AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Belize
- Bolivia
- Bosnia and Herzegovina
- Brazil
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Andorra
Verify residents and non-residents through the Govern d'Andorra digital certificate, passport NFC and 10,000+ foreign ID document types, run KYB on Registre de Societats companies and their owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for AFA-authorised and UIFAND-supervised firms.
Operational Performance for Andorra KYC
Our Numbers Speak Volumes
98.04%
Pass
Rates
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
Andorra IDV/KYC Challenges
Most Customers Onboard With a Foreign Document
KYC in Andorra rarely starts with an Andorran document. More than half of residents are foreign nationals, so most customers arrive with a foreign passport or ID card. Shufti's zero-shot document intelligence verifies documents from 240+ countries, including formats it has never seen before.
Keeping Customer Risk Current Requires Continuous Monitoring
Law 14/2017 requires ongoing monitoring of every business relationship and up-to-date customer data (Article 9), so a clean file can go stale within months. Shufti checks transactions against profiles, keeps sanctions and PEP data current and flags registry, director and ownership changes.
Remote Relationships Without Safeguards Count as Higher Risk
Law 14/2017 lists remote relationships without safeguards such as electronic identification as a higher-risk factor, while Decree 76/2022 still verifies people by showing and copying a photo ID. Shufti reads the passport chip and runs liveness checks, giving remote onboarding that safeguard.
Thin Case Files Weaken UIFAND Reports
Every obliged entity must report suspicions to UIFAND in writing, and an urgent report must be confirmed on paper within two working days. Thin files slow that report and any follow-up request. Shufti's case management assembles report-ready bundles for each UIFAND filing.
Documents and Languages
Individual Documents Shufti Verifies in Andorra
Shufti verifies 4+ Andorran identity documents plus passports and ID cards from other countries. The cards below cover the core documents Andorran onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsGovern d'Andorra Digital Certificate and Cartera Digital
The Govern issues a free digital certificate under Law 35/2014, the electronic identification Law 14/2017 recognises, and its Cartera Digital app, launched in October 2025, carries the passport, immigration card and driving licence. Shufti accepts certificate-based identification and checks the documents behind it.
Andorran Passport
The Govern's third-generation biometric passport, issued since December 2022, is the identity document Andorran nationals rely on. Shufti reads its chip through NFC and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Immigration Card (Residence and Work Authorisations)
The Servei d'Immigració issues an immigration card for each authorisation, from residence and work to residence without gainful activity and digital nomad permits, and the card also sits in the Cartera Digital. Shufti checks its authenticity, expiry and holder against the passport presented with it.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign residents, cross-border workers and private banking clients who never visit a branch onboard with these documents.
Andorran Driving Licence
Issued through the Govern's driving licence register under the Traffic Code (Law 12/2021), the licence has a new design and a Cartera Digital version. Shufti checks authenticity, expiry and facial match, which helps rental, mobility and delivery platforms onboard drivers.
Proof of Address
Rental contracts, property deeds, FEDA electricity bills, telecom bills and bank statements all serve as proof, with addresses carrying parish postcodes from AD100 to AD700. Shufti verifies the address document in the same step as the identity document, so the customer uploads once.
Entity Identity
Andorran Company Certificate (Certificat de Societat Mercantil)
The Registre de Societats Mercantils issues it for SA and SL companies under the Companies Law (Law 20/2007). Shufti checks the certificate against live registry data at every check and flags a mismatched name, status, capital or board.
Deed of Incorporation and Articles of Association
Andorran companies are formed by public deed before an Andorran notary, with the articles attached, and the notary files a copy with the registry within 15 days. Shufti's AI-OCR reads ownership, capital and signing authority, and flags GAN-generated or edited pages.
Registre de Comerç Inscription
Trading activity is registered with the Govern under the Commerce Law (Law 12/2013), after registration with the parish comú. Shufti matches the registered activity, trade name and premises against the company certificate, so a shell trading under another name stands out.
Business Address Proof
Commercial leases, premises records and utility bills show the registered office and trading premises. Shufti cross-checks the address against the company certificate and the Registre de Comerç inscription before the account opens.
Tax Identity
Company Tax Registration Number (NRT)
The Departament de Tributs i de Fronteres assigns each company an NRT under the 2015 Tax Application Regulation, with a first letter showing the legal form, A for an SA and L for an SL. Shufti extracts it and cross-checks it against the company certificate.
