Customer due diligence (CDD) stands as the systematic process through which financial institutions identify, verify, and understand their customers to manage anti-money laundering (AML) and counter-financing of terrorism (CFT) risk and ensure regulatory compliance. AML compliance is a critical component of customer due diligence, helping institutions prevent financial crime and avoid regulatory penalties. This process underpins Know Your Customer (KYC) frameworks globally and is mandated by standards such as the Financial Action Task Force (FATF) 40 Recommendations (revised 2012) and, in the European Union, by the 4th through 6th Anti-Money Laundering Directives. Customer due diligence is also a key part of broader financial crime compliance frameworks.
InvestGlass provides an integrated, Swiss-hosted platform that automates large parts of the customer due diligence process for banks, wealth managers, insurers, and other regulated actors. This article delivers a practical, step-by-step overview aimed at compliance, risk, and operations teams working within regulated environments. Diligence is important in CDD processes for regulatory adherence, fraud prevention, and risk mitigation. Whether you’re onboarding new clients in 2026 or managing ongoing customer relationships throughout their lifecycle, the principles and workflows covered here will help you build a robust CDD process that meets regulatory requirements while supporting business growth.
What Is Customer Due Diligence (CDD)?
Customer due diligence (CDD) is the systematic diligence process of collecting, verifying, and assessing information about a natural person or legal entity to understand who they are, what business activities they conduct, and what level of financial crime risk they present, with particular emphasis on verifying the customer’s identity as a critical step.
Relationship Between CDD, KYC, and AML/CFT
The relationship between CDD, KYC, and AML/CFT is foundational to financial crime compliance:
- AML (Anti-Money Laundering): This refers to laws, regulations, procedures intended to prevent criminals from disguising illegally obtained funds as legitimate income.
- CFT (Counter-Financing of Terrorism): Involves measures to detect and prevent the use of financial systems for terrorist financing.
- KYC (Know Your Customer): The broader framework that encompasses CDD and ongoing relationship management, ensuring institutions know and monitor their clients.
- CDD (Customer Due Diligence): The specific process within KYC that focuses on identifying, verifying, and assessing customer risk.
In practice, AML/CFT regulations require financial institutions to implement KYC programs, which are operationalized through robust CDD processes. CDD is thus the operational core of KYC, and both are essential for AML/CFT compliance.
Term | Definition |
|---|---|
CDD | The specific process of identifying, verifying, and assessing customer risk |
KYC | The broader framework encompassing CDD plus ongoing relationship management |
AML | Anti-money laundering regulations that mandate CDD requirements |
CFT | Counter-terrorist financing rules that require identifying terrorism financing risks |
Key regulatory references include the FATF 40 Recommendations and the Financial Crimes Enforcement Network (FinCEN) CDD Rule (effective May 11, 2018 in the US), which requires covered financial institutions to implement four core elements of due diligence.
Typical CDD Process Elements
The customer due diligence process typically covers:
- Identity data (name, date of birth, nationality, address)
- Beneficial ownership information
- Source of funds and source of wealth
- Expected account activity and transaction patterns
- Geographic and sector exposure
- Assessment of the customer’s risk profile based on collected information
CDD applies to individuals, corporates, trusts, foundations, and other entities, with varying depth depending on the customer’s risk profile. In Switzerland, diligence requirements are shaped by the Swiss Anti-Money Laundering Act (AMLA) and Swiss Financial Market Supervisory Authority (FINMA) ordinances, which emphasize risk-based controls and thorough documentation. A thorough diligence customer approach involves both identity verification and risk profiling to ensure compliance and effective risk management.
Why Customer Due Diligence Matters for Financial Institutions
Between 2015 and 2024, global AML fines exceeded $20 billion. The Danske Bank scandal alone involved $2 billion in penalties related to inadequate CDD on $230 billion in suspicious flows through its Estonian branch. Credit Suisse faced a $475 million FINMA fine in 2022 for repeated AML lapses, failures that contributed to the bank’s eventual collapse in 2023. Failing to assess associated risks during customer due diligence can result in severe regulatory penalties and reputational damage for financial institutions.
