AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Albania
- Algeria
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Bolivia
- Bosnia and Herzegovina
- Brazil
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Bosnia and Herzegovina
Verify citizens and foreign residents through ID card NFC, qualified electronic certificates and 10,000+ foreign ID document types, run KYB on court-registered businesses and their owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for FBA-, ABRS- and securities commission-supervised firms.
Operational Performance for Bosnia and Herzegovina KYC
Our Numbers Speak Volumes
99.32%
Pass
Rates
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
Bosnia and Herzegovina IDV/KYC Challenges
Grey Listing Puts Every Counterparty Check Under Review
KYC in Bosnia and Herzegovina (BiH) now faces sharper questions from correspondent banks and foreign partners, who scrutinize firms from a jurisdiction under FATF increased monitoring since June 2026. Shufti's enhanced due diligence and perpetual KYB give BiH firms evidence that stands up to that review.
Beneficial Ownership Registers Are Still Being Built
Article 85 of the 2024 AML Law gives obliged entities access to beneficial ownership registers set up under BiH laws, yet no state-level register exists. Shufti traces everyone holding 25% or more through court register filings, securities registries and signed ownership declarations.
Two Entities and Brčko District Keep Separate Registers and Supervisors
Companies register with courts in the Federation of BiH, Republika Srpska or Brčko District, and banks answer to two entity banking agencies with their own AML decisions. Shufti's AI Journey Builder configures checks by entity, license and risk tier inside one platform.
Suspicious Transactions Must Reach the FID Before They Execute
A suspicion raised mid-payment leaves compliance teams little time to assemble the identity, screening and transaction history behind it. Shufti's case management keeps that record complete from onboarding and packages it as a report-ready bundle for AMLS, the filing system of the Financial Intelligence Department (FID).
Documents and Languages
Individual Documents Shufti Verifies in Bosnia and Herzegovina
Shufti verifies BiH identity documents plus passports and ID cards from other countries. The cards below cover the core documents BiH onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsQualified Electronic Certificate (Digital Identity)
Certification bodies registered under BiH electronic signature law issue qualified certificates for e-signature and e-seal, and the AML Law accepts them for remote identification of individuals and company representatives. Shufti verifies the certificate holder against their ID document and a live face in the same session.
BiH Identity Card (Lična karta / Osobna iskaznica)
Cantonal, Republika Srpska and Brčko District authorities issue the card and IDDEEA personalizes it, and cards issued since 2013 carry a contactless chip with the holder's face and fingerprints. Shufti reads the chip by NFC, runs nine forensic layers and matches the face with liveness.
Residence Permits and Identity Cards for Foreigners
The Service for Foreigners' Affairs issues residence permits and the identity card for foreigners (stranačka lična karta) under the Law on Aliens, often alongside a work permit. Shufti verifies each against its issued format, extracts the number and expiry date, and flags permits near expiry.
BiH Biometric Passport
Passports issued since October 2009 carry a contactless chip with the holder's photo and fingerprints. Shufti reads the chip and applies nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign workers, overseas investors and non-resident company directors onboard with the passport or national ID card they already hold.
BiH Driving License
Cantonal, Republika Srpska and Brčko District authorities issue the pink polycarbonate card license, recorded in IDDEEA's central register, with field titles in Latin and Cyrillic. Shufti checks authenticity, expiry and the photo against a live selfie, which suits rental, delivery and ride-hailing sign-ups.
Proof of Address
The ID card shows only the municipality of residence, so the street address comes from a residence certificate, a utility bill or a bank statement. Shufti verifies the address document in the same step as the ID and confirms the municipality matches on both.
Entity Identity
Court Registration Decision and Register Extract
Registration courts enter companies in the Federation and Republika Srpska registers, with APIF running Republika Srpska's one-stop filing, and Brčko District keeps its own e-Registar. Shufti reads the registration decision and extract, then checks company status, registration number and JIB against live register data.
Founding Act and Statute
AI-OCR reads ownership, capital and signing authority from the founding act, statute and any amendments, and flags GAN-generated or edited pages, so a doctored ownership clause is caught before the company is approved.
Business Address Proof
The seat recorded in the register extract is cross-checked against lease agreements and utility bills, so a company operating from an address it never registered is flagged for review.