Individual NRT and NIA
A resident's NRT is their administrative identification number (NIA) preceded by F, and a non-resident's is preceded by E. Shufti reads both on sole-trader, director and signatory files and matches them to the passport or immigration card.
Foreign Tax Registrations and CRS Self-Certification
Shufti extracts foreign tax numbers and CRS self-certification forms for companies and individuals with tax residence elsewhere, a common case for holding structures and private banking clients, and checks each against the entity's other records.
Ownership and Control
Beneficial Ownership Records in the Registre de Societats
Law 14/2017 places beneficial owner data in the companies register (Article 19), and the 2018 regulation, amended by Decree 214/2022, requires changes within 15 working days of the notarial deed. Shufti extracts everyone who owns or controls more than 25% and screens them.
Shareholder Register and Ownership Chart
Ownership of Andorran companies often runs through holding companies and foundations. Shufti maps each intermediate layer, then screens every owner against the UIFAND restrictive measures list, UN sanctions lists and PEP data.
Directors, Attorneys and Authorised Signatories
Board members, managers and attorneys recorded in the registry are identity-verified and screened before they act for the company, and Shufti alerts the case owner when the board or powers of attorney change.
Languages We Cover
Catalan, Spanish, French and Portuguese Document Parsing
Andorran documents are issued in Catalan, while foreign residents bring documents written in Spanish, French, Portuguese and non-Latin scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy, field by field, and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence reads unseen layouts on first sight, with no template needed.
Catalan Name Matching
Catalan names carry diacritics such as à, è, ï, ò and ç, and many people use two surnames joined by "i". Shufti's phonetic and transliteration rules match these variants in sanctions and PEP screening.
Cross-Document Consistency Checks
Names, NIA-based identifiers and dates of birth are reconciled across the passport, immigration card, driving licence, NRT and the company's beneficial ownership records, so a mismatch between documents surfaces before approval.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route Andorran Firms Rely On, in One Platform
Law 14/2017 recognises electronic identification under Law 35/2014 as a safeguard for remote relationships (Articles 9 and 12), and Decree 76/2022 verifies individuals against an official photo ID (Article 7). Shufti supports both, plus chip, document and video routes for non-residents and customers without a digital certificate.
Govern d'Andorra Digital Certificate
LiveResidents who hold the Govern's digital certificate identify electronically, the safeguard Law 14/2017 looks for in remote onboarding. Shufti records the certificate result alongside the document and face checks in one case file.
Notarised and Apostilled Copies
LiveDecree 76/2022 lets firms accept a copy of an official photo ID authenticated by a notary with an apostille. Shufti extracts the copy, checks it against a live document or chip read and keeps both in the file.
NFC Chip Verification
LiveShufti reads the chip in the Andorran biometric passport and in most foreign biometric passports, validating the data against the issuer's certificates. It is the high-assurance route for customers without a digital certificate.
Document and Face Biometric
LiveShufti matches a live selfie to the passport, immigration card or foreign ID, with certified liveness that blocks masks, replays and injected video. It is the route most non-residents and cross-border clients take.
Fraud Prevention Across the Andorra Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Andorran businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for the passport chip, the immigration card and Catalan-language documents cuts glare, cropping and accent errors before a customer submits.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes, and decision history, packaged as report-ready bundles for STR filing with UIFAND.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director, and transaction behavior changes across the full compliance lifecycle.
Digital Certificate and Passport-First Flow Design
Residents identify through the Govern digital certificate or the passport chip first, and non-residents move to foreign passport verification in the same flow.
Shufti's IDV/KYC Solutions for Andorra
KYC Solutions
Online ID verification in Andorra covers nationals with a biometric passport, foreign residents with an immigration card, cross-border workers and private banking clients who never visit. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote clients make impersonation the main onboarding risk for Andorran banks. Shufti's iBeta Level 3 liveness and face match run at a 99.5% first-try pass rate, stopping deepfakes, masks and injected video while genuine clients get through first time.
.
Age Verification
Law 14/2024 requires licensed gaming operators to check age at registration, and tobacco and alcohol cannot be sold to under-18s. Shufti estimates age in under 5 seconds, blocks 99.8% of underage attempts and falls back to a document check when needed.
.
Bank Account Verification
Andorran accounts use the AD IBAN format, and a mistyped or borrowed account breaks payouts and refunds. Shufti validates the IBAN and its checksum and matches the account holder's name in real time before money moves.