Financial Crimes Prevented by Effective CDD
Effective customer due diligence helps prevent financial crimes including:
- Money laundering (estimated at $800 billion to $2 trillion annually per United Nations figures)
- Terrorist financing and terrorism financing channels
- Sanctions evasion
- Fraud and corruption
- Tax evasion
Regulatory Stakes
The consequences of non-compliance extend far beyond fines:
Risk Category | Potential Consequences |
|---|---|
Administrative | Fines up to 10% of annual turnover (EU AMLDs), remediation orders |
Criminal | Personal liability for senior management under 6AMLD |
Operational | Licence restrictions, loss of correspondent banking relationships |
Reputational | Client exodus, rating downgrades, heightened media scrutiny |
Post-Danske Bank, Nordic banks lost 20-30% of high-risk relationships as counterparties de-risked their exposure to institutions with weak controls.
Strategic Benefits of Robust CDD
Beyond protecting businesses from regulatory fines, robust CDD delivers strategic value:
- Deeper understanding of clients’ profiles and needs
- Improved customer segmentation and cross-selling (15-20% revenue lift per McKinsey studies)
- More informed risk-based pricing
- Enhanced customer relationships built on transparency
InvestGlass helps reduce both compliance risk through consistent workflows and reputational risk through transparent audit trails that evidence CDD performed at every stage.
Transition: Understanding the importance of CDD sets the stage for exploring the different types of due diligence measures financial institutions must implement. The next section outlines these key types and how they are applied in practice.
Key Types of Customer Due Diligence
Financial institutions use three main forms of due diligence measures globally, as outlined in FATF guidance and EU AMLDs. The type of CDD applied depends on the risk profile of the customer and the nature of the business relationship.
Overview of CDD Types
CDD Type | Description | When Applied |
|---|---|---|
Standard CDD | Baseline measures for low to medium risk customers | Most customers with straightforward profiles |
Enhanced Due Diligence (EDD) | Deeper scrutiny for high risk scenarios (e.g., PEPs, high-risk jurisdictions) | High-risk customers or complex structures |
Simplified/Ongoing Due Diligence | Streamlined measures for negligible risk or continuous monitoring | Low-risk or ongoing relationships |
During onboarding, institutions must assess the risk profile of each potential customer to ensure compliance and effective risk management.
Institutions classify customers based on risk factors including:
- PEP status (politically exposed persons, individuals with people public functions, increasing risk of corruption)
- Presence on FATF grey/black lists or high-risk jurisdiction exposure
- Complex corporate structures
- Unusual transaction profiles or adverse media findings
The depth and frequency of checks, document collection, and approval requirements increase as risk level moves from low to high. InvestGlass allows configuration of different workflows and field requirements for each CDD type and risk band.
Standard Customer Due Diligence
Standard CDD serves as the baseline level applied to most clients who are not obviously high risk, for example, residents in low-risk countries with straightforward employment or business activities.
Core Elements for Individuals
- Identification via passport or national ID
- Verification using reliable, independent sources
- Basic understanding of purpose and intended nature of the relationship
- Ongoing monitoring of the customer’s activities to ensure they align with the expected behavior and risk profile
Core Elements for Legal Entity Customers
- Legal name, registration number, registered address
- Directors and shareholding above threshold (typically 25% beneficial ownership under the FinCEN CDD Rule and EU regimes)
- Purpose of the entity and expected activities
Standard CDD should be documented consistently using checklists and forms, ideally digitised within the CRM to avoid manual errors and missing data.
Enhanced Due Diligence (EDD)
Enhanced due diligence (EDD) applies deeper scrutiny to high-risk customers:
- Politically exposed persons (PEPs) and their families/associates
- Clients from high-risk jurisdictions (EU high-risk third country list, FATF grey list)
- High-risk sectors: casinos, virtual assets, correspondent banking
- Complex structures: offshore trusts, layered holding companies
Additional EDD Steps
- Obtaining detailed source of funds and source of wealth documentation
- Corroborating evidence (audited accounts, sale contracts, inheritance documents)
- Extensive adverse media screening
- Senior management or compliance sign-off
- More frequent review cycles (annual or quarterly)
InvestGlass can automate EDD triggers based on risk scoring, for example, automatic escalation when a PEP or sanctioned country is detected, and route cases through configurable approval workflows.