Tax Identity
Unique Identification Number (JIB)
The 13-digit JIB, issued by the Federation, Republika Srpska and Brčko District tax administrations, appears on the court registration decision and anchors a company's tax records. Shufti extracts the JIB and matches it across the decision, register extract and tax certificates.
VAT Number (PDV Broj)
The Indirect Taxation Authority (ITA) registers VAT payers under the Law on VAT and issues a 12-digit number formed by dropping the leading 4 from the JIB. Shufti confirms the two numbers correspond, so a mismatched or borrowed VAT number stands out.
Foreign Tax Registrations and FATCA/CRS Self-Certification
Foreign parents and non-resident founders are verified against their home tax registrations, and FATCA and CRS self-certifications are captured in the same due diligence flow, so cross-border reporting status sits with the company file.
Ownership and Control
Beneficial Ownership Information
The 2024 AML Law treats anyone holding 25% or more of shares, votes or ownership rights as a beneficial owner, and points firms to entity registers as they open. Shufti extracts owners to that threshold, verifies each one and screens them against sanctions and PEP lists.
Shareholder Register and Ownership Chart
For joint-stock companies, the Registry of Securities in the Federation and the Central Registry of Securities in Republika Srpska show who holds the shares. Shufti maps holdings through intermediate and foreign parent companies and screens every person in the chain.
Directors and Authorized Representatives
Each director and authorized representative listed in the court register is identity-verified and screened, and Shufti alerts the team when the register shows a change to the board or to signing rights.
Languages We Cover
Latin, Cyrillic and English Document Parsing
BiH documents carry field titles in Bosnian, Croatian, Serbian and English, with personal data printed in both Latin and Cyrillic. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.
Bosnian, Croatian and Serbian Name Matching
Spellings such as Đorđević, Djordjevic and Ђорђевић are matched as one person, with transliteration rules for č, ć, đ, š and ž applied in sanctions and PEP screening.
Cross-Document Consistency Checks
Names, dates of birth and the 13-digit JMBG are reconciled across the ID card, passport, driving license and court register filings before a case file closes.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route the BiH AML Law Recognizes, in One Platform
The 2024 AML Law accepts electronic identification means and direct checks of public registers under Article 11, qualified electronic certificates under Article 22 and video-electronic identification under Article 21. Shufti supports the certificate and video routes, plus chip and document routes for non-residents and customers without a qualified certificate.
Qualified Electronic Certificate
LiveThe customer authenticates with a qualified certificate issued in BiH, and Shufti records the certificate data and its revocation status, collecting any fields the certificate lacks from the ID document, as Article 22 sets out.
NFC Chip Verification
LiveShufti reads the chip in BiH ID cards, biometric passports and most foreign biometric passports and checks it cryptographically against its issuer, the high-assurance route for residents without a qualified certificate.
Document and Face Biometric
LiveiBeta Level 3 certified liveness runs before Shufti matches the selfie to the ID card, passport or permit photo, which is the route most non-residents and foreign workers take.
Video Identification
LiveArticle 21 permits remote video identification of adults holding a biometric document, with enhanced monitoring until the customer appears in person. Shufti's agent-led sessions run in the language your customers use and record the full call as evidence.
Fraud Prevention Across the Bosnia and Herzegovina Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Bosnia and Herzegovina businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for ID cards, permits and dual-script fields catches glare, blur and cropping before submission, so fewer customers are asked to retry.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for STR filing through AMLS.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction behavior changes, managing the compliance lifecycle.
Qualified Certificate and ID Card-First Flow Design
Citizens confirm identity through a qualified certificate or the ID card chip first, and non-residents move to passport verification in the same flow.
Shufti's IDV/KYC Solutions for Bosnia and Herzegovina
KYC Solutions
Identity verification in Bosnia and Herzegovina covers citizens with chip ID cards or qualified certificates, foreign residents with permits and non-residents with passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding stands or falls on the selfie step, and fraudsters know it. Shufti's face verification runs iBeta Level 3 certified liveness with a 99.5% first-try pass rate, and blocks masks, replays and injected deepfakes before the face is matched to the document.
.
Age Verification
Federation rules for internet games of chance admit only adult players identified at registration, and age-restricted online services face the same question at sign-up. Shufti estimates age from a selfie in under 5 seconds, with a document check as the fallback.
.
Bank Account Verification
BiH accounts use a 20-character IBAN beginning with BA, and payouts fail when a digit or the holder's name is wrong. Shufti validates the IBAN structure and checksum and matches the account holder's name in real time before the first transfer.
