Your Luxembourg company's compliance, text by text
Normivia assesses Luxembourg law and the EU texts that apply to your company, with the official source of each verdict, in French or English.
What Normivia assesses in Luxembourg
Each obligation is verified against the official text, article and penalty included, then applied to your profile: size, sector, activity.
Register of beneficial owners (RBE)
Any entity registered with the Trade and Companies Register enters its beneficial owners and each change within one month. Fine of €1,250 to €1,250,000.
Source Law of 13 January 2019, art. 3, 4, 20 and 21
Whistleblowing reporting channel
From 50 workers: a confidential internal channel, acknowledgement within 7 days, feedback within 3 months. Fine of €1,500 to €250,000.
Source Law of 16 May 2023, art. 6, 7 and 18
NIS2 — cybersecurity
Essential and important entities: risk management, notification of significant incidents within 24 hours. Up to €10,000,000 or 2% of worldwide turnover.
Source Law of 5 May 2026, art. 11, 12, 14 and 26
E-invoicing to public bodies
Any invoice to a Luxembourg contracting authority: European standard EN 16931, via the Peppol network, since 18 March 2023.
Source Law of 16 May 2019, art. 4bis
Anti-money laundering (AML/CFT)
Financial sector and obliged professions (accountants, auditors, lawyers, notaries, real estate): customer due diligence, reporting to the FIU. Up to €5,000,000 or 10% of turnover for a credit or financial institution.
Source Amended law of 12 November 2004, art. 2 and 8-4
Outsourcing — CSSF Circular 22/806
Institutions supervised by the CSSF: outsourcing register, notification at least three months before outsourcing a critical or important function.
Source CSSF Circular 22/806; law of 5 April 1993, art. 63
Internal governance — CSSF Circular 12/552
Credit institutions: central administration, risk management, internal control. Up to 10% of total annual net turnover for a CRR institution.
Source CSSF Circular 12/552; law of 5 April 1993, art. 63-2
And the EU texts
Established in the Union, your company is also subject to the EU regulations and directives in the catalogue (GDPR, DORA, AI Act, CSRD…). Normivia assesses them according to your sector and size, as for any EU company.
In French and English
Each user chooses their language in the Cockpit: screens, emails, reports and the texts of the standards. In English, each text links to its English version when one exists (EUR-Lex, CSSF, Fedlex), with its legal value stated.
Verified sources
Laws verified on Legilux, the Official Journal of the Grand Duchy, and on the CSSF's consolidated texts. The laws we track are monitored every month in the Official Journal; each change is reviewed by a human before any update.