Ongoing and Event-Driven Due Diligence
CDD is not a “once-and-done” exercise. Ongoing CDD involves continuous monitoring of transactions, behaviour, and external data throughout the customer lifecycle.
Ongoing Due Diligence Includes
- Transaction monitoring against expected patterns
- Re-screening against updated sanctions, PEP, and adverse media lists
- Periodic reviews based on risk rating
Event-Driven Reviews Are Triggered By
- Sudden increases in transaction volume (20-50% deviations from profile)
- Change of residency to a higher-risk jurisdiction
- Leadership changes in corporate clients
- Onboarding of complex new mandates
Within InvestGlass, ongoing CDD can be implemented via scheduled review tasks, automated alerts on unusual activity, and refreshed customer screening of existing clients.
Transition: With an understanding of the types of CDD, let’s examine the core elements and practical steps involved in building a compliant and effective CDD process.
Core Elements of the Customer Due Diligence Process
The typical CDD lifecycle follows these stages:
- Customer identification
- Verification
- Risk assessment
- Decision on CDD level
- Onboarding decision
- Ongoing monitoring and review
This section provides a practical blueprint that compliance and operations teams can adapt into internal procedures and checklists. InvestGlass allows institutions to map each element into configurable, automated workflows with built-in audit trails.
Customer Identification
For Individuals, Collect:
- Full legal name
- Date and place of birth
- Nationality
- Residential address
- Tax identification numbers
- Contact details
- Occupation and employer
For Legal Entities, Collect:
- Registered name and registration number
- Incorporation date and registered office
- Legal form and purpose
- List of directors
- Controlling shareholders and beneficial owners
For private banks and wealth managers, capturing relationship context is critical, whether the mandate is discretionary or advisory, family office structures, and related trusts or foundations.
InvestGlass digital onboarding forms can be tailored to each segment (retail banking, HNWIs, corporate clients, public sector) and support multilingual flows including English, French, and German.
Customer Verification
Identification data must be verified using reliable, independent sources before establishing the relationship. This requirement appears across most AML regimes including EU 5AMLD, Swiss AMLA, and UK MLR 2017.
Verification Methods for Individuals
- Checking biometric passports or national IDs
- Performing liveness checks via video identification
- Validating addresses through trusted databases or utility bills
Verification Methods for Corporates
- Official company registers (Swiss Commercial Register, UK Companies House, EU Business Registers)
- Certified incorporation documents
InvestGlass can integrate with third-party e-ID, sanctions, and registry look-up providers via API to streamline identity verification and reduce manual document review.
Beneficial Ownership and Control
Regulatory focus on beneficial ownership transparency has intensified, driven by the FinCEN CDD Rule (2018) and European Union beneficial ownership register requirements following 4AMLD and 5AMLD.
Financial institutions must identify natural persons who ultimately own or control a legal entity above defined thresholds, commonly 25%, sometimes lower for high-risk situations.
Challenges in Complex Structures
- Multiple ownership layers
- Nominee shareholders
- Trusts and foundations in jurisdictions with limited public records
- Industry surveys show 30-40% failure rates in tracing multi-layer UBOs (Ultimate Beneficial Owners)
InvestGlass data models can capture multi-layered ownership and control diagrams and maintain structured records for audits and regulator requests.
Risk Profile Assessment
The goal of risk assessment is to assign a risk rating (low, medium, high) based on multiple inputs:
Risk Factor | Examples |
|---|---|
Customer type | PEP status, corporate complexity |
Geography | High-risk countries, sanctions exposure |
Products | Cross-border payments, virtual assets |
Behaviour | Transaction patterns vs. peer benchmarks |
External data | Sanctions hits, adverse media |
Quantitative scores and qualitative judgments can be combined into a risk scorecard. InvestGlass allows configuration of scoring models and automatic calculation of risk ratings, with the ability to override and record rationale where necessary.
