Sensitive AML Data Deserves Purpose-Built Protection
Art market compliance records contains passports, identity documents, addresses, corporate ownership details, source-of-funds evidence, transaction context, risk decisions, and internal compliance notes. KYCProtect treats this information as sensitive from the moment it enters the workflow. The platform is designed to support secure collection, review, storage, and release of AML evidence while giving teams the visibility they need to make proportionate, risk-based decisions.
- Identity verification records
- Sanctions, PEP, and adverse media screening outcomes
- Beneficial ownership and corporate buyer information
- Source-of-funds and source-of-wealth evidence
- Linked transaction and high-value sale records
- Internal risk decisions, reviewer notes, and audit history
Security Controls Built Around AML Workflows
KYCProtect is designed around controlled access, secure evidence handling, and defensible record-keeping. Instead of passing sensitive files through inboxes or shared folders, teams can manage client due diligence inside a structured compliance workflow.
Role-based access
Limit what sales, operations, and compliance users can see or do.
Audit-ready activity history
Keep a record of key actions, decisions, and review status.
Secure document handling
Reduce reliance on email attachments and unmanaged file storage.
Encrypted connections
Protect data in transit between users and the platform.
Controlled review status
Let commercial teams see whether a client is cleared, pending, escalated, or blocked without exposing unnecessary personal data.
Retention-aware workflows
Support organised record-keeping for AML files and review evidence.
Four Steps to an Audit-Ready Compliance File
KYCProtect organises client due diligence into four connected steps — from identity verification to continuous monitoring. Select any step below to explore how each part of the workflow operates.
Step 1
Identity Verification
Secure document authentication via Didit
Step 2
Automated Screening
Sanctions, PEP, watchlists, adverse media
Step 3
Risk Scoring
Based on FATF-aligned typologies
Step 4
Continuous Monitoring
Alerts on changes, new risks, or media exposure
Identity Verification
Powered by Didit
KYCProtect is powered by Didit: the licensed verification source mandated for regulatory-compliant processing of all government-issued documents.
Automated Screening
Our automated screening system stays up to date by linking directly to governments and international organizations
Sanctions Screening
Coverage of all major international sanctions regimes
- OFAC (US)
- EU Consolidated Sanctions
- UN Security Council
- HM Treasury (UK)
- Regional sanctions lists
PEP & Political Exposure
Identification of politically exposed persons and close associates
- Government registers
- International leadership databases
- State-owned enterprise records
- Relatives and close associates (RCA)
Adverse Media Monitoring
Continuous screening across 235,000+ news sources
- Financial crime
- Corruption & bribery
- Regulatory violations
- Terrorism & organised crime
Powered by automated adverse media screening via regulated data providers
Risk Scoring
Automated risk scoring informed by FATF guidance and internationally recognised typologies
Match Analysis
Evaluates the severity and credibility of sanctions, PEP, and adverse media hits
FATF Alignment
Risk levels calibrated against Financial Action Task Force typologies and red flags
Profile & Jurisdiction
Evaluates client industry, purpose of relationship, expected transaction volume, nationality, and country of residence
Deterministic Scoring
Rule-based engine producing a 0–100 score. The same inputs always produce the same result — fully explainable and audit-ready
Risk Level Framework
Low Risk (Verified & Clear)
Status: Identity confirmed. Automated screening is clear with no watchlist matches (Sanctions/PEP), and the identity document is valid and matches the profile perfectly.
Required Action: Clear. Recommended for standard onboarding.
Medium Risk (Verification Pending)
Status: Pending clarification. Screening is clear, but minor discrepancies—such as a name variation, an expired document, or a high-audit jurisdiction—require additional context.
Required Action: Request Proof of Address (POA). Collect secondary documentation to resolve data conflicts and finalize residency verification.
High Risk (Enhanced Due Diligence)
Status: Manual review required. The profile contains significant red flags, such as Adverse Media, "Soft Matches" on PEP registries, or persistent address mismatches across documents.
Required Action: Start Enhanced Due Diligence (EDD). Activates a workflow to help you collect and log additional documents like Proof of Funds or ownership context.
Critical Risk (Immediate Escalation)
Status: Compliance block. A direct match on Global Sanctions Lists has been confirmed, or there is evidence of fraudulent documentation and financial crime.
Required Action: Account blocked. Pause transaction and review internally for reporting to the Financial Intelligence Unit (FIU).
Privacy-First by Design
KYCProtect does not exist to monetise personal data. Information processed through the platform is used to support AML, KYC, sanctions screening, risk review, and compliance record-keeping for your business. For art businesses, privacy is not just a legal issue. It is commercial. Collectors, consignors, artists, intermediaries, and institutional buyers expect discretion. KYCProtect helps you request only the evidence needed for a proportionate compliance decision and keep that evidence within a controlled workflow.
Where required, KYCProtect can support GDPR-aligned processing, data access controls, and documented compliance workflows. For detailed data processing terms, request our security and data protection information.
Built for Regulator, Bank, and Internal Review
AML compliance is not complete when a passport is collected. A defensible file needs to show what was checked, why it was checked, who reviewed it, what risk indicators were considered, and how the final decision was reached. KYCProtect helps convert scattered compliance evidence into a structured case file that can support internal review, bank queries, supervisory checks, and future audits.
- Documented customer due diligence
- Risk-based review logic
- Sanctions and PEP screening evidence
- Source-of-funds reasoning
- Corporate and beneficial ownership records
- Reviewer notes and escalation status
- Transaction-linked compliance context
Designed for Galleries, Dealers, and Auction Houses
Generic KYC tools often assume a standard financial onboarding flow. Art market compliance is different. A single transaction may involve a buyer, payer, intermediary, advisor, shipping destination, corporate vehicle, beneficial owner, and artwork-specific context. KYCProtect is built around the realities of high-value art transactions: discreet collector relationships, linked transactions, fair sales, consignments, corporate buyers, repeat collectors, private placements, and cross-border AML obligations.
Screening That Supports Human Compliance Judgment
KYCProtect supports sanctions, PEP, adverse media, and risk screening as part of a broader due diligence workflow. Screening results should not sit in isolation. They need to be connected to identity information, transaction context, jurisdiction, ownership structure, and reviewer judgment. The platform helps compliance teams move from a simple 'match/no match' mindset to a documented risk-based decision that can be explained later.
Security Awareness for Your Team
KYCProtect will never ask users to share passwords by email or phone. If your team receives a suspicious message claiming to be from KYCProtect, do not open links or attachments until the message has been verified. We recommend that art businesses train staff to recognise phishing attempts, domain spoofing, suspicious payment instructions, and unusual document requests, especially during high-value sales and art fair periods.
