- Algeria
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Bolivia
- Brazil
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Azerbaijan
Verify citizens and residents through SİMA, Asan İmza, ID card chip reads and 10,000+ foreign ID document types, run KYB on registered companies and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for CBAR-supervised firms.
Operational Performance for Azerbaijan KYC
Our Numbers Speak Volumes
99.79%
Pass
Rates
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
Azerbaijan IDV/KYC Challenges
Remote Onboarding Requires Four Checks at Once
Identity verification in Azerbaijan tightened in 2023, when Financial Monitoring Service (FMS) rules made four separate checks, from an enhanced e-signature to live video, mandatory for every new remote relationship. Shufti brings all four into one flow, using your institution's SİMA, Asan İmza and state data access, so customers finish in a single session.
Bank Rules Now Demand Random Liveness and a State Photo Match
Since 30 March 2026, CBAR's Rule on Remote Opening of Accounts requires at least three random liveness actions and a software face match against state records. Shufti's certified liveness and face matching produce that evidence for every remote account.
Ownership Checks Run at 10% While the Register Fills
Article 1.1.20 of the AML Law treats a 10% stake or vote as controlling ownership, yet the new beneficial ownership register will not hold every older company until micro firms file by December 2027. Because the register is not public, Shufti maps each layer from company documents and verifies every owner.
Suspicious Transactions Must Be Held and Reported Before They Execute
Under Article 11.5 of the AML Law, a financial institution that suspects a high-risk or large transaction must hold it for two working days and report it to the FMS first. Shufti flags the transaction in real time and assembles the case file for filing.
Documents and Languages
Individual Documents Shufti Verifies in Azerbaijan
Shufti verifies 10 Azerbaijani identity document types plus passports and ID cards from other countries. The cards below cover the core documents Azerbaijani onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsSİMA and Asan İmza Digital Identity
Asan İmza, a SIM-based mobile ID, and SİMA İmza, a face-recognition app from AzInTelecom, both issue the enhanced e-signature that FMS rules require for remote relationships. Shufti accepts either as an identity route through your institution's SİMA or Asan İmza integration and logs the signature result in the case file.
Azerbaijani Identity Card
The Ministry of Internal Affairs issues the card to every citizen from age 15, and cards issued since September 2018 carry an ICAO-standard chip with the photo, fingerprints and FİN code. Shufti reads the chip by NFC, checks for tampering and matches a live selfie.
Temporary and Permanent Residence Permits
The State Migration Service issues residence permit cards to foreign nationals under the Migration Code, and the temporary permit card doubles as an identity document. Shufti authenticates the card, reads its details and matches the holder by selfie, so foreign residents onboard like citizens.
Azerbaijani Biometric Passport
Passports issued since September 2013 carry a chip holding the holder's face image and fingerprints. Shufti reads it by NFC and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign workers, international students and non-resident investors use these documents in the same flow as Azerbaijani citizens.
Azerbaijani Driving License
The Ministry of Internal Affairs issues chip-based card licenses through its Chief State Road Police Department, and a digital license sits in the mygov app. Shufti checks authenticity, expiry and the facial match, making the license age proof for casino and car rental onboarding.
Proof of Address
Newly issued ID cards show the registered address after 2025 amendments, while older cards and foreign residents need utility bills, bank statements or a residence registration record. Shufti verifies the document in the same step as the ID and matches name and address.
Entity Identity
State Register Extract
The State Tax Service under the Ministry of Economy keeps the state register of legal entities and issues the registration certificate and register extract. Shufti calls the register live at every check, confirming name, VÖEN, status, founders and director, and flags companies whose details have changed.
Company Charter
AI-OCR reads ownership, capital and signing authority from the charter and its amendments, and flags GAN-generated or edited pages before a reviewer relies on them.
Business Address Proof
The legal address in the register extract is cross-checked against lease agreements and utility bills, so a company's registered and trading addresses match before onboarding.
Tax Identity
Taxpayer Identification Number (VÖEN)
The State Tax Service assigns every taxpayer a 10-digit VÖEN and confirms it on a taxpayer registration certificate. Shufti extracts the number from the certificate or taxpayer card and cross-checks it against the live register record and the company's other documents.
VAT Registration
Registration as a VAT payer under the Tax Code is separate from the VÖEN, so a company's VAT status needs its own check. Shufti reads the VAT status a company declares and reconciles it with its registration documents and register record.
