Cyprus Fund Administrator Licence 2026: The Authorisation That Actually Exists (and the One That Doesn't)

“How do I get a fund administrator licence in Cyprus?” is a question with a surprising answer: there isn’t one — at least not as a discrete, named authorisation. Cyprus regulates the activity of fund administration through existing frameworks rather than through a standalone permit, and knowing which framework applies to you is the whole game. Getting it wrong means either over-licensing a business that never needed a CySEC file, or operating an administration business that quietly needed one.Cyprus Securities and Exchange Commission (CySEC), regulated-entity categories

This guide sets out the honest position: who the supervisor is, which laws bite, what “administration” actually covers, the three real authorisation routes, the capital and fit-and-proper tests, the process, and how a Cyprus administration company is taxed in 2026. It is written for founders building fund-services businesses and for fund promoters deciding whether to administer in-house or outsource.

Is there a fund administrator licence in Cyprus?

No standalone one. Unlike Ireland or Luxembourg, Cyprus does not issue a dedicated “fund administrator” authorisation. Administration is instead treated as a regulated function within existing regimes — the collective-management framework for funds and their managers, and the Administrative Service Provider (ASP) regime for corporate and fiduciary administration.

That distinction matters commercially. A promoter who assumes they must secure a heavyweight CySEC investment-services licence just to keep a share register and calculate a net asset value is usually mistaken. And a corporate-services firm that starts offering “fund administration” to third-party funds without checking whether its bundle of services falls inside the ASP Law can equally find itself on the wrong side of the line. The right question is never “which fund administrator licence do I apply for?” but “under which of the three routes is my specific activity authorised?”

Who regulates fund administration and under which laws?

The Cyprus Securities and Exchange Commission (CySEC) is the single supervisor across the whole chain — funds, fund managers and Administrative Service Providers. The governing statutes are the AIF Law 124(I)/2018, the AIFM Law 56(I)/2013 and the ASP Law 196(I)/2012, sitting on top of the EU AIFM Directive.

CySEC’s published register of regulated entities lists Alternative Investment Funds, AIF Management Companies, UCITS and management companies, small AIFMs, and — separately — ASPs providing fiduciary services.CySEC, categories of regulated entitiesThe Cyprus AIFM Law transposes the Alternative Investment Fund Managers Directive, whose Annex I is the anchor for what “administration” legally means.Directive 2011/61/EU (AIFMD), Annex IThe ASP Law — the Regulation of Companies Providing Administrative Services and Related Matters Law — is the framework under which third-party corporate and fund administration is licensed and monitored.Law 196(I)/2012 (Administrative Service Providers)

One carve-out is decisive for professional firms: advocates supervised by the Cyprus Bar Association and accountants supervised by ICPAC are excluded from the ASP Law when they provide administrative and fiduciary services within their own regulated practice. Their professional bodies, not a separate CySEC ASP file, supervise that activity.Law 196(I)/2012, scope and exclusions

What does fund administration actually cover?

“Administration” is a defined list, not a loose label. AIFMD Annex I treats it as a permitted non-core function of a fund manager and enumerates it: fund accounting, valuation and pricing, regulatory compliance monitoring, the unit-holder register, income distribution, subscriptions and redemptions, contract settlements and record keeping.

The Annex I administration sub-list is the reference point every Cyprus practitioner uses:Directive 2011/61/EU (AIFMD), Annex I, point 2(a)

• Legal and fund-management accounting services;
• Customer inquiries;
• Valuation and pricing, including tax returns;
• Regulatory compliance monitoring;
• Maintenance of the unit-holder / shareholder register;
• Distribution of income;
• Unit / share issues and redemptions;
• Contract settlements, including certificate dispatch;
• Record keeping.

Two functions sit just outside this list and are frequently confused with it. Portfolio and risk management are the manager’s corefunctions — delegating those requires an authorised asset manager, not an administrator. Safekeeping of assets is the depositary’sjob: a Cyprus AIF must appoint a depositary, which is a distinct role from the administrator and cannot be collapsed into it.

What are the three authorisation routes?

Route one: the manager administers in-house. Route two: the manager delegates administration to an external provider under the delegation rules. Route three: an independent company provides administration to third-party funds under a CySEC ASP authorisation. Which one you need depends on who you are and whom you serve.

1. In-house, by the fund manager.An authorised AIFM, UCITS management company or self-managed fund may perform administration itself as a permitted non-core function under Annex I. No separate administrator licence is required — the manager’s own authorisation covers it.AIFM Law 56(I)/2013; AIFMD Annex I
2. Delegated to an external administrator.The manager may outsource administration under the AIFMD/AIFM-Law delegation regime, on prior notification to CySEC, provided there is an objective reason, the delegate has adequate resources and good repute, and the manager retains oversight and the ability to terminate. Delegation never shifts the manager’s legal responsibility.
3. Independent ASP serving third-party funds.A company offering fund administration to funds it does not manage — typically bundled with directorship, registered office, corporate secretarial and nominee services — is carrying on administrative services within Law 196(I)/2012 and needs a CySEC ASP authorisation, unless it qualifies for the Bar/ICPAC professional exclusion.Law 196(I)/2012 (Administrative Service Providers)

For most independent fund-administration start-ups, route three — the ASP authorisation — is the operative one. It is also the route most often mislabelled in the market as a “fund administrator licence.”

