When a regulated financial firm in Europe — bank, investment firm, or hybrid — publishes its annual report, somewhere in the legal section is a document called "Pillar III disclosure". Most retail clients have never opened one. The few that have probably closed it again within thirty seconds.
That is a missed opportunity. A Pillar III disclosure is the single most informative public document a firm publishes about its financial health. Banks and investment firms above a size threshold are required to publish it, in a standardised structure, every year. The numbers are audited, regulated, and directly comparable across firms. Once you can read one, you can read all of them, and the firms that fail to publish stand out.
This article is a short guide to what is in a Pillar III disclosure, what each number actually means for a retail client, and what to do with the information.
Why "Pillar III"?
The Basel III banking standards, agreed by the Basel Committee on Banking Supervision and transposed into EU law via the Capital Requirements Regulation (CRR) and Directive (CRD IV), are built on three pillars:
- Pillar I — minimum capital requirements. The arithmetic: how much capital a firm must hold against its assets, weighted by risk.
- Pillar II — supervisory review. The regulator's bilateral assessment of whether the Pillar I minimum is enough for that specific firm. Not public.
- Pillar III — market discipline. The public disclosure of the firm's capital position, risk profile, and risk-management practices. The bet is that publishing the numbers creates incentives the supervisor alone cannot.
Pillar III is the only one of the three that you, as an outside party, can read. The 2019 Investment Firm Regulation (IFR) extended Pillar III-style disclosure to non-bank investment firms above a size threshold. The UK equivalent is MIFIDPRU 8 (FCA Handbook). Switzerland publishes under FINMA Circular 2016/1. The structures vary in detail but the spine is the same.
What's actually in there
A Pillar III disclosure typically covers, in this rough order:
- Risk-management framework — the firm's organisational arrangements for measuring and controlling risk. Usually narrative; less useful for comparison.
- Own funds — the firm's regulatory capital, broken down by tier. The most important section.
- Capital requirements / Risk-Weighted Assets (RWA) — what the firm holds capital against. Credit risk, market risk, operational risk.
- Capital ratios — the firm's actual ratio against the regulatory minimum.
- Liquidity coverage / Net Stable Funding — bank-specific ratios on short-term and long-term liquidity.
- Leverage ratio — capital as a percentage of total exposure, without risk-weighting.
- Remuneration — how the firm pays its risk-takers. Less directly relevant to retail clients but informative about culture.
The most useful three pages, for a non-specialist reader, are the own funds, capital ratios, and leverage ratio sections.
Own funds — what they really are
A firm's "own funds" are its capital available to absorb losses. The Basel framework defines three tiers:
- CET1 (Common Equity Tier 1) — the highest-quality capital. Mostly ordinary share capital and retained earnings. CET1 absorbs losses first, doesn't have to be paid back, and isn't subject to mandatory dividends. This is the column that matters.
- AT1 (Additional Tier 1) — perpetual debt instruments that convert to equity or get written down if the firm hits a trigger. Higher-quality than Tier 2, lower-quality than CET1.
- Tier 2 — subordinated debt with a defined maturity. Loss-absorbing in resolution, but not on a going-concern basis.
The number you want to know is the CET1 ratio: CET1 capital ÷ Risk-Weighted Assets, expressed as a percentage.
Capital ratios — what is "enough"?
Regulators set minimum ratios. For a bank in the EU under CRR, the typical headline minimum is:
- CET1 ratio: 4.5% minimum + 2.5% capital conservation buffer = 7% effective floor
- Total capital ratio: 8% minimum + buffer = 10.5% effective floor
Plus an institution-specific Pillar II add-on, plus a counter-cyclical buffer, plus (for systemically-important banks) a G-SIB or O-SII surcharge.
In practice, most European banks operate at CET1 ratios of 12–16%. A bank at exactly the 7% floor would be in immediate regulatory dialogue. A bank at 11% is operating with a thinner buffer than peers. A bank at 18% is conservatively capitalised.
For non-bank investment firms under IFR, the framework is different — the firm calculates an "own funds requirement" based on a set of K-factor metrics specific to investment-firm activity (assets under management, client orders handled, net position risk, etc.). The principle is the same: actual capital ÷ requirement, expressed as a percentage. Most well-capitalised investment firms operate at multiples (2×, 3×, 5×) of their minimum requirement.
Leverage ratio — the bank's belt-and-braces
The leverage ratio is total Tier 1 capital ÷ total exposure (no risk-weighting). It catches the situation where a firm reports a strong CET1 ratio because its weighted exposures look low, but its raw size relative to capital is large.
For banks, Basel III sets a 3% minimum leverage ratio. The principle: even if all the risk-weighting models are wrong, the firm must hold at least 3 cents of Tier 1 for every dollar of exposure. Banks running below 4% are operationally tight; banks above 6% are comfortable.
What this tells a retail client
Three practical takeaways:
- A firm publishing Pillar III is a firm subject to public-disclosure oversight. That alone is a positive signal, distinguishing it from offshore-only or registration-only brokers.
- The CET1 ratio and leverage ratio give you a position relative to peers. If you're choosing between two FCA-authorised CFD brokers and one has a CET1 ratio of 24% while the other has 11%, the first has materially more loss-absorbing capacity. Neither is illegal; one is more conservative.
- A firm whose Pillar III you can't find — and which falls under a regulator where the regime requires disclosure — is either out of compliance or you haven't looked in the right place. Check the firm's "Investor relations", "Regulatory disclosures" or "Legal" page; if it really isn't there, that is a finding.
How The Beacon uses Pillar III
Every entity in our directory carries a Pillar III field showing one of five states: Published (we have a verified URL), Exempt (regulator's regime exempts firms of this kind from public Pillar III), Required but not located (regime requires disclosure, we couldn't find one), Not applicable (regulator doesn't operate a Pillar III-equivalent), and Unknown (not yet researched).
A weekly automated job checks the published URLs for liveness; if a previously-published document returns 404 for more than 90 days, the status flips to "required but not located" and the dossier surfaces a flag.
Reading list
- Basel Committee, "Basel III: A global regulatory framework" (revised June 2011). The foundational document. Long but readable.
- Capital Requirements Regulation (EU) No 575/2013 (CRR), Articles 431–455 for the disclosure framework. Dense; use the European Banking Authority's Q&A tool for specific questions.
- EBA, "Implementing Technical Standards on public disclosures". The format templates that every EU bank uses.
- FCA Handbook, MIFIDPRU 8. The UK investment-firm disclosure framework, applied since 1 January 2022.
- Investment Firm Regulation (EU) 2019/2033 (IFR), Articles 46–53. The EU investment-firm equivalent.
Once you've read three or four real-world Pillar III documents from a range of firms, the structure becomes familiar. The numbers stop looking like a wall of decimals and start looking like a firm's actual risk position. That's the point of the regime.