.
Address Verification
Utility bills, bank statements and residence certificates come in many layouts across local providers, in Latin or Cyrillic. Shufti's layout-aware extraction and fuzzy matching read them with a 99.3% pass rate, and docless checks return in under 3 seconds.
.
Document Verification
Onboarding in BiH spans chip ID cards, biometric passports, permits for foreigners, card driving licenses and foreign documents in many scripts. Shufti checks each within seconds across nine forensic layers, catching GenAI edits, screenshots and print-and-scan copies that pass a visual review.
.
Identity Verification
Separate vendors for certificate checks, documents, selfies and addresses leave one customer spread across several systems. Shufti runs document, biometric, NFC, address and certificate checks in one API session, so each decision rests on a single, complete identity record.
.KYB Solutions
Due diligence on a BiH company starts with its court register entry and JIB, and ownership often runs through holding companies or securities registries. Live registry calls and the 25% ownership test of the 2024 AML Law sit in one Shufti check.
Explore More
Business Verification
Onboarding a BiH company means confirming its register entry, JIB, directors and everyone who owns or controls 25% or more. Shufti's live registry call confirms the court register record, and owners are traced through securities registries and signed ownership declarations.
.
Enhanced Due Diligence
Article 34 of the AML Law requires source of wealth and source of funds checks for politically exposed persons, and layered holdings or cash-heavy sectors call for the same depth. Shufti's branching due diligence forms score risk, collect that evidence and send UBO verification links.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the Ministry of Security's consolidated list and UN lists, refreshed every 15 minutes, with every alert kept in one case file.
Explore More
Business AML Screening
A BiH company's exposure often sits with its owners and directors rather than the entity itself. Shufti screens the entity and every person behind it against sanctions lists, including Council of Ministers freezing decisions, plus PEP and adverse media, and perpetual KYB repeats it on register changes.
.
Transaction Monitoring
Article 43 of the AML Law requires cash transactions of KM 30,000 or more, including linked ones, to be reported to the FID. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, with up to 60% fewer false positives and report-ready case bundles.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits, and dual-script spellings add more. Shufti's AI Compliance Co-Pilot reviews each hit, gives a 0 to 100 confidence score and a written reason, and leaves the final call with your MLRO.
.Built To Fit Bosnia and Herzegovina's Compliance Landscape
AML compliance in Bosnia rests on one state AML Law and one financial intelligence unit, while the Federation of BiH, Republika Srpska and Brčko District run their own banking, securities, insurance and gaming supervisors. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.
Law on Prevention of Money Laundering and Financing of Terrorist Activities
Published in the Official Gazette of BiH No. 13/24, the law took effect in February 2024 and repealed the 2014 AML law. It sets the obliged entities in Article 5, the 25% beneficial ownership test, ongoing monitoring under Article 27 and ten-year record retention under Article 92.
Financial Intelligence Department (FID) of SIPA
The FID, part of the State Investigation and Protection Agency (SIPA), is the financial intelligence unit. Article 42 requires suspicious transactions to be reported before they are carried out, or by the next working day when that is impossible, and Article 46 sets electronic filing through AMLS.
Banking Agency of the Federation of BiH (FBA)
The FBA licenses and supervises banks, microcredit organizations and leasing companies in the Federation and is their AML supervisor under Article 93. Its Decision on Managing Money Laundering and Terrorist Financing Risk, published in February 2024, and its 2022 outsourcing decision set bank-level rules.
Banking Agency of Republika Srpska (ABRS)
ABRS supervises banks, microcredit organizations and leasing companies in Republika Srpska. Its 2024 Decision on Managing Money Laundering and Terrorist Financing Risk replaced the 2012 minimum standards, and its outsourcing decision requires banks to record the country and data location of each outsourced service.
Central Bank of Bosnia and Herzegovina (CBBH)
CBBH issues the convertible mark under a currency board, runs the payment systems and the Central Registry of Credits, and coordinates the two entity banking agencies. It is not an AML supervisor under Article 93, so AML banking regulation in Bosnia sits with the FBA and ABRS.
Securities Commission of Republika Srpska
The Commission supervises brokers, fund managers and custodians in Republika Srpska and keeps the register of virtual asset service providers created by the Law on Securities Market, which bars unregistered providers from operating. It is also their AML supervisor under Article 93 of the AML Law.