Determining the Appropriate Level of CDD
Institutions translate risk ratings into practical diligence measures:
Risk Rating | CDD Level | Documentation | Approval |
|---|---|---|---|
Low | Simplified | Basic ID, proof of address | Automated |
Medium | Standard | Full documentation set | RM (Relationship Manager) sign-off |
High | Enhanced | EDD package, source of wealth | Senior/Compliance approval |
Clear, documented risk appetite and decision rules reduce inconsistency and speed up customer onboarding. In InvestGlass, workflow branching rules apply different steps, mandatory fields, and checks depending on the risk category assigned.
Ongoing Monitoring and Periodic Review
Continuously monitoring customers involves observing transactions, patterns, and profile changes to detect unusual or suspicious behaviour.
Periodic Review Frequencies
- Low risk customers: every 3-5 years
- Medium risk: every 2-3 years
- High risk: annually or more frequently
Re-screening against updated sanctions, PEP, and adverse media lists is essential after major geopolitical events or list updates from bodies such as the Office of Foreign Assets Control (OFAC, US), the European Union, or the State Secretariat for Economic Affairs (SECO, Switzerland).
InvestGlass can schedule review tasks, prompt relationship managers when customer information is stale, and record all review steps and conclusions for regulatory evidence.
Escalation and Suspicious Activity Reporting
When suspicious transactions or patterns are identified, institutions must follow escalation procedures leading potentially to Suspicious Activity Reports (SARs) or Suspicious Transaction Reports (STRs) filed with the relevant Financial Intelligence Unit, such as the Money Laundering Reporting Office Switzerland (MROS) or FinCEN in the US.
Internal Escalation Flow
- Front-office or monitoring tools flag concerns
- Second-line compliance reviews the case
- Decision to report suspicious transactions or exit the relationship
Comprehensive CDD records, documents, notes, risk scores, are essential to support decisions and respond to follow-up requests from authorities. InvestGlass can store case files, attach documents, log decisions, and integrate with case-management or external reporting tools where required.
Transition: With the core elements of CDD established, it’s important to understand the regulatory frameworks that shape these requirements globally and regionally.
Regulatory Frameworks and Global CDD Requirements
This section provides a concise overview of key regulations that shape CDD diligence requirements for banks and regulated firms operating internationally.
Although terminology differs across jurisdictions, most regimes share core expectations:
- Identify and verify customers
- Understand beneficial owners
- Apply a risk-based approach
- Monitor relationships continuously
Institutions operating across multiple jurisdictions often need to harmonise group-wide CDD standards. InvestGlass can encode different regulatory rulesets and documentation standards per country or legal entity.
FATF Recommendations and International Standards
The Financial Action Task Force (FATF) sets global AML/CFT standards through its 40 Recommendations, including core principles on CDD, PEPs, and beneficial ownership transparency.
FATF mutual evaluations influence how strictly countries implement CDD and how supervisors scrutinise financial institutions’ processes. Switzerland’s 2016 rating as “largely compliant” with gaps in private banking prompted follow-up improvements by 2022.
FATF encourages a risk-based approach, allowing simplified measures for low risk customers and EDD for higher-risk situations. Aligning internal policies with FATF language eases cross-border operations and supervisory dialogue.
European Union AML Directives
The European Union has progressively strengthened CDD through successive directives:
Directive | Year | Key CDD Enhancements |
|---|---|---|
4AMLD | 2015 | Beneficial ownership registers, risk-based approach |
5AMLD | 2018 | Expanded PEP definitions, virtual assets, stricter EDD |
6AMLD | 2020 | Criminal liability for senior management |
The EU AML Package and planned single EU AML rulebook under the Anti-Money Laundering Authority (AMLA) will further harmonise obligations across Member States.
InvestGlass can store jurisdiction-specific fields (EU national identifiers, beneficial ownership registry IDs) and support cross-border consistency.
US FinCEN Customer Due Diligence Rule
The Financial Crimes Enforcement Network (FinCEN) customer due diligence rule came into force on May 11, 2018, establishing four core elements for covered financial institutions:
- Customer identification and verification
- Beneficial owner identification and verification (25% threshold)
- Understanding the nature and purpose of relationships
- Ongoing monitoring and suspicious activity reporting
This CDD rule interacts with later developments including the US Anti-Money Laundering Act of 2020 and the Corporate Transparency Act, which introduces a federal beneficial ownership database accessible from 2024-2025.
