Skip to Content

CEDR

Secure and efficient CEDR compliance

Providing credit institutions and payment service providers in Luxembourg with the most efficient path to Central Electronic Data Retrieval System (CEDR) compliance, in accordance with CSSF Circular 20/747.

Talk to our team

Download brochure

What is it?

A Luxembourg-specific regulation

The Law of 25 March 2020 and CSSF Circular 20/747 introduced the Central Electronic Data Retrieval system (CEDR) related to payment accounts and bank accounts identified by IBAN and safe-deposit boxes held by credit institutions and payment service providers in Luxembourg.

To comply, these credit institutions and payment service providers must maintain a dedicated data file enabling the identification of any natural or legal person who owns, holds, or controls an IBAN-identified bank or payment account, or a safe-deposit box.

The CSSF has imposed an API approach to access this information in a direct, immediate and unfiltered manner.

Building banks

How it works

API-based retrieval system, one file per day

The Luxembourg regulatory authority needs to access the following information in a direct, immediate and unfiltered manner:

 data relating to any customer-account holder and any person purporting to act on behalf of the customer,

 data relating to the beneficial owner of the customer-account holder,

 data pertaining to the bank account or payment account,

 data pertaining to the safe-deposit box.


By leveraging a mutualized platform, CEDR finally puts Luxembourg banks one step ahead in their compliance journey.

Utilizing proven infrastructure,

Ability to comply with tight deadlines,

Unique competitive advantage within Luxembourg’s financial ecosystem.

Diagram CEDR
 Talk to our team

Why LUXHUB for CEDR

Rely on a connectivity expert

Build in-house LUXHUB CEDR
Time to market Long implementation cycle Production-ready solution accelerating deployment
Compliance Continuous internal regulatory analysis required Regulatory expertise embedded in the service
Connectivity & reporting operations Design, build and maintain the entire reporting chain End-to-end onboarding, connectivity, validation and operations
Resources Dedicated internal compliance, IT and operational teams required Access to specialized reporting and connectivity experts
Regulatory evolution Internal implementation of regulatory changes Ongoing regulatory watch and platform updates
Risk Higher implementation and operational complexity Proven service helping mitigate operational risk
Cost Significant build and maintenance investment Predictable service-based cost model
Experience Build and validate from scratch Trusted by leading Luxembourg PSPs and banks
 Talk to a specialist

FAQs

Questions teams ask about CEDR

All you need to know about CEDR and LUXHUB's solution.


CEDR stands for Central Electronic Data Retrieval system.

It is a Luxembourg regulatory framework established under CSSF Circular 20/747 dated 25 March 2020, requiring credit institutions and payment service providers to implement a secure API-based interface with the CSSF.

This interface enables the CSSF to retrieve information relating to bank accounts, payment accounts, safe-deposit boxes, and account holders in a direct, secure, and timely manner to support anti-money laundering (AML) and financial crime supervision activities.

CEDR compliance is governed by CSSF Circular 20/747, published on 23 July 2020, which implements the requirements of the Law of 25 March 2020.

The Circular requires Luxembourg credit institutions and certain payment service providers to establish a secure API-based interface that enables the CSSF to access account-related information for supervisory and anti-money laundering (AML) purposes.

By adopting an API-based approach, the CSSF has enabled efficient, secure, and near real-time access to regulatory data, reinforcing Luxembourg's position as a forward-looking and digitally enabled financial center.

Under CSSF Circular 20/747, all credit institutions and payment service providers in Luxembourg offering payment account services or bank account services for accounts identified by IBAN, as well as to any credit institution holding safe-deposit boxes Luxembourg must comply with CEDR requirements.

Institutions should assess their regulatory obligations based on their activities and the services they provide.

Under CSSF Circular 20/747, institutions must make the following categories of information available to the CSSF through the CEDR API:

  1. Account holder identification data, including information on persons acting on behalf of the account holder,
  2. Beneficial ownership information,
  3. Bank and payment account information, including IBAN details,
  4. Safe-deposit box information.

The CSSF's technical documentation may classify certain fields as optional. However, where this information is already held by the institution, it must be included in the data made available to the CSSF.

Luxembourg's IBAN Register is a national repository containing information on bank accounts, payment accounts, and safe-deposit boxes maintained by Luxembourg financial institutions.

CEDR is the technical mechanism through which supervised institutions make this information available to the CSSF via secure APIs.

