Regulatory Hosting: A Practical Guide
Regulatory hosting is the arrangement under which a firm without its own FCA authorisation carries on regulated business under someone else’s. It is widely used by fund managers, advisory boutiques and firms entering the UK market, and it is an area where the regulator’s expectations have tightened considerably.
This guide covers how hosting works, where the responsibility actually sits, what has changed, and how to assess a host — or decide whether to become authorised instead.
What Hosting Is
An authorised firm — the host or principal — takes on a party as an appointed representative or as a unit within its own permissions, allowing that party to conduct regulated activities covered by the host’s authorisation.
The attraction is obvious. It is faster than authorisation, cheaper at the outset, and removes the need for the hosted business to build its own compliance infrastructure. For a fund manager launching a first product, or an overseas firm testing the UK market, it can be a sensible route.
The crucial point, frequently misunderstood by the hosted business, is that the host is the regulated firm. Regulatory responsibility for the activities conducted under its permissions is the host’s, and the FCA looks to the host.
Why Expectations Have Tightened
The appointed representative model attracted sustained regulatory attention after a series of cases in which principals had taken on ARs they did not understand and could not oversee.
The consequence is a substantially higher bar on principals: more extensive due diligence before appointment, genuine ongoing oversight rather than periodic attestation, enhanced reporting on the AR population, and clearer expectation that a principal must be able to demonstrate it has the resources to supervise what it has taken on.
The FCA’s guidance on principals’ responsibilities for overseeing ARs sets out what is expected. Our appointed representative guide covers the regime more broadly.
What This Means for Hosted Firms
The practical effect is that hosting has become more demanding for the hosted business, not less.
Hosts conduct real due diligence before onboarding, ask for business plans and financial information, and decline arrangements they cannot supervise. Oversight after appointment is more intrusive — file reviews, monitoring, approval gates on financial promotions and new business lines. Costs have risen accordingly, and some hosts have exited or substantially reduced their AR populations.
Firms choosing hosting primarily to avoid scrutiny are choosing it for a reason that no longer holds.
Assessing a Host
The quality of the host matters more than almost any other factor, because the hosted firm’s ability to operate depends on the host remaining authorised and willing.
Worth establishing: how many ARs the host supervises and whether its resources plausibly support that number; its own regulatory history; whether its permissions genuinely cover what the hosted firm intends to do; how oversight actually works in practice rather than in the agreement; what happens to the hosted business if the host’s own position changes; and what the exit arrangements are.
That last point deserves emphasis. A hosted firm whose host withdraws, loses permissions or exits the market faces an immediate inability to conduct business. Understanding the notice provisions and having a contingency is basic commercial prudence.
The Responsibility That Does Not Transfer
Hosted firms sometimes operate as though compliance is the host’s problem. It is not that simple.
The host carries regulatory responsibility, but the hosted business carries the commercial consequences of failure, and individuals within it may carry personal consequences depending on the arrangement. A host that identifies poor practice will restrict or terminate, and the hosted firm will find its ability to trade removed with little notice.
The firms that use hosting well treat the host’s oversight as a standard to meet rather than an obstacle, and build their own internal discipline rather than relying entirely on being checked.
Hosting Within Funds and Investment Management
The fund sector uses hosting more heavily than most, and the arrangements have their own vocabulary.
A host AIFM or host ManCo acts as the regulated manager for a fund while the investment decisions are delegated back to the underlying manager. The delegation has limits — the host must retain genuine substance and cannot delegate so extensively that it becomes a letterbox entity — and the regulator takes an interest in whether the division of responsibility described on paper reflects what actually happens.
For a first-time manager this is often the only practical route to market, and it works. The question to resolve early is what the arrangement looks like at the point the fund succeeds, because the economics shift quickly once assets grow.
Reading the Agreement
Hosting agreements are commercial documents that allocate regulatory risk, and the clauses that matter are rarely the ones negotiated hardest.
Worth close attention: what the host can require the firm to do and on what notice; the circumstances in which the host can suspend or terminate, and whether any cure period applies; who owns client relationships and records if the arrangement ends; what happens to business written during the relationship; and the indemnity position where a regulatory issue arises.
Firms focus on fees and overlook termination. The fee is a known cost; abrupt termination is an existential event, and the notice period is the single most valuable term in the document.
When to Become Authorised Instead
Hosting is a stage for most firms rather than a destination, and three signals suggest the stage is over.
Scale. Once the business is large enough that host fees approach the cost of its own compliance function, the economics favour authorisation and the firm gains control.
Scope. Where the firm wants to do things the host’s permissions do not cover, or wants to move faster than the host’s approval process allows, hosting becomes a constraint on strategy.
Credibility. Institutional clients, investors and counterparties increasingly ask about regulatory status, and direct authorisation is a stronger answer than an AR relationship.
The transition requires planning. Authorisation takes time, and the firm needs people in place — our guides to becoming FCA authorised and the authorisation timeline cover the process, with SMF appointments during authorisation covering the hiring side.
The Hiring Consequences
This is where firms leaving hosting most often underestimate the work.
Under a hosting arrangement, much of the compliance function sits with the host. On becoming authorised, the firm needs its own — a Compliance Oversight holder, an MLRO, and the governance and monitoring that go with them. Those are pre-approval appointments with their own timetable, running alongside the authorisation application rather than after it.
For many firms at this stage a fractional arrangement is the right answer: genuine seniority for a few days a month, rather than a full-time hire the business does not yet need. Our pages on SMF16 recruitment and fractional dual SMF16 and SMF17 cover the options.
For Firms Considering Becoming a Host
Hosting looks like an attractive revenue line and is a substantial regulatory undertaking.
A principal must be able to demonstrate adequate resources to oversee its ARs, conduct meaningful due diligence, supervise on an ongoing basis, and report on the population. Firms that have taken on ARs for the fee income without building that capability are precisely the population the tightened expectations were aimed at.
Frequently Asked Questions
Is hosting a permanent arrangement?
It can be, but for most growing firms it is transitional. Scale, scope and credibility all eventually favour direct authorisation.
Who is responsible if something goes wrong?
The host is the regulated firm and carries regulatory responsibility. The hosted business carries the commercial consequences, which are frequently immediate.
How much oversight should we expect?
More than firms anticipate. File reviews, approval gates on promotions and new business, and periodic assessment are now standard.
What happens if our host loses its permissions?
The hosted firm cannot conduct regulated business under them. Understanding the notice and contingency position before signing is essential.
Hiring for compliance?
We place the people who own this function
Compliance Oversight holders on a permanent, part-time, fractional and interim basis. Tell us what the firm does and we will give you an honest view on what the role actually needs.
Related guides and services
Practice area
Authorisation
Practice area
Wider compliance
About the author
Adrian Lawrence FCA
Adrian is the founder and Managing Director of FD Capital. A Chartered Accountant and ICAEW Fellow, he became a finance director at 28 and has spent more than 25 years at C-suite level, including as finance director of a listed company and of a private equity backed management buy-out. Every search is run by our specialist team, with Adrian overseeing each mandate.
Start a search
Tell us about your finance hire
Share a few details about your business and the role. A member of our team will review your brief and come back to you to talk it through.
- Reply within one working day, from a consultant who places finance leaders every day
- Confidential from the first conversation, with no obligation to go ahead
- Shortlists typically within three to seven days, faster for urgent interim cover
Your details are used only to respond to your enquiry.
Accredited Member of GBC 
Accredited Member of LWF 
Carbon Offset via TreeNation