Foreign Tax Registrations and FATCA/CRS Self-Certification
Foreign parents and non-resident founders are verified with their home tax registrations, and FATCA and CRS self-certification forms are collected and checked inside the same due diligence flow.
Ownership and Control
Beneficial Ownership Register
Law 175-VIIQD of April 2025 requires companies to file beneficial owner data in the state register, with older firms filing in stages by company size and fines under Article 403-1 of the Code of Administrative Offences. Shufti extracts each owner from the filing and screens them.
Shareholder Register and Ownership Chart
Share registers and group charts show how holdings run through foreign parents and intermediate companies. Shufti maps ownership through every layer and screens each owner against sanctions, PEP and adverse media lists.
Directors and Authorized Signatories
Each director and authorized signatory is identity-verified and screened, and Shufti alerts the team when the register records a change of management.
Languages We Cover
Azerbaijani, English and Cyrillic Document Parsing
Azerbaijani documents print names in Latin script with letters such as ə, ğ and ı beside English fields, and many foreign residents bring Cyrillic documents. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and keeps every diacritic intact. It averages 93% accuracy against Google Vision's 78.4% in its published benchmark, and its zero-shot document intelligence reads unseen layouts on first sight, with no template needed.
Azerbaijani Name Matching
Patronymic markers such as oğlu and qızı, and surnames ending in -ov, -ova, -li or -zadə, transliterate inconsistently into Latin and Cyrillic. Native phonetic models for 80+ languages match each variant against sanctions and PEP lists.
Cross-Document Consistency Checks
Names, dates of birth and FİN codes are reconciled across the ID card, passport, residence permit and register extract, so a mismatch surfaces before approval.
Independent Validation
Shufti's Recognition Across Independent Evaluations

Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read MoreRegulatory Update
Every Verification Route Azerbaijani Regulators Recognize, in One Platform
FMS rules from February 2023 name an enhanced e-signature, database checks, strong authentication and live or recorded video as the measures for remote relationships, and CBAR's 2026 rule adds photo, video recording and video call identification for remote accounts. Shufti supports each of these routes, plus chip, document and video routes for non-residents and customers without an Azerbaijani ID card.
Enhanced E-Signature Through SİMA or Asan İmza
LiveCustomers confirm their application with an Asan İmza mobile signature or a SİMA İmza face-recognition signature, the first of the measures FMS rules make mandatory for a new remote relationship. Shufti stores each signature result in the case file.
State Photo Face Match
LiveCBAR's rule has software compare the customer's face with their photo in the state information system. Shufti runs that match through your institution's authorised access to the state photo and records the score beside the liveness result.
Docless Database (eIDV)
LiveA mygov ID login or state data shared with the customer's consent through the Electronic Government Information System confirms identity details without a document upload. Through your institution's authorised EGIS access, Shufti checks the returned data against the application and decides in seconds.
NFC Chip Verification
LiveShufti reads the chip in Azerbaijani ID cards, biometric passports and most foreign biometric passports and checks it against the printed data, the high-assurance route for residents who do not use SİMA or Asan İmza.
Document and Face Biometric
LiveiBeta Level 3 certified liveness runs randomized challenges before Shufti matches the face to the document, blocking deepfakes, masks, replays and injected video. This is the route most non-residents take.
Fraud Prevention Across the Azerbaijani Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Azerbaijani businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for ID cards, residence permits and diacritic-heavy Azerbaijani fields catches glare, blur and cropped edges before submission, so customers rarely retry.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for filing through the FMS reporting system.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file, while perpetual KYC/KYB tracks ownership, director and transaction behavior changes.
SİMA, Asan İmza and ID Card-First Flow Design
Citizens and permit holders confirm identity through SİMA, Asan İmza or the ID card chip first, and non-residents move to passport checks in the same flow.
Shufti's IDV/KYC Solutions for Azerbaijan
KYC Solutions
KYC in Azerbaijan covers citizens using SİMA, Asan İmza or their ID card, foreign residents with permit cards and non-residents with foreign passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore MoreFace Verification
Remote account opening in Azerbaijan stands or falls on the selfie step, and fraudsters know it. Shufti's face verification passes 99.5% of genuine users on the first try while stopping deepfakes, masks and injected video at the same step.
.Age Verification
Casino games, legal since July 2025 only on artificial land plots, are closed to anyone under 21, and sports betting excludes minors. Shufti reads date of birth from the verified document, or estimates age from a selfie in under 5 seconds, and applies the right limit.