.
Address Verification
Address proofs arrive as rental contracts, deeds, utility bills and bank statements in Catalan, Spanish or French. Shufti's layout-aware extraction and fuzzy matching read each format and match it to the parish postcode, with a 99.3% pass rate.
.
Document Verification
Passports, immigration cards and foreign IDs each carry different security features, and forgers target the ones teams know least. Shufti flags screenshots, replays, synthetic PVC cards and print-and-scan copies within seconds, so forged documents never reach a reviewer.
.
Identity Verification
ID verification services in Andorra often have to combine a passport, an immigration card, a selfie and an address proof. Shufti runs document, biometric, NFC, address and certificate checks in one API session, so the customer finishes in one sitting and the file is complete.
.KYB Solutions
KYB in Andorra rests on the Registre de Societats Mercantils, where company, board and beneficial owner data sit together, but ownership often runs through holding companies and foundations. Shufti calls the registry live and traces owners to the more-than-25% test in Law 14/2017.
Explore More
Business Verification
Onboarding an Andorran company means confirming its registry certificate, NRT, signatories and everyone who owns or controls more than 25%. Shufti's live registry call pulls that picture together in one check, putting corporate onboarding under two minutes.
.
Enhanced Due Diligence
Law 14/2017 requires enhanced checks on PEPs, private banking and customers seeking residence through investment (Articles 12 and 14). Shufti's due diligence forms branch by risk, collect source of wealth evidence and score each answer, so files reach senior approval complete.
.AML Screening
A customer who is clean at onboarding can land on a list next week, which is why AML solutions in Andorra have to keep screening after the account opens. Shufti's perpetual KYC rescreens customers against 4,000+ watchlists, including the UIFAND restrictive measures list and the UN lists it incorporates, with data refreshed every 15 minutes and every hit in one case file.
Explore More
Business AML Screening
Andorran companies often sit inside holding and foundation structures, so exposure hides at owner and director level. Shufti screens each entity, owner and director against the UIFAND list, sanctions and 50,000+ adverse media sources, and perpetual KYB rescreens the portfolio after every change.
.
Transaction Monitoring
Banks file most of Andorra's suspicious transaction reports, and each needs evidence UIFAND can act on. Shufti monitors 24/7 with a library of 500+ pre-built rules covering structuring, smurfing, and mule activity, cuts false positives by 60% and builds report-ready case bundles.
.
Travel Rule
Digital asset providers authorised by AFA under Law 24/2022 are obliged entities, with due diligence on occasional transfers from EUR 1,000. Shufti's Travel Rule protocol exchanges IVMS101 originator and beneficiary data with counterparty VASPs and verifies unhosted wallet ownership.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits, and common Catalan surnames repeat across thousands of records. Shufti's Co-Pilot reviews every hit and gives a confidence score with a written reason, while the MLRO keeps the final call.
.Built To Fit Andorra's Compliance Landscape
Law 14/2017 and UIFAND set AML and counter-terrorist financing rules for every obliged entity in Andorra, while AFA regulations govern licensing and prudential supervision of financial firms and CRAJ licenses gaming. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Law 14/2017 on Preventing Money Laundering and Terrorist Financing
Andorra's AML law, as amended, treats ownership of more than 25% as a sign of beneficial ownership (Article 3.3), requires ongoing monitoring of every relationship (Article 9) and keeps records for five years after a relationship ends, which UIFAND can extend by five more (Article 37).
Decree 76/2022, AML/CFT Regulation
The regulation verifies individuals by at least showing and copying an official photo ID, or a notarised and apostilled copy (Article 7), sets ongoing monitoring duties (Article 8) and requires written suspicion reports to UIFAND (Article 11). Decree 46/2025 added an optional exemption from the annual external AML audit.
Financial Intelligence Unit of Andorra (UIFAND)
UIFAND is Andorra's AML/CFT competent authority. It receives suspicious transaction reports (Article 20), supervises financial and non-financial obliged entities (Article 55) and issues technical communications whose breach is a serious infringement. Its 2026 communications updated the high-risk country lists and set the criteria for applying simplified due diligence.
Andorran Financial Authority (AFA)
AFA authorises and supervises banks, investment firms, management companies, insurers, payment and e-money institutions and digital-asset participants. Law 7/2024 requires its prior authorisation before an entity outsources relevant operational functions, including IT systems (Article 8). AFA passes AML findings to UIFAND, the competent AML authority.
