What The FCA Really Looks For Before Approving an Application 

You’ve spent weeks pulling together your application. The forms are complete, the policies are drafted, the financial forecasts look sensible, and the business plan has been reviewed more times than you’d care to admit.

Finally, everything is submitted.

Then comes the waiting, and with it, a question that many firms quietly ask themselves: what is the FCA actually looking for?

A common misconception is that FCA authorisation is largely an administrative exercise. Complete the forms correctly, provide the requested documents, answer a few questions and approval should follow.

In reality, the FCA is doing something far more important. It is trying to establish whether your business is genuinely ready to operate as a regulated firm and deliver good customer outcomes from day one.

The documents matter, of course, but they are really just evidence. Genuine FCA application readiness extends beyond paperwork and requires firms to demonstrate operational capability, financial resilience and effective governance from the outset.

Behind every authorisation decision sits a much broader assessment of your business model, financial resilience, governance arrangements, leadership team, systems, controls and operational readiness.

The FCA Wants To Understand Your Business Model

One of the first things the FCA will assess is whether your business model makes sense.

That sounds obvious, yet many applications struggle because firms focus heavily on what services they intend to provide and far less on how the business will actually function and generate income.

The FCA wants to understand who your customers are, what problems you solve for them, how revenue will be generated and whether your strategy appears realistic. Ambitious growth projections are not automatically a problem, but unsupported optimism often is.

An FCA business plan should tell a coherent story. If a firm predicts substantial growth, the FCA will naturally ask what resources, systems and infrastructure exist to support it. The regulator is rarely persuaded by the argument that growth will somehow take care of itself once authorisation arrives.

Just as importantly, the FCA is not only assessing whether the business model makes sense on paper. It is assessing whether the people running the business genuinely understand it themselves. During the FCA application process, questions often follow the submission, and directors, proposed Senior Managers and business owners may be asked to explain elements of their business plan. When that happens, there is nowhere to hide behind a well-written document.

This is something firms occasionally underestimate. Consultants can help structure an application, challenge assumptions and develop a robust FCA business plan, while AI and other technology can support the drafting process. However, the FCA is authorising the firm and its leadership team, not the consultant or software used to create the application. If a business owner cannot clearly articulate how revenue will be generated, why particular FCA permissions have been requested, what risks the firm faces or how customers will be served, the FCA will usually spot the disconnect very quickly.

The strongest applications are rarely those with the most impressive wording. They are the ones where the business plan accurately reflects how the firm intends to operate and where the people leading the business can confidently explain, defend and demonstrate their thinking when challenged. A beautifully written plan that the applicant cannot articulate is often about as convincing as a sat nav that cannot explain where it is taking you.

Financial Resilience Matters More Than Many Firms Expect

Authorisation is not simply about whether a firm can launch.

The FCA wants comfort that a business can survive.

While financial forecasts form part of the application, the regulator’s attention extends far beyond the headline figures. It will assess whether assumptions are realistic, whether capital levels are appropriate and whether the business can continue operating if growth takes longer than expected or revenues fall short.

Every entrepreneur believes their forecasts are sensible. That’s understandable. The FCA’s role, however, is to challenge those assumptions and assess whether the business remains viable when reality inevitably introduces a few surprises.

A financially resilient firm demonstrates that it has considered both opportunity and risk, rather than relying exclusively on best-case scenarios.

Good practice is to stress test your forecasts before submitting them. Consider scenarios where revenue is lower than expected, expenses are higher, or growth is delayed. Understanding how your business would respond in less favourable circumstances demonstrates a level of planning and maturity that the FCA expects to see.

Firms should also be able to explain how they will maintain adequate financial resources as the business evolves. This might involve retaining capital within the business, securing additional funding if required, or having a clear understanding of the point at which management intervention would be necessary. The FCA does not expect firms to predict the future perfectly, but it does expect them to demonstrate that they have thought about what happens when things do not go entirely to plan.

Strong FCA application readiness means preparing for less favourable outcomes as well as expected growth. Firms that understand how they would respond to financial pressure are often in a much stronger position to demonstrate resilience during the authorisation process.

Ultimately, strong financial forecasts are not about producing the most optimistic numbers. They are about showing that the firm understands its financial risks, has considered realistic outcomes and has a credible strategy for remaining sustainable over the longer term.