.Bank Account Verification
Azerbaijani accounts use the 28-character IBAN beginning with AZ, and payouts fail when a digit or the holder's name is wrong. Shufti validates the IBAN checksum and confirms the account holder's name in real time before money moves.
.Address Verification
Older ID cards carry no street address, so firms rely on utility bills and registration records whose layouts differ by issuer. Shufti extracts the address with layout-aware OCR and fuzzy-matches it to the application, passing 99.3% of genuine documents.
.Document Verification
Azerbaijani onboarding spans chip ID cards, biometric passports, residence permit cards, card driving licenses and VÖEN certificates. Shufti authenticates each format, reads Azerbaijani and English fields within seconds and rejects altered or screen-captured copies.
.Identity Verification
Separate vendors for e-signature results, document checks, selfies and addresses leave one customer spread across several systems. Shufti runs document, biometric, NFC, address and database checks in one API session, giving compliance teams a single decision and record.
.KYB Solutions
Due diligence on an Azerbaijani company starts with the State Tax Service register extract and beneficial ownership filing, then follows founders through holding companies to every owner the AML Law captures. Shufti's live registry calls keep each company record current.
Explore MoreBusiness Verification
Onboarding an Azerbaijani company means confirming its register entry, VÖEN, director and everyone who owns or controls 10% or more. Shufti's live registry call confirms the company record, and declared owners are checked against the beneficial ownership filing and share register the company provides.
.Enhanced Due Diligence
Layered holdings, PEP links, foreign founders and cash-heavy sectors call for a closer look. Shufti's branching questionnaires, configurable risk scoring and UBO verification links collect source of funds and ownership evidence, and send high-risk files for senior approval.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including UN Security Council lists and the domestic list the State Security Service publishes, refreshes sanctions and PEP data every 15 minutes and keeps every alert in one case file.
Explore More
Business AML Screening
An Azerbaijani company's exposure often sits with its founders and director. Shufti screens the entity and every owner and director against sanctions lists, including Azerbaijan's domestic designations, PEP data and adverse media, and perpetual KYB rescreens the portfolio as records change.
.
Transaction Monitoring
Article 11 of the AML Law requires threshold cash and wire transfers and foreign PEP transactions to be reported to the FMS within three working days. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity with 60% fewer false positives.
.Travel Rule
Virtual asset service providers are financial institutions under Article 1.1.8 of the AML Law, and CBAR's 2023 rule requires authorized providers to send originator and beneficiary data with each transfer. Shufti exchanges that data across major Travel Rule networks and verifies unhosted wallet ownership.
.AI Compliance Co-Pilot
One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews each one, gives a 0 to 100 confidence score and a written reason, and leaves the final call with your compliance officer, logging every override.
.Built To Fit Azerbaijan's Compliance Landscape
AML compliance in Azerbaijan rests on one AML Law, one financial regulator and a financial intelligence unit that sets the identification rules. CBAR supervises the financial sector, while the State Tax Service, Ministry of Justice, Bar Association and Chamber of Auditors oversee non-financial businesses and professions. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.
Law on Combating the Legalization of Criminally Obtained Property and the Financing of Terrorism
Law 781-VIQ took effect on 1 February 2023 and repealed the 2009 AML law. Article 1.1.20 treats a stake or vote of 10% or more as controlling ownership, Article 4.5 requires ongoing due diligence and Article 6 requires records to be kept for at least five years.
Central Bank of the Republic of Azerbaijan (CBAR)
CBAR has supervised banks, non-bank credit organizations, insurers, investment firms and payment and e-money institutions since the Financial Markets Supervisory Authority was abolished in 2019. Its Rule on Remote Opening of Accounts, in force since 30 March 2026, sets photo, video and video call identification standards.
Financial Monitoring Service (FMS)
The FMS, an independent public legal entity since 2018, is Azerbaijan's financial intelligence unit. Its February 2023 verification rules set four mandatory measures for remote relationships, and reporting entities file through its Suspicious Transaction Monitoring information system, regulated by a July 2025 presidential decree.
CBAR Rule on Operations With Virtual Assets
Adopted in February 2023, the rule requires providers authorized by law to send originator and beneficiary data with every virtual asset transfer and to manage unhosted wallet risk. Virtual asset service providers are already AML obliged entities, while a law licensing them has yet to be adopted.