Law 24/2022 on the Digital Representation of Assets
The law brings issuers, custodians and other providers of crypto and tokenised assets under AFA authorisation, registration and supervision. Law 37/2021 made virtual asset service providers obliged entities under Law 14/2017, with due diligence on occasional transactions of EUR 1,000 or more (Article 8).
Andorran Gaming Regulatory Council (CRAJ)
CRAJ supervises gaming under Law 14/2024, which replaced Law 4/2021. Online licence applicants must show how they confirm each player's identity, age, address and payment account (Article 35), gaming rooms keep ID copies for ten years (Article 15), and casinos apply AML due diligence from EUR 2,000.
Beneficial Ownership Rules for the Registre de Societats
Beneficial owner data sits in the companies, associations and foundations registers (Law 14/2017, Article 19). The 2018 regulation, amended by Decree 214/2022, gives companies 15 working days to file changes after a notarial deed and opened access to any person, with obliged entities using it for due diligence.
Foreign Investment Under Law 5/2025
Law 5/2025 requires prior Govern authorisation for foreign investment, decided within two months, records it in the Foreign Investment Register and bans investment from high-risk jurisdictions (Articles 4, 10 and 19). Residence without gainful activity now needs EUR 600,000 invested, or EUR 400,000 through the Housing Fund.
Permanent Commission for the Prevention of Money Laundering and Terrorist Financing
Chaired by UIFAND's head, the Commission publishes Andorra's terrorist and proliferation financing list, which must include every UN-listed name (Articles 48 and 64). Resolution 1/2026 of 14 May 2026 sets the current list, and the Govern adopts other international restrictive measures by decree under Law 5/2022.
MONEYVAL Evaluation of Andorra
MONEYVAL adopted Andorra's fifth-round mutual evaluation in 2017 and followed it with enhanced follow-up reports in 2018, 2019 and 2021. UIFAND coordinates the national risk assessment, which produced national and sectoral studies in 2016 and 2020, and Andorra is now preparing for the sixth evaluation round.
Andorra Data Residency and Deployment
The LQPD sets no data localisation duty, but transfers abroad need equivalent protection (Articles 42 to 44). Shufti offers on-premises deployment inside Andorran infrastructure, including air-gapped setups, or nearest-region cloud hosting, with hosting locations and transfer safeguards set in the agreement.
Andorran Personal Data Protection Law (LQPD)
Law 29/2021, in force since May 2022 and supervised by the Andorran Data Protection Agency (APDA), treats biometric data used to identify a person as a special category (Article 9). Shufti applies encryption, role-based access controls and configurable retention to identity and biometric data.
Financial-Sector Outsourcing Rules
Law 7/2024 and Decree 419/2024 require AFA authorisation before relevant functions are outsourced and guarantee the entity, its auditors and authorities effective access to the data. Shufti's agreements set audit and access rights, contingency and data-recovery plans and exit terms to support that approval.
Retention Controls
Andorran retention periods differ by law and licence, and UIFAND can lengthen the AML period case by case. Shufti configures retention by client and licence, treats statutory minimums as minimums rather than deletion dates and applies legal holds when a period is extended.
Encryption and Security
The LQPD names encryption among its security measures (Article 35) and expects breach notice to APDA within 72 hours where possible (Article 36). Shufti encrypts data in transit and at rest, applies role-based access and audit logging, and holds ISO 27001:2022 certification and SOC 2 Type 2 reports.
Automated Decisions and Biometric Data
LQPD Article 25 gives people the right to human intervention and to contest decisions based solely on automated processing. Shufti returns verification results and supporting details through the API and back office, so support teams can explain outcomes and escalate disputed results.
Scope of Our Role
Shufti processes verification data as a processor (encarregat del tractament) acting on the firm's documented instructions under LQPD Article 31. The firm keeps responsibility as controller, and Shufti's privacy notice identifies the activities it carries out as an independent controller.