InvestGlass can align onboarding workflows with these four elements and capture beneficial ownership information required for US branches or affiliates.
Swiss AMLA and FINMA Expectations
Key Swiss AML requirements under the Anti-Money Laundering Act (AMLA) and FINMA Anti-Money Laundering Ordinance include:
- Duties to identify contracting parties and beneficial owners
- Clarification of economic background for higher-risk relationships
- Emphasis on documentation quality and relationship understanding
- Risk-based supervision, especially for private banking and wealth management
Switzerland’s focus on data protection and banking secrecy requires CDD systems to maintain strict confidentiality and data sovereignty. InvestGlass is built as a Swiss sovereign solution with hosting in Switzerland or on-premise deployments, supporting Swiss banks and asset managers in balancing CDD obligations with data-privacy requirements.
Transition: Regulatory frameworks set the standards, but practical implementation varies by sector. The next section explores how CDD is applied in different financial services contexts.
Customer Due Diligence in Practice: Banks, Wealth Managers and Insurers
While core CDD concepts are shared across sectors, the emphasis differs significantly based on business model, client complexity, and transaction volumes.
Retail and Commercial Banks
High-volume onboarding for current accounts, savings, consumer credit, and SME banking demands streamlined digital CDD to avoid bottlenecks.
Key Focus Areas
- Standardised identity checks with automated sanctions and PEP screening
- Risk scoring based on products (cross-border payments, trade finance) and geography
- Transaction-monitoring feedback loops where alerts feed back into CDD risk reassessments
InvestGlass can pre-populate forms, reuse data across products, and drive straight-through processing for low risk customers with minimal manual intervention.
Private Banks and Wealth Managers
High-net-worth and ultra-high-net-worth client structures involve holding companies, trusts, foundations, and family offices across multiple jurisdictions. Industry data suggests 20-30% of UHNW clients have PEP connections.
Key Challenges
- Intensive EDD expectations for cross-border relationships
- Complex portfolios and bespoke investment products
- Balancing client experience with regulatory rigor
InvestGlass combines CRM, portfolio management, and CDD in one environment, enabling relationship managers to access risk profiles, KYC documents, and investment data without leaving the platform.
Insurance, Asset Management and Other Regulated Sectors
Life insurers, asset managers, independent financial advisers, and real estate firms also face CDD obligations aligned with financial-sector AML regulations.
Sector-Specific Considerations
- Life policies with surrender value as potential ML channels
- Investment funds with nominee arrangements
- Property purchases requiring identification of both buyers and beneficial owners
InvestGlass can tailor forms and workflows to these sectors, capturing additional data such as policy numbers, fund units, and mandate details alongside standard CDD data.
Transition: As the complexity of CDD increases, technology and automation become essential. The following section explores how RegTech solutions like InvestGlass streamline and enhance CDD processes.
From Manual to Automated CDD: Role of Technology and RegTech
Traditional paper-based, spreadsheet-driven CDD processes create significant operational burden. Industry research indicates manual CDD costs approximately $500 per client with 40-day onboarding cycles. Modern automated solutions can reduce onboarding to under 5 minutes for straightforward cases.
Challenges of Manual CDD
Manual checks increase:
- Onboarding time and client drop-offs
- Operational costs
- Error rates and regulatory risk
- Difficulty managing cross-border clients or corporate hierarchies
InvestGlass is a Swiss RegTech and WealthTech solution specifically designed for regulated environments.
Digital Onboarding and e-KYC
Digital onboarding journeys allow potential customers to complete CDD forms online, upload documents, and undergo video or automated e-ID checks without visiting a branch.
Benefits of Digital Onboarding
- Dynamic forms that show or hide questions based on customer type, country, or risk indicators
- Reduced time-to-onboard and fewer drop-offs
- Improved data quality
- Immediate feeding of collected data into downstream CRM and portfolio systems
InvestGlass supports white-label client portals and digital onboarding modules, allowing banks and wealth managers to deliver branded, compliant experiences.
Screening and Adverse Media Monitoring
Automated screening tools continuously check customers against:
- Sanctions lists (OFAC, EU, UN, SECO)
- PEP databases and watchlists
- Adverse media and negative news sources
The challenge of false positives remains significant, up to 95% in legacy systems. AI-enhanced matching logic can reduce false positives by 60-70%.