State Tax Service under the Ministry of Economy
The State Tax Service registers commercial legal entities, issues VÖEN numbers and keeps the beneficial ownership register created by Law 175-VIIQD in April 2025. Under a January 2023 presidential decree, it also supervises real estate agents, casinos and legal, accounting and tax advisers for AML compliance.
Ministry of Justice
The Ministry of Justice supervises notaries and non-governmental organizations for AML compliance, while Article 16 of the AML Law assigns lawyers to the Bar Association and auditors to the Chamber of Auditors. Notaries and lawyers carry due diligence and reporting duties when they handle property or company deals.
Ministry of Internal Affairs
The Ministry issues ID cards, biometric passports and driving licenses and holds the photo and fingerprint data behind them. The Law on Identity Card of a Citizen makes the card compulsory, and the mygov digital ID card has carried equal legal force since July 2024.
State Migration Service
The Service issues temporary and permanent residence permits and work permits to foreign nationals under the Migration Code of 2013. Temporary permits run for up to a year at first, and a July 2026 law allows permits to be issued as electronic documents through the e-government system.
Innovation and Digital Development Agency (IDDA)
IDDA, under the Ministry of Digital Development and Transport, runs the mygov platform and the digital.bridge data exchange. An August 2025 presidential decree set rules for the Electronic Government Information System, whose subsystems cover digital data exchange, digital consent and single sign-on for public and private services.
State Security Service Targeted Financial Sanctions
Under Law 782-VIQ on Targeted Financial Sanctions, in force since February 2023, the State Security Service publishes Azerbaijan's domestic list alongside UN Security Council lists. Assets of listed persons must be frozen without delay and without prior notice, and the FMS republishes the list for reporting entities.
AML/CFT Coordination Council
The Coordination Council, chaired by a Deputy Prime Minister with the FMS as secretariat, coordinates AML policy under a 2020 Cabinet resolution. Article 21 of the AML Law requires a national risk assessment at least every three years, and a 2023 to 2025 action plan set recent priorities.
MONEYVAL Evaluation of Azerbaijan
MONEYVAL adopted Azerbaijan's fifth-round mutual evaluation in December 2023 and placed the country in enhanced follow-up. Its 2025 follow-up report upgraded seven recommendations but left virtual assets partly compliant, and Azerbaijan was not on the FATF list of jurisdictions under increased monitoring in June 2026.
Azerbaijan Data Residency and Deployment
No major public cloud provider runs a region in Azerbaijan, so Shufti runs on-premises in your own infrastructure in the country, air-gapped if required, with any other hosting location fixed in your agreement. CBAR's 2024 information security requirements cover outsourcing and cloud use, and the agreement carries the terms they call for.
Law on Personal Data (No. 998-IIIQ)
The 2010 law applies its processing conditions in full to biometric data, from face images and fingerprints to voice, under Article 9.5, and Article 15 requires personal data information systems to be registered. Shufti adds encryption, role-based access and configurable retention for identity and biometric data.
Cross-Border Transfers
Article 14 bars transfers to countries without protection at the level Azerbaijani law provides, unless the data subject consents or the transfer protects life and health. The law sets no general localization rule, and Shufti's data processing agreement records the transfer basis and safeguards for each flow.
Retention Controls
Retention is configurable by client and license, covering the five-year AML minimum from the end of each relationship or transaction. Statutory minimums are not automatic deletion dates, Article 9.4 of the data law calls for deletion once the purpose is met, and legal holds preserve records.
Encryption and Security
Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 and SOC 2 Type 2 reports support bank vendor reviews, and banks report serious information security incidents to CBAR within five working days under Decision 20/1.
Automated Decisions and Biometric Data
Article 7.3 lets a data subject object to a decision based on automated processing that harms their interests, and the firm then needs consent to process the data another way. Shufti returns verification results and their reasons through the API and back office, so support teams can explain outcomes.
Scope of Our Role
Shufti acts as an operator under the Law on Personal Data, processing data only on the owner's instructions. The firm remains the owner of the information system and responsible for compliance, and Shufti's privacy notice names any activities it runs on its own account.
