For the process of applying for the license or any kind of compliance in any jurisdiction, there is a significant cost to be incurred. The high cost of compliance is not only for crypto businesses, but even for traditional Financial Institutions (FIs), one of the challenges for executives is the costs incurred for compliance with regulations. These traditional and conventional FI pour lots of money on human resources, where professionals are needed in manual work for compliance matters like internal procedures, security policy, solving issues like False Positives and to know what the organisation do not know – identify security posture gaps. However, the entire industry is evolving, where there are better solutions coming up. If organisations can streamline those manual compliance process and turn them into a technological format, where there is certified and audited ways to ensure that these processes cannot be junked/ manipulated/ altered externally without approved control or access, they can be more cost-efficient. And this explains the booming regulatory technology (RegTech) industry, where to a large extent, these RegTech can automate some of these compliance processes to help companies save some costs, especially for start-ups. Taking the example of False Positive, it used to be a manual process, but now with technology like Artificial Intelligence (AI), simple algorithms to define the limits that organisation can implement at policy level can help reduce false positive. The digital assets (crypto) industry is a very young industry where regulators are very forthcoming in the use of technology. The idea is to understand the regulatory requirement well and to meet those regulatory requirements using technology and not using manual process. Here is a suggestion given by Jonathan to a start-up: Set out all your governance policies and procedures first and then test them in the sandbox. This exercise is not expensive, where you do not need much manpower resources to do it. Once tested out in the sandbox, where you run them through a machine, you will have a good idea of whether those processes/algorithm that was put in place make sense or not. Keep repeating the process until you have a perfect set of algorithms running your policies and procedures.