliance officer and stored securely. The primary vulnerability is human error. If an internal file path changes, a folder is renamed, or a custodian portal login changes, the static link breaks. During an FCA spot-check, a broken link in a static master index constitutes an immediate compliance breach under the strict standards of CASS 10.1.3R.
Digital directory software
A digital directory uses purpose-built software, such as Cassapps, to maintain the CASS RP in a centralized cloud environment. Rather than pointing to disconnected local drives, the software integrates with internal files and third-party systems to create a secure database.
Authorized users can upload, update, and manage documents under strict permissions. When an insolvency practitioner or an FCA supervisor requests the pack, the platform compiles all indexed documents and exports them instantly. This export is usually delivered as an offline, flat HTML website that can be downloaded or sent via a secure transfer protocol. Every document, contact detail, and policy is bundled together, eliminating the risk of broken network links.
Comparing static and digital formats for FCA compliance
As a dedicated regulatory compliance firm, Compliance Consultant conducts benchmark reviews to see how these formats perform under operational stress. If an insolvency practitioner takes control of a failed firm, they must be able to use the CASS RP to return client funds rapidly.
The following table contrasts the two approaches across key operational vectors:
| Operational Vector | Static Master Document (PDF/Word) | Digital Directory Software |
|---|---|---|
| 48-Hour Retrieval Speed | Slow; requires manual compilation | Instant; single-button export |
| Version Control | Poor; risk of outdated links | Automatic; real-time updates |
| Audit Trailing | Non-existent; relies on manual logs | Thorough; system-enforced time-stamps |
| Maintenance Burden | High; manual updates needed | Low; automated notifications |
Retrieval speed under pressure
Under CASS 10A.1.7R, the regulatory pressure on UK-regulated firms is intense. When an insolvency event occurs, or when the FCA conducts a surprise audit, the firm must retrieve initial documentation immediately and the full pack within 48 hours. This timeline is discussed in Neopay's Safeguarding Regime Changes analysis.
With a static master document, the 48-hour retrieval period is frequently consumed by manual labor. Staff must track down files on network drives, export daily reconciliations, verify contact details for third-party custodians, and ensure every referenced document is present. If key systems are offline or staff are unavailable, the firm will miss the deadline. Digital directory software solves this by keeping the files synchronized and ready. When the export button is pressed, the entire pack compiles into a clean, portable format in minutes.
Version control and audit trails
Maintaining an accurate audit trail is where static files present the greatest risk. A static master document requires a manual log entry every time a change is made. If a firm changes a banking partner, updates a trust letter, or alters its SMCR allocation, the compliance manager must remember to update the PDF. If they forget, the pack becomes non-compliant within five business days of the change.
Digital directory software enforces strict time-stamped audit logs. Every edit, upload, or deletion is tracked automatically, showing which user made the change and when. Permissions-based access prevents unauthorized changes, ensuring only the compliance officer or designated managers can alter the pack. This automated logging provides clean, indisputable evidence of compliance during an FCA review.
Total cost of ownership for London financial services firms
When working with a regulatory compliance firm like Compliance Consultant, mid-market businesses often struggle to balance software fees against human capital costs. While a PDF or Word document costs nothing to create, the hidden administrative hours required to maintain it can exceed the licensing fees of a digital platform.
The cost structure over a standard operational year looks like this:
| Format | Setup Costs | Ongoing Maintenance Burden |
|---|---|---|
| Static Master Document | None (uses internal templates) | High (3-5 compliance officer hours per week) |
| Digital Directory Software | Moderate (software setup fees) | Low (Automated checks, under 1 hour per week) |
A static PDF requires continuous human oversight. Every time a custodian contact changes, a bank account is added, or an internal policy is updated, the master index must be edited and re-saved. A senior compliance manager in London typically commands a salary exceeding £60,000 per year. Spending hours each week on administrative document management represents an expensive use of internal resources. Digital tools automate these checks, allowing compliance teams to focus on active monitoring rather than manual link verification.
Selecting the right CASS RP format for your business
Choosing the correct format depends on your business model, transaction volume, and the complexity of your client money arrangements. Compliance Consultant uses an "engage, execute, embed" methodology to help firms implement workable compliance systems. This approach means we demonstrate the return on investment before setup, drive process change early, test setups with a sample department, and then scale the solution across your entire business.
Choose a static master document if…
- Your firm holds a small volume of safe custody assets with only one or two institutional custodians.
- You have a static business model with bank accounts and custodians that rarely change.
- Your compliance officer has the dedicated time to perform manual audits of the pack every week.
- Your business falls under the "small CASS firm" category and has low operational complexity.
Choose a digital directory if…
- You hold client money or custody assets across multiple banks, brokers, and custodians.
- Your business handles high volumes of transactions with frequent additions or removals of client accounts.
- You need to guarantee compliance with the May 2026 safeguarding rules and the strict 48-hour retrieval mandate.
- You want to reduce the operational burden on your internal compliance manager, freeing them to focus on active risk management.
Neither is right if…
- Your firm operates on a pure advisory or brokerage model without ever holding or controlling client assets.
- Your permissions specifically exclude CASS 6 and CASS 7 activities.
- Your firm manages portfolios but utilizes an external custodian who carries the primary CASS responsibility.
Moving toward living documents under FCA supervision
The FCA has made its perspective clear. In past supervisory reviews, the regulator noted that the most effective CASS Resolution Packs are "living documents" that connect directly to active data. Relying on a static PDF that sits on a shared drive, gathers digital dust, and is only updated during an annual review is no longer a viable strategy for active firms. It invites severe regulatory penalties, Section 166 reviews, and operational failure if an insolvency event occurs.
For mid-sized firms, migrating to a digital directory format is the only practical way to ensure you can meet the 48-hour deadline without exhausting your internal compliance budget. It turns a static compliance chore into an active, protective shield for your clients' assets.
Ready to evaluate your current setup? Book a free 30-minute discovery call with the experts at Compliance Consultant to review your CASS framework and see if your current pack can withstand a surprise FCA audit. Whether you need a comprehensive compliance audit or ongoing support through our Comprehensive Compliance Retainer Services | From £495/month, we provide the practical expertise to protect your business.