What capital and fit-and-proper tests apply?

The ASP regime leans on fit-and-proper vetting, professional indemnity insurance and adequate own funds rather than one large fixed capital number. Where administration is instead done in-house by an AIFM, the manager’s own initial capital applies under AIFMD Article 9.

For an ASP, CySEC assesses the applicant company, its directors and its beneficial owners for honesty, competence and financial soundness; requires professional indemnity insurance and adequate own funds proportionate to the services; and imposes full anti-money-laundering obligations under the Prevention and Suppression of Money Laundering Law 188(I)/2007. There is no single headline share-capital figure the way there is for an investment firm — confirm the current own-funds and insurance parameters directly with CySEC before you budget.Law 196(I)/2012; Law 188(I)/2007 (AML)

For an AIFM that administers in-house, the EU-wide initial-capital floors apply: broadly EUR 125,000 for an externally appointed AIFM and EUR 300,000 for an internally-managed fund, with additional own funds of 0.02% of assets under management above EUR 250 million and professional indemnity cover (or additional own funds) for professional liability.Directive 2011/61/EU (AIFMD), Article 9These are minimum thresholds; the amounts CySEC expects in practice can be higher depending on the fund’s scale and risk profile. Every regulated entity in this chain also sits in the compulsory statutory-audit tier— the small-company review option does not reach licensed funds, managers or ASPs.

What is the authorisation process and timeline?

Incorporate the Cyprus company, build the substance and governance pack, then file the relevant CySEC application — an ASP authorisation for an independent administrator, or the manager authorisation where administration is in-house. Expect a multi-month review driven by CySEC’s questions, not a fixed statutory clock.

1. Incorporate the vehicle.A Cyprus private limited company is the standard base — see the full company registration guide. CySEC applications are for Cyprus companies with real presence on the island.
2. Assemble governance and substance. Fit-and-proper directors, a qualified compliance and AML function, an organisational and internal-control manual, business plan and financial projections, professional indemnity insurance, and evidence of adequate own funds.
3. File with CySEC. Submit the ASP application (or, for in-house administration, the AIFM/manager application) with the full documentation pack and fees. CySEC reviews completeness, then substance.
4. Respond to review rounds.The realistic timeline is set by how quickly you clear CySEC’s follow-up questions on governance, AML and financials — typically several months rather than weeks.
5. Go live under supervision. Once authorised, ongoing obligations kick in: regulatory reporting, AML monitoring, an annual statutory audit, and continuing fit-and-proper compliance.

How is a Cyprus fund administration company taxed in 2026?

The administration company itself is an ordinary Cyprus company: corporate income tax at 15% from 1 January 2026 on its fee profits, with the usual participation and dividend rules. The fund vehicles it services are taxed under their own regime. Non-domiciled principals draw dividends free of the Special Defence Contribution.

Cyprus raised its headline corporate income tax rate to 15% with effect from 1 January 2026, aligning with the OECD/EU global-minimum-tax framework; that is the rate on the administrator’s trading profit from administration fees.Income Tax Law N.118(I)/2002 (as amended by the 2026 tax reform)A non-domiciled shareholder receiving dividends from the company pays no Special Defence Contribution on those dividends for up to 17 years of Cyprus residence — the mechanics are set out in our non-dom status guide, and the company-level rate in the corporate tax guide. The fund vehicles themselves — an AIF or its sub-funds — are taxed under the rules applicable to those structures, which differ from the administrator’s own position and should be modelled separately.Special Contribution for the Defence Law N.117(I)/2002

What are the common structuring mistakes?

The recurring errors are treating administration as if it were a licensable investment service, collapsing the depositary role into administration, and assuming a corporate-services firm can administer third-party funds without an ASP file. Each is avoidable with the right route analysis up front.

• Over-licensing.Applying for a heavy investment-services authorisation to do work that is administration, not portfolio management. Administration is a non-core function — the manager, or an ASP, is the correct home.
• Confusing administrator and depositary. A Cyprus AIF must appoint a depositary for safekeeping; that is a separate role and cannot be substituted by the administrator.
• Under-licensing a services firm.Bundling fund administration with directorship, registered office and nominee services for funds you do not manage puts you inside the ASP Law — unless the Bar/ICPAC professional exclusion applies.
• Ignoring delegation formalities. Outsourcing administration without CySEC notification, an objective reason and retained oversight breaches the delegation rules even though the manager keeps legal responsibility.