Questions & Answers

Frequently Asked Questions

Last updated: May 7, 2026

Plain-English answers about working with Nimbus Cloud and the reference materials we point clients to. If you have a question that isn't here, email tradecompliance@nimbusdev.net.
About Nimbus Cloud

What does Nimbus Cloud actually do?

We help families and small businesses keep their financial and identity data clean, traceable, and protected. That means screening transactions and counterparties against sanctions and watchlist data, monitoring for suspicious activity, and producing the kind of documentation regulators and auditors expect.

What is the Strategic Compliance Program?

It's our standing program for clients who want their compliance posture managed proactively rather than reacting to a problem. It covers proper business structure (entity formation and ownership), the screening and monitoring of transactions and counterparties, and the documentation that regulators and auditors expect — and we keep all of it current as rules and watchlists change.

Do I need to be a big company to work with Nimbus?

No. We work with families and small businesses who want the same compliance discipline larger institutions are expected to have. Most of our clients aren't compliance professionals — that's the point.

About the Library

Why do you point clients at all these government documents?

The frameworks we operate inside are public. The same standards a Fortune 500 bank's compliance team works against (FATF, OCC, Treasury) apply to anyone touching financial flows. We post the source documents so you can see what we're working from instead of taking our word for it.

Do I need to read all of these to work with you?

No. They're reference material, not required reading. Our team handles the day-to-day interpretation. The Library is there for when you want to dig into a specific topic, hand a doc to your attorney, or check our reasoning.

What is the FATF 40 Recommendations?

FATF stands for Financial Action Task Force, an international body that sets the global standards for fighting money laundering and terrorist financing. The "40 Recommendations" are the rules countries (including the United States) build their AML laws around. Reading these gives you the foundation everything else is built on.

What is the National Illicit Finance Strategy?

It's the U.S. Treasury Department's plan for fighting money laundering, terrorist financing, and similar threats. The 2024 version covers what Treasury sees as the biggest risks through 2026 and where they want banks, businesses, and regulators to focus.

What is NCIRP?

NCIRP is the National Cyber Incident Response Plan, published by CISA (the Cybersecurity and Infrastructure Security Agency). It's the government's playbook for who does what during a major cyber incident. Useful background for any business thinking about its own incident-response plan.

What is the OCC Asset Management Handbook?

The OCC (Office of the Comptroller of the Currency) is the agency that supervises national banks. Their Asset Management Handbook explains what bank examiners look for when they review trust, investment, and custody activity. If you have any of those services through a bank, this is what their compliance team is being measured against.

Are the documents updated?

The original publishing agencies (FATF, Treasury, OCC, CISA) update them on their own schedules. We refresh our copies when new versions come out. The "Last updated" date at the top of the Library tells you when our copies were last refreshed.

About Working with Us

How do I start?

Email tradecompliance@nimbusdev.net or use the "Talk to Us" button on the home page. We'll set up a short call to figure out whether we're a fit, and what your starting point looks like.

What does it cost?

It depends on scope. We're not a $99-a-month tool. Our work is typically scoped per engagement. We'll give you a clear quote after the first conversation.

Will my data be safe?

Every engagement starts with a signed Financial Non-Disclosure Agreement (NDA). We log every document touch, retain audit trails, and operate on a need-to-know basis internally. The Compliance Notes page goes into detail on data handling.

Can I see the documents you'd send me before signing up?

Yes — the public reference materials we rely on are right here on the Library page. Engagement-specific documents (NDA, full disclosure) are shared directly with you when we start working together.

Who do I contact about a specific document?

Email tradecompliance@nimbusdev.net with the document name and your question. We'll route it to the right person on our team.