Securities Commission of the Federation of BiH
The Commission supervises brokers, investment fund managers and custodian banks in the Federation and issued AML guidelines for them in March 2025. The Federation has no virtual asset law yet, and a draft law on virtual asset service providers went to public consultation in 2026.
Insurance Supervisory Agency of the Federation of BiH
The Agency supervises life insurers and insurance intermediaries in the Federation for AML compliance and issued AML guidelines in December 2025, amended in June 2026. The Insurance Agency of Republika Srpska carries the same supervisory duty for insurers and intermediaries in that entity.
Republic Administration for Games of Chance of Republika Srpska
The Administration licenses gaming in Republika Srpska under the 2019 Law on Games of Chance, which covers internet games. In the Federation, the Federal Ministry of Finance sets internet gaming rules under the 2015 law, requiring players aged 18 or over to be identified at registration.
Ministry of Security of BiH, Sanctions
The Law on Restricting the Disposal of Assets, in force since May 2026, applies UN Security Council sanctions without delay, within 24 hours at most. The Ministry of Security publishes the consolidated list of UN designations and Council of Ministers freezing decisions for obliged entities to screen.
Permanent AML/CFT Coordination Body
The Council of Ministers formed the body under Article 6 of the AML Law to coordinate national policy and risk assessment, with the Ministry of Security as proposer. The implementing Rulebook, in force since February 2026, sets risk assessment, PEP and simplified due diligence rules.
Agency for Identification Documents, Registers and Data Exchange (IDDEEA)
IDDEEA personalizes ID cards, passports and driving licenses and keeps the citizen registers built on the 13-digit JMBG, under the laws on identity cards and on the unique master citizen number. Its eDataXchange service gives authorized legal entities register access on a stated legal basis.
FATF Increased Monitoring of Bosnia and Herzegovina
MONEYVAL adopted its mutual evaluation of BiH in December 2024 and placed the country in enhanced follow-up. In June 2026 the FATF added BiH to its increased monitoring list, with an action plan covering beneficial ownership information, notary and DNFBP supervision, and feedback on STR quality.
Bosnia and Herzegovina Data Residency and Deployment
Shufti runs on-premises inside your own infrastructure, air-gapped if required, so identity data stays on your network, or in a cloud region agreed in the contract. Hosting locations, sub-processors and any transfer arrangements are fixed in the agreement before go-live.
Law on Personal Data Protection (Official Gazette of BiH No. 12/25)
Applied since October 2025, the law treats biometric data used to identify a person as a special category under Article 11 and requires breach notice to the Personal Data Protection Agency within 72 hours under Article 35. Shufti encrypts identity and biometric data and applies role-based access.
JMBG Handling
Article 54 allows the unique master citizen number to be processed only with appropriate safeguards, and existing processing must comply with the new law by March 2027 under Article 116. Shufti limits who can view JMBG fields through role-based access and logs every view.
Banking Outsourcing and ICT Rules
ABRS requires banks to record the country and data location of outsourced services and to notify ICT contracts that support critical functions, while the FBA applies its own outsourcing decision. Shufti supplies the hosting, sub-processor and audit-rights details banks need for those records and notifications.
Retention Controls
Retention is configurable by client and license, covering the AML Law minimum from the end of each relationship or transaction. Statutory minimums are not automatic deletion dates, and legal holds keep records past their schedule when an investigation or dispute requires it.
Encryption and Security
Data is encrypted in transit and at rest, with role-based access and full audit logging throughout. ISO 27001:2022 certification and a SOC 2 Type 2 report give banks and their auditors the evidence that vendor and outsourcing assessments call for.
Automated Decisions and Biometric Data
Article 24 gives people the right not to be subject to decisions based solely on automated processing that significantly affect them. Shufti returns verification results and supporting details through the API and back office, so support teams can explain outcomes and escalate disputed results to a person.
Scope of Our Role
Shufti acts as a processor under the Law on Personal Data Protection, handling data only on the controller's instructions under an Article 30 contract. The firm remains responsible as controller, and Shufti's privacy notice identifies any activities where it acts as an independent controller.