Permissions Must Match Reality

Selecting FCA permissions can appear relatively straightforward, but it is one of the areas where applications frequently encounter difficulties.

The permissions requested should accurately reflect the activities the firm intends to undertake, both now and in the foreseeable future. Request permissions that are too narrow and future growth may be unnecessarily restricted. Request permissions that are too broad and the FCA may reasonably ask whether the firm possesses the expertise, systems, controls and resources needed to undertake those activities safely.

This is why permissions should be considered early in the FCA application process, not just before submission. Many firms focus on the application fee itself while overlooking the wider costs of preparation. We regularly see firms identify additional activities at the eleventh hour and assume they can simply add another permission “just in case”. In reality, changing permissions often has a knock-on effect across the application, requiring updates to the business plan, financial forecasts, governance arrangements, policies and operational procedures.

A well-prepared application will have a clear rationale for every permission requested, with each one reflected consistently throughout the wider submission. The FCA wants to see alignment between your permissions, business model and operational capability. When those elements tell the same story, the application process tends to be far smoother.

Systems, Policies And Compliance Resource Must Be Operational

A common misconception is that firms simply need a collection of compliant policy documents.

In reality, the FCA is interested in whether those documents translate into real-world operations. Policies should set out the firm’s approach, but they should be supported by clear procedures that demonstrate how the business will actually operate in practice. Simply reproducing rules, regulations or legislation rarely tells the FCA anything about how the firm intends to identify risks, make decisions or deliver good customer outcomes.

Strong applications are able to articulate not only what the firm intends to do, but how it intends to do it. They explain why particular controls have been implemented, how risks will be identified and escalated, and how governance and oversight arrangements support good outcomes for customers. The difference between a policy that sits on a shelf and one that genuinely supports the business often comes down to whether staff could realistically follow it in their day-to-day role.

This principle extends to monitoring and management information. In a Consumer Duty world, it is no longer sufficient to list a handful of arbitrary MI metrics because they appear in other firms’ compliance monitoring programmes. The FCA increasingly expects firms to explain what they are monitoring, why they are monitoring it and what action they will take when something falls outside expected parameters. Firms that have considered the entire customer journey and developed a monitoring strategy around key risks, customer outcomes and potential harm are often better placed when faced with regulatory scrutiny.

The FCA will also consider whether sufficient compliance resource exists to support the business on an ongoing basis. This is particularly relevant where individuals perform multiple roles within the firm. For example, where an SMF16 also holds wider operational responsibilities, the FCA will want comfort that compliance duties can be performed effectively alongside those other commitments. The question is not simply whether someone can hold the role, but whether they have the capacity, time and support to discharge their responsibilities properly when routine compliance work, emerging risks and unexpected issues inevitably compete for attention.

External compliance support can play an important role, and many firms choose to supplement their internal resource in this way. However, outsourced support does not remove accountability. The FCA still expects firms to demonstrate that appropriate ownership, oversight and decision-making remain within the business.

Effective FCA application readiness is often reflected in how clearly firms can demonstrate that policies, controls, governance arrangements and compliance oversight operate in practice rather than existing solely for the purposes of an application.

Ultimately, what matters is demonstrating that compliance forms part of the operating model rather than sitting in a folder that receives far more attention during the application stage than afterwards.

FCA Application Readiness: Final Checks Before You Submit

FCA authorisation is not a paperwork exercise.

It is the FCA’s assessment of whether your business is genuinely prepared to operate as a regulated firm.

The application forms, policies, forecasts and governance documents are simply the evidence used to answer that question.

Before submitting an application, it is worth stepping back and asking yourself a simple question: if the FCA looked beyond the paperwork, would they see a business that is operationally ready, financially resilient, properly governed and capable of delivering good customer outcomes?

Firms that invest time in FCA application readiness are often far better equipped to answer that question with confidence.

If the answer is uncertain, now is the time to find out.

Book an FCA Application Readiness Call with B-Compliant for an independent assessment of your preparedness before you submit. Alternatively, complete our FCA Application Readiness Assessment to identify potential gaps, improve your FCA application readiness and understand the areas most likely to attract FCA scrutiny during the authorisation process.

Because when it comes to FCA application support, the regulator is rarely asking, “Have you completed the forms?”

They’re really asking, “Are you ready?”