HANFA is the Hrvatska agencija za nadzor financijskih usluga, the Croatian Financial Services Supervisory Agency. It supervises the non-banking financial sector: capital markets and investment firms, insurance, pension funds, leasing and factoring companies. Croatian banks are supervised by the Croatian National Bank, which since euro adoption operates inside the euro area supervisory arrangements. So the split follows the common European pattern, a market and non-banking authority on one side and a central bank on the other.
What changed with the euro
Croatia adopted the euro at the beginning of 2023 and joined the Schengen area at the same time. For a trading firm this removed two practical frictions rather than any regulatory requirement. The first was currency: a Croatian entity now holds client money and settles in euro, which eliminates the conversion layer that made Croatian structures awkward for EU facing brokerages. The second was perception. Bank onboarding questionnaires ask about jurisdiction risk, and euro area membership is a data point that compliance teams weight positively, however crudely.
What did not change is the substantive framework. Croatia has implemented the EU investment services regime since accession, so an authorised Croatian investment firm holds MiFID II permissions from the same list as anywhere else, with the same governance, capital, conduct and reporting obligations, and the same ability to notify into other member states under the passporting regime.
What an application looks like
The mechanics are the EU standard and the friction points are predictable. Management have to be assessed as fit and proper, with experience relevant to the permissions sought, and a board assembled purely for the file rarely survives interview. The business plan has to reconcile: projected client numbers, revenue model, cost base and capital adequacy under stress. Capital is scaled to the permissions applied for, and a firm that wants to deal on own account is in a different bracket to one that only transmits orders, which is the point capital requirements for brokers covers in detail.
Two Croatian specifics are worth flagging. Language matters: documentation and client facing disclosure for local clients will be expected in Croatian, and translation is a real cost line. And substance is not optional. A firm authorised in Zagreb whose entire staff sits in another country invites the question of what HANFA is actually supervising, and that question does not get easier with time.
Descriptive only. Croatian authorisation requirements are matters for Croatian counsel and for HANFA, and nothing here substitutes for either.
Who accepts a Croatian licence
Here is the practical ranking, and it is the same structure that applies to any smaller member state.
| Counterparty | What actually decides it |
|---|---|
| Correspondent banks | Entity type and supervisor open the file. Client residency mix, FATF listed exposure, third party payment volume and sanctions screening quality decide it. |
| Card acquirers | Leveraged trading sits in high risk merchant categories regardless of member state. Reserves, settlement delay and chargeback monitoring follow from the category. |
| Liquidity providers | A supervised EU entity is normally required. Credit and collateral terms then track your financials. |
| Platform vendors | Lawful authorisation plus the vendor's own contractual conditions. Jurisdiction is rarely the blocker. |
| Ad platforms and app stores | Financial services verification asks for a regulator reference valid in each target country. An EU licence answers for the EU. |
The pattern to take from that table is that the licence is a gate, not a grade. Passing the gate is binary and an EU authorisation passes it. What happens afterwards is priced on your business, and a firm with clean domestic flows and disciplined onboarding gets better terms from every counterparty in the list than a firm with the same licence and a messy client base. This is why high risk merchant categorisation frustrates founders who expected regulation to solve payments. Regulation solves eligibility. It does not solve risk.
The reporting burden nobody budgets for
An authorised EU firm carries a permanent data obligation, and Croatia is no exception. Transaction reporting requires complete records with correct instrument identification, timestamps at the required precision, and identification of the client and the decision maker behind each order. Best execution obligations require you to be able to show why an execution venue was chosen and to review that choice periodically. Client asset reconciliations run continuously. Regulatory returns arrive on a calendar that does not care about your product roadmap.
Every one of those is a property of your technology stack rather than your compliance team. A firm running a platform that cannot export clean order and execution data ends up staffing the gap with people, and that cost persists for the life of the licence. Founders comparing member states on application fees are optimising a one off number while ignoring the recurring one, which is usually an order of magnitude more significant over a five year horizon.
When Croatia is the right choice
Croatia works for a firm with genuine Adriatic or south eastern European operations, local staff, and clients in the region. It works less well as a passporting flag of convenience, and that judgement holds for every small member state: the supervisory attention per firm is higher, the local professional services layer is thinner, and the cost saving against a larger jurisdiction is smaller than founders assume once translation, local hires and audit are counted.
What Croatia definitively does is beat the offshore alternative for anyone serving EU clients. An offshore registration cannot be marketed into the EU, cannot complete ad platform verification for EU countries, and increasingly cannot hold a European banking relationship at all. A modest EU authorisation is not glamorous, and it functions. SINGUARD builds the platform, CRM and portal software these firms run on. It sells software, holds no financial licence and offers no legal advice.
"Small member states are not shortcuts. They are the same rulebook with fewer lawyers who have done it before."
— Alex Onta, Executive Director, SINGUARD
Key Takeaways
- HANFA supervises Croatia's non-banking financial sector including investment firms, while banks are supervised by the Croatian National Bank.
- Euro and Schengen membership since 2023 removed the currency layer and improved how Croatian entities read on bank onboarding questionnaires.
- Croatian disclosure and documentation for local clients is expected in Croatian, and translation is a real recurring cost, not a one off.
- A licence is a gate, not a grade. EU authorisation makes you eligible, then client mix and controls decide the terms every counterparty offers.
Frequently Asked Questions
What does HANFA regulate?
HANFA supervises Croatia's non-banking financial services sector, which includes capital markets and investment firms, insurance undertakings, pension funds, and leasing and factoring companies. Croatian credit institutions are supervised by the Croatian National Bank within the euro area supervisory arrangements.
Can a Croatian investment firm serve clients elsewhere in the EU?
Yes. Croatia implements the EU investment services framework, so an authorised Croatian firm can notify into other member states cross border or through a branch. Host state marketing rules, language expectations and local conduct requirements still apply in each market entered.
Is a Croatian licence cheaper than a Cyprus one?
Cost comparisons are misleading because the visible fees are a small part of the total. Local hires, translation, audit, ongoing reporting and professional advice usually dominate, and a smaller market with fewer specialists in retail brokerage can cost more in advisory time. Choose the jurisdiction where your operations genuinely sit and take local advice on the full cost.
About the Author
Alex Onta is an Executive Director at SINGUARD. He built eTrader, the terminal, the mobile apps, eTrader Broker, Copytrading, Business and Community, along with the worldwide clustered-server infrastructure it all runs on, with his brother Roman Onta helping on the design, and he leads that division today. Together with Roman he builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals, and the two of them carry worldwide compliance, payment processing and international business structuring side by side. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.