Data Residency and Privacy Controls in Azerbaijan
Azerbaijan AML Sources That Strengthen Decisions
Financial Monitoring Service of Azerbaijan (FMS)
Central Bank of the Republic of Azerbaijan (CBAR)
State Tax Service under the Ministry of Economy
Ministry of Justice of Azerbaijan
Azerbaijani Bar Association
Chamber of Auditors of Azerbaijan
General Prosecutor's Office of Azerbaijan
State Security Service of Azerbaijan
Ministry of Internal Affairs of Azerbaijan
State Customs Committee of Azerbaijan
Council of Europe – MONEYVAL
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
United Nations Security Council Consolidated List
World Bank Financial Integrity and Stability
Turn Azerbaijan Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Azerbaijan
Meet CBAR's Remote Account Opening Rule
Digital onboarding for Azerbaijani banks now follows CBAR's 2026 remote account rule and the FMS's mandatory remote measures. Shufti brings SİMA and Asan İmza signature results, liveness, face matching, chip reads and video calls into one flow, screens customers continuously and keeps each decision ready for inspection.
Frequently Asked Questions
Does Shufti support SİMA and Asan İmza, and what happens when customers cannot use them?
Yes. Through your institution's SİMA or Asan İmza integration, customers confirm their identity with an enhanced e-signature, and Shufti records the result in the case file. Customers without either move to ID card or passport chip checks, document authentication, liveness and video in the same flow.
Is scanning an Azerbaijani ID card enough, or should verification include its chip?
A scan leaves room for edited or replayed images. Shufti reads the card's ICAO-standard chip by NFC, checks it against the printed data, tests security features and matches the holder's live face to the chip photo, evidence an image alone cannot provide.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a foreign resident's national ID or a newly issued Azerbaijani document is checked for authenticity and tampering like any known format, with no wait for template updates.
How accurately does Shufti read Azerbaijani identity documents?
Shufti's OCR reads Azerbaijani Latin script, including the ə, ğ, ı, ö, ü, ç and ş characters, and the English fields beside it. For documents foreign residents bring, Shufti's published benchmark shows it averaging 93% accuracy against Google Vision's 78.4%.
How does Shufti verify ownership when an Azerbaijani company has several corporate layers?
Shufti pulls the register record for each Azerbaijani company in the chain, reads the beneficial ownership filing the company provides, maps holdings through foreign parents and intermediate companies and identifies everyone at the 10% threshold. Each owner is verified and screened, and a register change triggers a rescreen.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Article 4.5 of the AML Law requires transactions to be analyzed against the customer's profile and source of funds, and FMS rules set reviews from yearly for high-risk customers to every three years for low risk. Shufti checks transactions against each profile and schedules reviews.
How does Shufti keep screening current and handle Azerbaijani name variations?
Watchlists update continuously, including the State Security Service's domestic list and UN lists, which apply without delay. PEP checks cover each customer and beneficial owner as Article 7 requires, and phonetic matching links Latin and Cyrillic spellings such as Məmmədov, Mammadov and Мамедов.
Can we choose where data is hosted or run verification inside our own infrastructure?
Yes. Deploy Shufti on-premises, air-gapped if required, so identity data stays on your network, with any other hosting location set in the agreement. That record supports the transfer rules in Article 14 of the Law on Personal Data and CBAR's outsourcing requirements.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is kept only as long as your configured retention allows, and ISO 27001:2022 and SOC 2 Type 2 reports support vendor reviews and the state registration of your information systems.
Can we configure different retention periods for different Azerbaijani licenses?
Yes. Retention is set per client, license and record type, so a bank, a payment institution and an investment firm in one group can each keep records for at least five years after the relationship ends, or longer when the period is extended under Article 6.3.
What does Shufti provide when our compliance team needs to prepare an FMS report?
Shufti's case file holds the verified identity, screening results, transaction history, alerts and analyst notes in one place, exported as a report-ready bundle. Your team submits it through the FMS Suspicious Transaction Monitoring system, even for a held transaction, without rebuilding evidence.
Can we add verification checks without rebuilding our onboarding journey?
Yes. The AI Journey Builder adds or reorders checks such as SİMA signatures, NFC chip reads, video calls or IBAN checks without code changes, and routes customers by product, nationality and risk tier, so new CBAR or FMS requirements reach production quickly.
How does Shufti make verification queries easier for our customer support team?
Every decision appears in the back office with its reason, the failed check and the captured evidence. Support agents can explain a rejected selfie or ID card in plain language, ask for a specific retake and pass disputed results to compliance.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
17 November, 2025
ID Verification Guide for Crypto Exchanges
As crypto rules tighten, exchanges must raise assurance without slowing sign-ups. A buyer's guide to risk-based KYC, AML and fraud controls for crypto platforms.
Product Guide