InvestGlass can integrate with leading screening providers, pulling in match results and enabling compliance teams to disposition alerts within the same ecosystem. Time-stamped records of screening, decisions, and justification evidence CDD during audits and supervisory inspections.
Workflow Automation and Case Management
Configurable workflows orchestrate steps including:
- Document requests and collection
- Approvals and escalations
- Risk scoring calculations
- Periodic reviews and remediation tasks
Rules engines can automatically route high-risk cases to compliance, request additional documents when triggers fire, or prevent account opening until mandatory fields are completed.
InvestGlass offers built-in workflow automation, task management, and case-tracking features connecting front-office, compliance, and back-office teams. Dashboards and analytics monitor CDD bottlenecks, ageing tasks, and overall risk distribution across the client base.
AI-Assisted CDD in Wealth Management
AI supports, but does not replace, human judgment in CDD, particularly in:
- Document classification and data extraction (90% accuracy on IDs)
- Summarising adverse media findings
- Highlighting inconsistencies in client declarations
- Identifying unusual portfolio transactions or mandate changes
InvestGlass includes AI-driven modules designed for regulated environments with human-in-the-loop controls and full auditability of automated suggestions.
Transition: With technology as an enabler, designing a robust CDD framework requires clear policies, procedures, and governance. The next section outlines how to build such a framework with InvestGlass.
Designing a Robust CDD Framework with InvestGlass
A thorough CDD framework combines policy, processes, technology, and people, all aligned with the organisation’s risk appetite and regulatory obligations. Institutions should review their frameworks at least annually or whenever significant regulatory changes occur.
Defining Risk Appetite and CDD Policies
Boards and senior management must define acceptable risk levels, including positions on:
- High-risk countries and jurisdictions
- Sensitive sectors (gambling, virtual assets, arms)
- Complex product types
This risk appetite should translate into written CDD policies that align with applicable regulations and include examples, thresholds, and decision criteria. Policies must specify when to apply simplified CDD, standard CDD, and EDD, and when to exit or decline business.
InvestGlass can embed these rules into digital workflows so that day-to-day decisions automatically reflect approved policies.
Standardising Procedures and Checklists
Creating detailed, role-specific procedures and CDD checklists ensures consistency across locations and business lines:
- Templates for information requests
- Risk-assessment forms
- EDD documentation requirements
- Clear minimum standards
Standardisation makes it easier to train new staff, perform internal quality reviews, and demonstrate control to regulators. InvestGlass delivers these checklists as online forms and task lists, reducing reliance on paper or static spreadsheets.
Training, Culture and Governance
Continuous training for all relevant staff covers CDD obligations, red flags, and system usage, with annual refreshers and testing (targeting 80%+ pass rates).
Building a culture of responsibility means staff feel empowered to escalate concerns without fear of retaliation. Governance follows the three lines model:
Line | Responsibility |
|---|---|
First (Business) | Execute CDD, identify risks |
Second (Compliance) | Oversee, advise, monitor |
Third (Internal Audit) | Independent assurance |
InvestGlass reporting and audit features help these lines of defence monitor performance and evidence oversight.
Data Quality, Privacy and Swiss Data Sovereignty
High-quality, accurate, and up-to-date data is critical for effective CDD, risk management, and regulatory reporting.
Data-protection requirements under laws like EU GDPR and the revised Swiss Federal Act on Data Protection (nFADP) include:
- Purpose limitation
- Data minimisation
- Cross-border transfer restrictions
Swiss data sovereignty concerns are paramount for banks and wealth managers who prefer or are required to keep client data within Swiss jurisdiction.
InvestGlass offers Swiss-hosted or on-premise deployments, enabling institutions to meet CDD obligations while retaining control over client data location and access.
Reducing the Cost and Complexity of CDD
Many institutions face growing CDD workloads, rising regulatory expectations, and constrained budgets. CDD operations can consume 5-10% of compliance budgets at larger institutions.
Strategic investments in automation and process redesign can significantly reduce cost per client while improving quality.
