Short answer
The indexed Finantsinspektsioon collection contains provider-level register pages rather than one uniform list. A valid record can identify the register category in which the provider appears and may give the provider's legal name, Estonian commercial-register number, address, telephone, email, website, share capital, date of entry, licence or activity-authorisation decision number and date, and the authorised activity or service scope.
The collection also distinguishes different regulatory contexts. The search evidence includes domestic licensed creditors, insurance intermediaries, cross-border insurance, investment and payment-service providers, pension-register operators and a central securities depository. Appearance in one category does not mean that the provider is authorised for every financial service or necessarily licensed directly by the Estonian authority.
Two cautions are essential. First, the fields vary by register and provider: an infrastructure operator may have identity and contact details but no licence-decision fields. Second, the indexed collection currently contains invalid “Subject not found” pages and does not expose a working category-facet inventory. For a live compliance decision, use the index to locate the exact and then verify the provider, status, activity scope and update date at the official source.
What is actually indexed?
The production Legalcode source profile reported 11,943 documents for the Finantsinspektsioon source on 13 September 2026. They are classified as guidance/reference material because the source family contains register pages, investor alerts and selected guidance, not because every item is general regulatory guidance.
The provider records are organised under source-native register categories. Categories visible in the verified search evidence included:
- licensed creditors in Estonia;
- insurance brokers;
- providers of cross-border insurance-agent or insurance-mediation services;
- providers of cross-border investment services;
- providers of cross-border payment services;
- registrars of the pensions register; and
- the central securities depository.
This is an evidence-based list of categories surfaced by the search, not a claim that it is the complete Finantsinspektsioon taxonomy. The index currently fails to return source-specific category values through its advertised facet-discovery route, so an exhaustive category inventory cannot be proved from the MCP response alone.
Provider identity and contact information
Where the official record is populated, the index can provide the details needed to distinguish one provider from another. The fetched record for , under “Licensed creditors in Estonia”, contained:
The commercial-register number is especially important. Names can change, be translated or resemble those of unrelated businesses. The official identifier is a stronger matching key than a name or URL slug, although it should still be verified against the current source before attaching a regulatory status to a company.
Not every register uses every field. The fetched record, in the pension-register registrar category, supplied its corporate name, commercial-register number, address, telephone, email and website. It did not display the licence-decision fields present in the licensed-creditor example. The absence of a field should therefore be reported as “not shown in this record”, not converted into a conclusion that no authorisation or regulatory basis exists.
Authorisation and activity scope
For provider types subject to an activity licence, a record can expose both the existence and scope of the relevant decision. The Creditstar record showed:
- activity-licence decision number 4.1-1/35;
- decision date 16 March 2016; and
- scope: granting credit to consumers.
These fields answer narrower and more useful questions than a generic statement that the company is “regulated”. They identify the decision and the activity reflected in the register. A researcher should cite the particular register category and scope, because permission to grant consumer credit does not by itself establish permission to provide payment, investment, insurance or other services.
The indexed metadata may also carry a normalised authorisation status and one or more licence-decision numbers and dates. Those fields are useful for filtering and candidate identification, but the fetched official text remains the evidence to inspect. A normalised ACTIVE label should never override contrary source text, a missing subject page or a more recent official status.
Domestic authorisation and cross-border provision are not the same
The category name communicates legal context. “Licensed creditors in Estonia” identifies a different relationship from “providers of cross-border payment services” or “providers of cross-border investment services”. A cross-border listing may concern a provider authorised in another state and entitled to serve Estonia under the applicable notification or passporting framework.
Accordingly, a register check should preserve at least four separate propositions:
- identity: which legal person the page concerns;
- register category: the capacity in which Finantsinspektsioon lists it;
- status and decision: whether an authorisation or other regulatory basis is shown and, where available, its number and date; and
- scope: which services or activities the entry covers.
Collapsing these into a single “authorised: yes/no” flag loses material information. It can also misdescribe a cross-border provider as holding an Estonian licence when the page establishes a different regulatory route.
Register category is part of the evidence
The same organisation can potentially appear in more than one category, and categories can have different fields. A robust provider check should record the page's path and category alongside the company identifier.
For example, the AS Pensionikeskus evidence establishes that the company is listed as a registrar of the pensions register. It does not, without additional evidence, establish that every financial service offered by the wider corporate group falls within that entry. Likewise, the Creditstar page supports the displayed consumer-credit scope; it should not be generalised beyond that scope.
