Record retention: VASPs must retain all Travel Rule records - originator + beneficiary information + counterparty VASP information + sanctions screening results + investigation files + STR records - for at least 5 YEARS following the virtual asset transfer (extending to longer periods where local law requires or where the records support a continuing investigation). Records must be maintained in a form that can be: (a) produced to competent authorities on request without undue delay; (b) used to reconstruct individual virtual asset transactions + the supporting Travel Rule information; (c) retrieved + analysed for regulatory review + supervisory examinations + statistical reporting; (d) protected against tampering + unauthorised modification + premature destruction. Record retention applies on top of broader R.11 record-keeping requirements + complements FATF R.20 STR filing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.