Data Residency and Privacy Controls in Andorra
Andorra AML Sources That Strengthen Decisions
Financial Intelligence Unit of Andorra (UIFAND)
Andorran Financial Authority (AFA)
Ministry of Finance
Andorran Police Corps
Department of Taxes and Borders – Andorran Customs
Ministry of Justice and Interior
Council of Europe – MONEYVAL
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
International Monetary Fund (IMF)
European Commission
UN Security Council Sanctions Committees
Basel Committee on Banking Supervision
International Criminal Police Organization (INTERPOL)
Wolfsberg Group
Turn Andorra Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Andorra
Remote Account Opening For Resident And Private Banking Clients
Andorra's banking groups serve residents and private banking clients across borders, and Law 14/2017 lists private banking as a higher-risk factor. Shufti combines passport chip reads, liveness, digital certificate identification and source of wealth forms, so relationship managers open accounts remotely with a complete EDD file.
Frequently Asked Questions
Does Shufti support the Govern d'Andorra digital certificate, and what happens when customers cannot use it?
Yes. Residents holding the Govern's digital certificate can identify electronically, the safeguard Law 14/2017 names for remote onboarding. Customers without one move in the same flow to passport chip reading, document and selfie checks or an agent-led video session, with every result in one case file.
Is scanning an Andorran passport enough, or should verification include its chip?
A scan proves a document was shown, while the chip proves the Govern issued it and nobody altered it. Shufti reads the biometric passport chip through NFC, validates its digital signature and matches the chip photo to a live selfie with iBeta Level 3 liveness.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot document intelligence checks the structure, fonts and security patterns of an unfamiliar format against how genuine documents are built, so a newly issued card is verified rather than rejected. Foreign passports and ID cards are the norm in Andorran onboarding.
How does Shufti OCR compare with Google OCR for Andorran identity documents?
Shufti reads Catalan diacritics and two-surname formats field by field on Andorran documents. For the non-Latin documents some residents carry, Shufti's published benchmark shows it averaging 93% accuracy against Google Vision's 78.4%, so fewer fields need manual correction.
How does Shufti verify ownership when an Andorran company has several corporate layers?
Shufti pulls the company's record from the Registre de Societats Mercantils, then follows each corporate shareholder through its own registry filings or articles until it reaches the people who own or control more than 25%. Each of those owners is identity-verified and screened.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Article 9 of Law 14/2017 requires ongoing monitoring of the business relationship, which goes beyond list checks. Shufti compares transactions with each customer's profile, tracks registry, director and ownership changes, and alerts the case owner when a customer's risk moves.
How does Shufti keep screening current and handle Catalan name variations?
Shufti refreshes sanctions, PEP and adverse media data every 15 minutes, including the restrictive measures list UIFAND publishes. Its phonetic models match accented and unaccented spellings and two-surname formats, so "Puig i Martí" and "Puig Marti" are reviewed as one candidate.
Can we choose Andorra hosting or run verification inside our own infrastructure?
Yes. Shufti deploys on-premises inside your Andorran infrastructure, including air-gapped setups, or in nearest-region cloud hosting. The agreement fixes hosting locations and transfer safeguards, supporting the equivalent protection the LQPD requires and the data access AFA's outsourcing rules expect.
What controls help us protect identity and biometric data?
Shufti encrypts identity and biometric data, limits access by role, masks NIA and passport numbers for staff who do not need them and logs every action. Configurable retention removes data once your period ends, and independent certifications support your vendor due diligence.
Can we configure different retention periods for different Andorra licences?
Yes. Shufti sets retention by client, licence and record type, so a bank applies the five-year AML minimum from Law 14/2017 while a gaming operator keeps ID copies for ten years under Law 14/2024. Legal holds pause deletion when UIFAND extends a period.
What does Shufti provide when our compliance team needs to prepare a UIFAND report?
Shufti packages the customer file, verification results, screening hits, transaction history and analyst notes into a report-ready bundle. Your team uses it to complete the written suspicion report Decree 76/2022 requires and to answer UIFAND's follow-up requests without rebuilding the case.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder adds steps such as a passport chip read, an address check or EDD questions by product, risk tier or residency status, without code changes to your app. Existing customers can be routed into the new steps at their next review.
How does Shufti make verification queries easier for our customer support team?
Every decision shows the checks that ran, the result and the reason in plain language in the back office and API. Support staff can see why a customer was declined or asked to resubmit, guide them through a retry and escalate disputed results to compliance.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
17 September, 2026
What Is SEPA? Schemes, Countries and Regulations
SEPA now spans 41 countries and territories, including EU candidate countries added since 2025. Covers its payment schemes, instant payment rules and fraud controls.
Knowledge Base
