CARF is the OECD's global reporting standard, and collection is already live. Kryptos finds your reportable users, validates their TINs, computes their gains, and builds the exact file each authority accepts, from the OECD schema to national formats. You file once, and the network passes it to every country your users are resident in. DAC8 is the EU's version of the same rules, running on the same pipeline. And it doesn't stop at your obligation: the same data powers a white-label Tax Centre for your users, so you keep them and stay compliant at once.
SOC 1 & 2 Type II. From the OECD schema to national formats like Sweden's KU94. Live in weeks.
Bring in exchanges, wallets and chains through the API or a file upload. Kryptos reconciles everything into one clean, deduplicated feed.
Capture self-certifications, validate TINs, and resolve where each user is reportable. Anyone who won't certify hits the 60-day cadence.
Cost basis, gains and the retail-payment threshold per asset, in the currency and method each jurisdiction requires.
Generate the OECD schema and every national format, pass a hard XSD gate, and file once for automatic exchange across the network.
The whole obligation runs on one data layer, whether you file in the UK, New Zealand, or an EU member state. Your users get a white-label Tax Centre from the same data, in parallel.
Pull transactions from every exchange, wallet and chain through the API or a file upload, deduplicated into one clean feed. 150+ chains, 100+ venues.
Self-certification capture, three-tier TIN validation, and the 60-day kill-switch: two reminders, then reportable transactions are blocked until the user certifies, and cleared the moment they do.
Cost basis and fair value per asset, with the retail-payment threshold applied. The moving-average or FIFO method your jurisdiction requires, in the right currency.
Valid CARF XML v1.5 for the OECD network, plus the national envelopes a standard build can't produce, like Sweden's KU94. The exact format each authority accepts.
Three-tier XSD validation before anything leaves the building, so a filing never bounces. 450+ test cases and a tax-authority-validated schema behind it.
File once with your home authority. The OECD Common Transmission System passes it to every jurisdiction your users are resident in. Kryptos is your processor, you stay the controller.
We'll map your obligations with you and show the pipeline on your own data.
Centralised venues with users across dozens of jurisdictions. Work out who's reportable and where, validate TINs, and file each authority's format from one platform.
Custodial wallet providers in scope as reporting CASPs. The full self-certification and due-diligence workflow, with the audit trail, and no build.
Broker-dealers handling crypto for clients. CARF and DAC8 alongside domestic layers like the US 1099-DA and its backup withholding, on one data layer.
Firms guiding CASPs to readiness. See the whole obligation and hand clients a filing-ready pipeline.
CARF is the OECD baseline, and the first authorities go live in 2027. Kryptos files the OECD schema plus the national format each authority actually accepts, and tracks every deadline for you.
| Jurisdiction | First filing | Format |
|---|---|---|
| United Kingdom | 31 May 2027 | OECD CARF XML |
| Germany | 2027 (DAC8) | DAC8 plus national fields |
| New Zealand | 30 June 2027 | Inland Revenue CARF |
| Sweden | With DAC8 | KU94 national format |
| Austria | With DAC8 | DAC8 plus 27.5% KESt |
| Finland | With DAC8 | DAC8 plus domestic gains |
CARF and DAC8 are one obligation. A reporting-only tool files the report and stops, so you end up buying one vendor for withholding, another for your users' tax experience, another for accounting. Kryptos is a single integration for all of it: you meet the obligation and hand your users a Tax Centre from the same data, with one contract instead of four.
| Feature | Kryptos | Reporting-only tools |
|---|---|---|
| CARF and DAC8 filing | ||
| Tax withholding at source, like Austrian KESt | ||
| White-label retail Tax Centre for your users | ||
| Portfolio and treasury accounting | ||
| Audit trail and corrections | ||
| One vendor, one integration, one contract |
Collection has been live since January 2026. First filings land in 2027: the UK by 31 May, New Zealand by 30 June, and the EU under DAC8 by 30 September. Kryptos tracks each deadline for you.
Often yes. CARF follows your users' tax residence, not your headquarters, and DAC8 reaches any CASP with EU-resident users. You register in one place and we resolve where each user is reportable, so nobody is filed twice or missed.
If a user never provides a valid self-certification, you must send at least two reminders over 60 days, then block their reportable transactions. Kryptos runs the whole cadence and unblocks them the instant they certify.
CARF XML v1.5 for the OECD network, plus national envelopes such as Sweden's KU94. Every file passes a three-tier XSD gate before submission, so filings don't bounce.
A build is a team, 450+ edge cases, every national format and a decade of audit logs, on you forever. Kryptos is live in weeks from $15,000 a year, all in, with the retail Tax Centre included.
The specifics behind the pipeline, from who you report to, to why filings bounce.
Reporting follows your users' tax residence, not your headquarters. How to work out where you're on the hook.
A CARF report is one XML file with a fixed shape. What each part carries, section by section.
The recurring XML mistakes, from DocRefId collisions to bad TINs, and how to catch them first.
Reminders, the cure period, and when you have to block a user who won't self-certify.
Book a walkthrough and we'll map your obligations and show the pipeline on your own data.