Streamlining Onboarding and Review Cycles
Centralising customer data and documents eliminates duplication of effort across departments and business units. Benefits include:
- Reusing verified data during product upgrades, cross-selling, and periodic reviews
- Auto-generating reminders for expiring documents (passports, corporate registers)
- Reduced onboarding turnaround time
- Fewer back-and-forth interactions with clients
InvestGlass consolidates CRM, onboarding, KYC, portfolio management, and client portal functions, avoiding fragmented systems that increase cost and risk.
Reducing False Positives and Manual Investigations
Poorly tuned screening tools generate excessive false positives, consuming compliance resources and slowing approvals.
Strategies to reduce noise:
- Risk-based thresholds
- Fuzzy-matching calibration
- White-listing known entities
- Customer segmentation
InvestGlass integrations and workflow capabilities help triage alerts, enrich them with contextual information, and route only relevant cases to human review. Better CDD data quality at onboarding leads directly to fewer false positives downstream.
Leveraging Analytics for Continuous Improvement
Analytics on CDD processes inform process redesign and training priorities:
- SLA adherence tracking
- Rate of missing information
- Top reasons for EDD escalation
- Risk trends across portfolios, geographies, and segments
InvestGlass dashboards allow compliance and management teams to visualise key CDD metrics and drill down to individual cases. Treating CDD as a strategic data asset, not just a regulatory obligation, enables institutions to evaluate relevant information about their customer base and identify growth opportunities.
Conclusion: Building Sustainable, Compliant CDD with InvestGlass
Customer due diligence is an ongoing, risk-based process that demands strong policies, accurate data, and effective technology. Regulators globally expect institutions to demonstrate not only written policies but also consistent execution, evidence, and effective oversight across the entire customer lifecycle.
The stakes are clear: institutions with weak CDD face regulatory fines, reputational damage, and loss of critical banking relationships. Those with robust, well-governed frameworks protect businesses from financial crime while building deeper, more profitable customer relationships.
InvestGlass offers a Swiss sovereign platform that unifies CRM, digital onboarding, KYC/CDD, portfolio management, and marketing automation for banks, wealth managers, insurers, and other regulated actors. With Swiss data sovereignty, configurable workflows, and integrated compliance efforts, InvestGlass helps institutions ensure compliance while reducing operational costs.
Ready to transform your CDD operations? Evaluate your existing processes against the framework described in this guide and consider where automation, better data management, and Swiss-hosted infrastructure could mitigate risks and reduce costs. Request a demonstration of how InvestGlass can map your specific CDD policies and regulatory environment into configurable, auditable workflows that protect your institution and serve your clients.
Glossary of Key Terms and Acronyms
- AML (Anti-Money Laundering): These are the laws and procedures to prevent the disguising of illegally obtained funds as legitimate.
- CFT (Counter-Financing of Terrorism): Measures to prevent the use of financial systems for terrorist financing.
- KYC (Know Your Customer): The process of verifying the identity and risk profile of clients.
- CDD (Customer Due Diligence): The process of identifying, verifying, and assessing customer risk.
- EDD (Enhanced Due Diligence): Additional scrutiny applied to high-risk customers.
- PEP (Politically Exposed Person): This is the Individuals with prominent public functions, increasing risk of corruption.
- UBO (Ultimate Beneficial Owner): The natural person(s) who ultimately own or control a legal entity.
- SAR (Suspicious Activity Report): A report filed with authorities when suspicious activity is detected.
- STR (Suspicious Transaction Report): Similar to SAR, a report of suspicious transactions to authorities.
- FinCEN (Financial Crimes Enforcement Network): US government bureau overseeing AML/CFT compliance.
- OFAC (Office of Foreign Assets Control): US Treasury office administering and enforcing economic sanctions.
- SECO (State Secretariat for Economic Affairs): Swiss government office responsible for economic policy, including sanctions.
- FATF (Financial Action Task Force): This is the International body setting AML/CFT standards.
- AMLA (Anti-Money Laundering Act): Swiss law governing AML/CFT requirements.
- MROS (Money Laundering Reporting Office Switzerland): Swiss Financial Intelligence Unit.
- Three Lines Model: A governance framework dividing responsibilities among business units, compliance, and internal audit.