This category-specific approach also helps distinguish register records from Finantsinspektsioon investor alerts. The collection name encompasses both, but an alert about an entity is not an authorisation record. Conversely, absence from one sampled register category does not prove absence from all categories.
Dates in the indexed records need care
The source material exposes several different dates:
- a date of entry for the company;
- an authorisation-decision date;
- a category-listing timestamp;
- a provider page's own “Last changed” timestamp; and
- Legalcode's internal database-update time.
These dates describe different events and must not be substituted for one another. In the fetched Creditstar record, the indexed publication/listing date was 11 May 2023, but the source-text footer said the provider record was last changed on 20 February 2026. For AS Pensionikeskus, the corresponding dates were 2 December 2022 and 26 May 2026.
The mismatch is now reported as a Legalcode metadata issue. Until corrected, the indexed publication date should not be presented as the date on which the current provider details were last verified or changed. For current-status work, inspect the live official page and state which date is being used.
A known invalid-record problem
One fetched candidate under the central-securities-depository category was not a provider record at all. Its title and name were “Subject not found”, its structured provider fields were empty, and the body said that the requested subject was not found. Nevertheless, its indexed metadata labelled both the document and authorisation status as active and used the URL slug where a provider identifier would normally appear.
The initial search also surfaced several other “Subject not found” candidates under cross-border insurance categories. Legalcode issue tracks the need to reject or quarantine these terminal pages, audit the existing Finantsinspektsioon records and re-ingest valid replacements where available.
This defect changes how results should be used. A result is not evidence of a provider merely because it has an official-domain URL and an active normalised status. Before relying on it, confirm that the fetched body contains a real subject name and appropriate identity or authorisation fields.
The current category-discovery limitation
The Legalcode source profile advertises the register-category field as populated, facetable and discoverable by prefix. The corresponding source-scoped request for Finantsinspektsioon categories returned no values because the snapshot was not measured. That inconsistency is tracked in issue .
As a result, the MCP can find individual provider records and expose their categories, but it cannot currently prove an exhaustive list of all indexed Finantsinspektsioon registers through the advertised discovery mechanism. Any category list built from relevance results should be labelled illustrative unless separately verified from the official register navigation.
A reliable provider-checking workflow
For each provider, the indexed collection supports a structured starting process:
- Search by the exact legal name and, where available, the commercial-register number.
- Confirm that the result is a genuine subject page, not an alert, category page or terminal error page.
- Record the exact register category and official URL.
- Match the corporate name and official identifier; do not rely on name similarity alone.
- Read the activity-licence decision, date and service scope where the record supplies them.
- Determine whether the listing represents domestic licensing, cross-border provision, registration or another supervised capacity.
- Check the official page's current status and record-level last-changed date.
- Preserve uncertainty where fields are absent or the live page no longer resolves.
For automated use, store the provider identity, category, authorisation basis and activity scope as separate fields. Keep source timestamps distinct and retain the official URL so that a human reviewer can reproduce the check.
Authority and research boundary
Finantsinspektsioon is Estonia's financial-supervision authority, and its live registers are authoritative evidence of what the authority currently publishes about supervised or notified subjects. The indexed Legalcode copy is a research aid and historical retrieval layer. It does not expand the scope of a licence and should not be treated as proof that a provider remains authorised after the source page has changed.
This article reports what was verifiably available in the indexed collection on 13 September 2026. It does not claim an exhaustive inventory of every official FI register because the MCP's category discovery failed during the review.
Conclusion
The indexed Finantsinspektsioon records can provide a strong provider-identification package: legal name, company number, contacts, register category, and—where applicable—licence decision details and authorised activity scope. They also reveal whether the entry concerns a domestic licensed provider or a different capacity such as cross-border service provision or pension-register operation.
The evidence must remain category-specific and source-linked. Current index defects mean that some supposed providers are only “Subject not found” pages, category values cannot be enumerated exhaustively, and public dates may lag the source's own last-changed timestamp. The safe conclusion is therefore not merely “the provider appears in the index”, but “this identified legal person appears in this official category, with this stated status and scope, verified against this current FI page.”
Sources and audit issues
This article provides general legal information, not advice for a specific matter. Laws, facts and procedural deadlines may change the result. Follow the linked primary sources and obtain local advice before acting.