LUXHUB's CEDR solution provides the compliant interface required to support this regulatory obligation.

LUXHUB's CEDR solution follows a security-by-design approach, ensuring that sensitive data remains under the institution's control at all times.

Institutions export the required account data and process it using a dedicated software package provided by LUXHUB. This package validates the data and encrypts it using PGP encryption before transmission.

Because the data is encrypted before leaving the institution's environment, LUXHUB never has access to its contents. The encrypted files are then transmitted securely to the CSSF in accordance with CEDR requirements.

Throughout the process, institutions receive notifications confirming file availability, validation, and successful processing, providing full transparency and operational visibility.

LUXHUB offers a secure, proven, and cost-effective approach to CEDR compliance.

By leveraging a mutualized platform, institutions benefit from shared expertise, reduced implementation effort, and lower operating costs. The solution is built on the same trusted infrastructure that powers LUXHUB's other regulatory and connectivity services and has been designed specifically to meet CSSF requirements.

In addition, LUXHUB provides:
  • Simplified onboarding with a user-friendly self-service interface,
  • Dedicated implementation and support teams,
  • Strong expertise in Luxembourg regulatory requirements,
  • A secure, compliant, and scalable technical architecture.

This combination of regulatory knowledge, operational efficiency, and proven technology makes LUXHUB a trusted partner for CEDR compliance.

Yes. LUXHUB's CEDR solution is hosted entirely in Luxembourg within redundant Tier IV data centres.

This ensures a high level of data sovereignty and supports compliance with Luxembourg and European data protection requirements, while aligning with the CSSF's expectations for the handling of sensitive supervisory data.

The Tier IV infrastructure also provides exceptional levels of availability, resilience, and business continuity, helping ensure the reliability of the service.

LUXHUB's CEDR solution combines regulatory compliance, operational efficiency, and strong security within a single managed service. Key benefits include:
- Faster implementation and onboarding,
- Reduced compliance and operational costs through mutualization,
- Secure data handling with built-in encryption mechanisms,
- Automated file processing aligned with CSSF requirements,
- High availability through fully managed infrastructure,
- Dedicated expert support from onboarding to production.

Together, these capabilities provide financial institutions with a secure, efficient, and compliant approach to meeting their CEDR obligations.

LUXHUB's CEDR onboarding process is designed to be fast and efficient.

Built on a proven API Gateway infrastructure, the solution helps institutions accelerate their path to compliance.

LUXHUB's team provides hands-on technical and operational support throughout the onboarding process, from initial setup and testing to production go-live.

The exact timeline depends on each institution's readiness and internal requirements. However, LUXHUB's mutualized platform and experienced teams are designed to streamline implementation and help institutions meet regulatory deadlines efficiently.

LUXHUB's CEDR solution incorporates multiple layers of security to protect sensitive regulatory data.

Data files are encrypted using PGP cryptography before transmission, while API communications are secured through HTTPS and certificate-based authentication. The solution is hosted in redundant Tier IV datacenters in Luxembourg and operated in accordance with ISO 27001 information security standards.

In addition, access to CSSF interfaces is strictly controlled, monitored, and fully auditable to ensure a high level of security and compliance.

CEDR was introduced to support the CSSF's anti-money laundering and financial crime supervision activities. Through secure API-based access to account holder, beneficial ownership, and account information, the framework enables the CSSF to retrieve relevant data efficiently when carrying out regulatory and AML-related investigations. 

As a result, CEDR helps strengthen supervisory capabilities, improve access to information, and support the implementation of Luxembourg's AML framework.

Yes. The CEDR solution is built on the same enterprise-grade infrastructure that powers LUXHUB's other regulatory and connectivity services. Designed for scalability and reliability, the platform can support large volumes of account information, beneficial ownership records, and safe-deposit box data while maintaining efficient processing and operational continuity.

Combined with a Tier IV hosting environment and proactive infrastructure management, the solution provides a robust foundation for institutions with significant data volumes and regulatory reporting requirements.

To get started, contact LUXHUB by email at info[at]luxhub.com, by phone at +352 28 80 76, or through the contact form on the CEDR product page. You can also access the CEDR product brochure and supporting resources to learn more about the solution and regulatory requirements.

Our experts will support you throughout the onboarding journey, from initial assessment and integration planning to testing and production deployment.


Ready to start your CEDR journey?

A 30-minute call with our experts. Let's discuss your CEDR compliance. We look forward to presenting our solution to your team.

Get started