Data Residency and Privacy Controls in Bosnia and Herzegovina
Bosnia and Herzegovina AML Sources That Strengthen Decisions
Financial Intelligence Department (FID) of SIPA
Ministry of Security of BiH
Banking Agency of the Federation of BiH (FBA)
Banking Agency of Republika Srpska (ABRS)
Securities Commission of the Federation of BiH
Securities Commission of Republika Srpska
Insurance Supervisory Agency of the Federation of BiH
Insurance Agency of Republika Srpska
Indirect Taxation Authority (ITA)
Prosecutor's Office of Bosnia and Herzegovina
Council of Europe – MONEYVAL
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
United Nations Office on Drugs and Crime (UNODC)
OSCE Mission to Bosnia and Herzegovina
Turn Bosnia and Herzegovina Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Bosnia and Herzegovina
Onboard Customers Remotely Under FBA And ABRS Rules
eKYC for bank onboarding in Bosnia rests on the 2024 AML Law, which accepts qualified certificates and video-electronic identification, and on FBA and ABRS risk decisions. Shufti combines certificate checks, ID card NFC, liveness and screening in one flow, with case files ready for supervisory review.
Frequently Asked Questions
Does Shufti support qualified electronic certificates, and what happens when customers do not have one?
Yes. Customers can identify with a qualified e-signature certificate, which Article 22 of the AML Law accepts, and Shufti records that check. Customers without one move to ID card NFC, passport NFC or document and face verification in the same flow.
Is scanning a BiH ID card enough, or should verification include its chip?
A scan leaves room for edited or replayed images. Shufti reads the card's contactless chip by NFC, checks its data against the printed fields and matches the face stored on the chip to a live selfie, which a forged card cannot pass.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a foreign worker's residence permit or a non-resident director's national ID is checked for tampering, data consistency and a face match even when that exact version has never been seen before.
How does Shufti OCR compare with Google OCR for Latin and Cyrillic identity documents?
Shufti's OCR reads the Latin and Cyrillic fields on BiH documents as part of its 150+ languages and scripts, at 99.7% accuracy. In its published benchmark it averages 93% accuracy against Google Vision's 78.4%, and it transliterates Cyrillic names to Latin for watchlist screening.
How does Shufti verify ownership when a BiH company has several corporate layers?
Shufti pulls the court register record for each company in the chain, maps holdings through intermediate and foreign parents and identifies everyone owning or controlling 25% or more. Each owner is verified and screened, and perpetual KYB flags later changes to the structure.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Article 27 of the AML Law requires firms to check that transactions match what they know of the customer's business and risk profile and to keep records up to date. Shufti monitors transactions against each profile and refreshes customer data when the risk changes.
How does Shufti keep screening current and handle Bosnian, Croatian and Serbian name variations?
Watchlists update continuously, including the Ministry of Security's consolidated list of UN and domestic designations. Phonetic and transliteration models match Latin, Cyrillic and diacritic-free spellings of the same name, so Šehić and Sehic resolve to one person instead of two separate alerts.
Can we choose where data is hosted or run verification inside our own infrastructure?
Yes. Deploy Shufti on-premises, air-gapped if required, so identity data never leaves your network, or use a cloud region agreed in your contract. Either way, hosting locations and sub-processors are documented for the outsourcing records that ABRS and the FBA expect banks to keep.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data, a special category under the Law on Personal Data Protection, is held only as long as your retention settings allow, under ISO 27001:2022 and SOC 2 Type 2.
Can we configure different retention periods for different BiH licenses?
Yes. Retention is set per client, license and record type, so a bank, a microcredit organization and a broker in one group can each follow their own schedule above the ten-year AML Law minimum, with legal holds added when a case needs them.
What does Shufti provide when our compliance team needs to prepare an FID report?
Shufti's case file holds the verified identity, screening results, transaction history, alerts and analyst notes in one place. Your team exports a report-ready bundle and files it through AMLS before the suspicious transaction executes, as Article 42 of the AML Law requires.
Can we add verification checks without rebuilding our onboarding journey?
Yes. The AI Journey Builder adds or reorders checks such as qualified certificate sign-in, NFC chip reads, video calls or IBAN checks by entity, product and risk tier, so your team changes the flow in configuration rather than in code.
How does Shufti make verification queries easier for our customer support team?
Every decision appears in the back office with its reason, the failed check and the captured evidence. Support staff can tell a customer exactly why a selfie or document was declined, in plain terms, and escalate disputed results to compliance.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
18 December, 2025
State of Global AML Compliance 2025 FATF Data Insight
AML laws read strongly on paper while enforcement lags behind. A data-led analysis of FATF findings, the gap between rules and results, and where RegTech closes it.
Report
