# Reqport > Reqport is the secure platform for handling authority and law-enforcement > data requests — received, verified, and actioned through a purpose-built > portal. Reqport Insights is our editorial series on the operational and > regulatory reality of answering requests that cross organizational trust > boundaries (police and authority requests to banks, fraud coordination, > AML inquiries, evidence and disclosure). Primary language: English. Swedish translations exist for every article at the same path under /sv/ (see /sitemap.xml and each page's hreflang). ## Insights - [How the Revolut data breach happened](https://reqport.com/en/insights/revolut-data-breach): How a compromised Italian government email account led Revolut to disclose 680 customer files, what is confirmed, and what would have caught it. - [How to handle police requests for customer data](https://reqport.com/en/insights/how-to-handle-police-requests): A step-by-step guide to handling police requests for customer data: how to verify the request, work out whether you must comply, and stay within the GDPR. - [The Capability the Standard Assumes](https://reqport.com/en/insights/the-capability-the-standard-assumes): The FATF's 2026 report on public–private partnerships quietly assumes organizations already have the operational capability it asks them to use. A reflection on the layer between policy and governance. - [Recognizing an Undesigned Operational Capability](https://reqport.com/en/insights/recognizing-an-undesigned-operational-capability): You can't see an orphaned capability directly — only the traces it leaves. A field guide of six recognitions for spotting work that everyone does and no one owns. - [Can the police request data from companies?](https://reqport.com/en/insights/police-data-requests-companies): The police can ask a company for data, but a request isn't an order. When you have to comply, when you may share voluntarily, and how to stay within the GDPR. - [When Work Becomes a Capability](https://reqport.com/en/insights/when-work-becomes-a-capability): Most operational capabilities are built on purpose; a few are never decided at all. Why answering authority requests can stay undesigned for decades — and why that is starting to change. - [Asset freezing and confiscation: how governments secure assets held by companies](https://reqport.com/en/insights/asset-freezing-and-confiscation): What are asset freezing and confiscation, and what can government authorities do? Under new EU rules, property can be confiscated even without a conviction. A guide for companies. - [Law enforcement requests: a guide for financial firms](https://reqport.com/en/insights/law-enforcement-requests-financial-firms): When police, prosecutors or the FIU request customer data, an EU financial firm must comply without breaching the GDPR. What the law requires, and how to handle it. - [What does AMLR Article 75 mean for CASPs?](https://reqport.com/en/insights/amlr-article-75-casp): From 10 July 2027, crypto-asset service providers (CASPs) become obliged entities under the AMLR. What Article 75 allows CASPs to share, who can take part, and what is still unsettled. - [The missing link to stop fraud](https://reqport.com/en/insights/the-missing-link-to-stop-fraud): A fraudulent payment is often recoverable for a short time after it leaves the account, while the money is still in the regulated system. The key is acting fast. - [What is the e-Evidence Regulation?](https://reqport.com/en/insights/e-evidence-regulation): The EU e-Evidence Regulation lets authorities in one EU country demand user data directly from providers in another. What it requires, who is in scope, and the 18 August 2026 deadline - [Crypto-asset seizure and freezing: a CASP compliance guide](https://reqport.com/en/insights/crypto-asset-freezing-seizure-casp): EU law lets authorities order a CASP to freeze or hand over crypto-assets. How these orders reach them, how sanctions freezes differ, and why speed decides the outcome. ## For developers & AI agents > Reqport is a network for authority-to-business data exchange. You are usually the > responder: you receive requests addressed to your organization and answer them, > with content decrypted only inside a confidential TEE bound to your org. Answers > are structured on ISO 20022. Connect with the CLI (built for AI agents): - Install: npx @reqport/cli@latest (binary: qp) - Authenticate: qp login (an org admin approves; a per-environment API key is minted) - Discover / read / answer: qp requests list | qp requests show | qp respond ... - MCP server (drive from your agent, with the exchange contracts as context): qp mcp - Sandbox (seeded with synthetic requests): add --env sandbox - Full agent setup prompt: https://reqport.com/en/developer/agents Exchange contracts: - Business-Relationship Check: Response (business-relationship-check, ISO 20022 auth.002 (InformationRequestResponse), draft): Confirm whether a subject has a relationship with a business and, if so, of what type and under which identifiers, so a targeted follow-up can be made. - camt.053-CA: Crypto-Asset Statement (camt053-ca, ISO 20022 camt.053 (BankToCustomerStatement), draft): Answer a transaction-history request for a crypto or fiat account/wallet, as a statement that stays aligned with ISO 20022. - FIR: Fraud Incident Response (base message) (fir, ISO 20022 payment-recall / investigation lineage (camt.056 FIToFIPaymentCancellationRequest, camt.029 ResolutionOfInvestigation); a new multi-message family, not a strict profile, draft): Report a fraud incident between participants so it can be acted on. - Free-Text Authority Request (free-text, draft): A note and attachments when no structured profile fits. A member of the ARM family. There is no request schema. - KYC / CDD Response (kyc, ISO 20022 auth.002 (InformationRequestResponse) found/not-found envelope + IVMS101 identity core, draft): Return a customer due-diligence record for a named subject. Developer documentation: - Concepts & glossary: https://reqport.com/en/developer/concepts - Quickstart: https://reqport.com/en/developer/quickstart - Exchange contracts: https://reqport.com/en/developer/specifications - For AI agents: https://reqport.com/en/developer/agents - Connect / admission: https://reqport.com/en/developer/connect - Responder API reference (OpenAPI): https://reqport.com/vanta/swagger-ui.html Access is gated: qp login requires an org admin to approve; full field-level JSON Schemas are available to identified developers. ## More - [Full article text](https://reqport.com/llms-full.txt): every Insight, full body as plain text - [About Reqport](https://reqport.com/en/about) - [Contact](https://reqport.com/en/contact)