AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Belize
- Bolivia
- Bosnia and Herzegovina
- Brazil
- British Virgin Islands
- Brunei
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Curaçao
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in the British Virgin Islands
Verify Belongers, residents and overseas clients through passport NFC, Belonger and residence documents and 10,000+ foreign ID document types, run KYB on BVI companies and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for FSC- and FIA-supervised firms.
Operational Performance for British Virgin Islands KYC
Our Numbers Speak Volumes
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
240+
Countries and
Territories Covered
British Virgin Islands IDV/KYC Challenges
Beneficial Ownership Starts at 10%, Register Access at 25%
BVI KYC for offshore funds and holding companies turns on who sits behind the shares. The AML Code treats a 10% holder as a beneficial owner, yet legitimate-interest access to the register shows only owners at 25% or more. Shufti traces every layer down to 10%.
FATF Increased Monitoring Raises the Evidence Bar
The BVI has been under FATF increased monitoring since June 2025 while it works through an action plan, so every CDD file faces closer scrutiny. Shufti records each check, source and decision in one case file, ready for FSC or FIA examination.
Ongoing CDD Now Covers Screening, Transactions and Triggers
Since 2022, section 21 of the AML Code has required firms to scrutinise transactions, screen customers for new PEP and sanctions exposure, and refresh CDD on trigger events. Shufti monitors transactions, rescreens as lists change and flags director changes.
Thin Case Files Weaken SARs to the FIA
Section 30A of the Proceeds of Criminal Conduct Act makes failing to report a suspicion an offence, and the FIA takes SARs through AMLive or its SAR form. Shufti's case management assembles report-ready bundles, so every SAR carries its full evidence.
Documents and Languages
Individual Documents Shufti Verifies in the British Virgin Islands
Shufti verifies British Virgin Islands identity documents plus passports and ID cards from other countries. The cards below cover the core documents BVI onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsVirgin Islands Passport
The Civil Registry and Passport Office issues Virgin Islands passports under the Immigration and Passport Act. Shufti reads the passport chip over NFC and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Belonger Card and Belonger Certificate
Belonger status, granted under section 16 of the Immigration and Passport Act, is evidenced by a Belonger Card or certificate, both accepted for voter registration. Shufti checks their layout and security features for tampering and matches the holder with biometric liveness.
Residence, Work Permit and Immigration Documents
Residents hold a Residence Certificate once Cabinet grants Residence Status, while workers hold permits issued through the Department of Labour and Workforce Development. Shufti reads these documents alongside the holder's passport, confirming immigration status and identity in the same flow.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. That covers the overseas directors, shareholders, investors and settlors behind BVI companies, funds and trusts, wherever they live.
British Virgin Islands Driving Licence
The Department of Motor Vehicles issues driving licences and asks for proof of immigration status at renewal. Shufti checks the licence's authenticity, expiry and photo, then matches the face to a live selfie, which helps residents who have no passport to hand.
Proof of Address
Electricity, water, telephone and cable bills, leases and rent receipts are the proof of residence the Supervisor of Elections accepts. Shufti verifies the address document in the same step as the ID, reads VG postcodes and P.O. boxes, and flags any mismatched name.
Entity Identity
Certificate of Incorporation
Issued by the Registrar of Corporate Affairs under section 7 of the BVI Business Companies Act, the certificate is conclusive evidence of incorporation. Shufti checks the company name, number and date against live registry data, so an altered certificate is caught at onboarding.
Certificate of Good Standing
Under section 235 of the Act, a Certificate of Good Standing is issued only once a company has filed its registers of members and directors and its beneficial ownership information. Shufti reads the status and issue date and flags a certificate too old to rely on.
Memorandum and Articles of Association
The memorandum and articles fix a BVI company's share structure, directors' powers and signing authority. AI-OCR reads ownership, capital and signing rights from them and flags GAN-generated or edited pages before they reach a reviewer.
Trade Licence
Businesses operating in the Territory need a trade licence from the Department of Trade, Investment Promotion and Consumer Affairs, which does not accept a residential address on the application. Shufti cross-checks the licence against the registered entity name and business address.
Tax Identity
BVIFARS Registration for FATCA and CRS
Financial institutions enrol and report for FATCA and CRS through the International Tax Authority's BVIFARS portal. Shufti extracts the institution's registration details and reads tax residence and foreign TINs from the self-certifications clients complete.
Economic Substance Filings
BVI companies and limited partnerships report economic substance to the International Tax Authority, filed through VIRRGIN since January 2026. Shufti reads the filing and reconciles declared activity, management location and tax residence with the entity's KYB profile.
Foreign Tax Registrations
Overseas parents, investors and controllers carry tax registrations from their home jurisdictions. Shufti reads foreign tax certificates and registration letters and reconciles the registered name, number and address with the company documents.
Ownership and Control
Beneficial Ownership Filings on VIRRGIN
Since 2 January 2025, section 96A of the BVI Business Companies Act requires companies to file beneficial ownership information with the Registrar through VIRRGIN and to file any change within 30 days. Shufti extracts every owner at the 10% threshold and screens each one.
Register of Members and Ownership Chart
Section 43A now requires companies to file their register of members with the Registrar, though it stays private unless the company opts in. Shufti reads the client's register and structure chart, maps ownership through intermediate companies and trusts, and screens each owner.
Directors and Authorised Signatories
Companies file their register of directors within 15 days under section 118B, and anyone can request the list of names. Shufti verifies each director and signatory, screens them against sanctions and PEP lists, and raises an alert when the board changes.
Languages We Cover
English and International Document Parsing
BVI identity and corporate documents are issued in English, while the owners and investors behind BVI companies present documents in dozens of scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.
Cross-Border Name Matching
Phonetic and transliteration rules reconcile name order, initials, hyphenated surnames and spelling variants from many naming traditions, so sanctions and PEP screening of international owners raises fewer false matches.
Cross-Document Consistency Checks
Names, dates of birth and identifiers are reconciled across passports, Belonger and residence documents, driving licences, registers of directors and beneficial ownership filings, so a mismatch surfaces before approval.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route British Virgin Islands Firms Rely On, in One Platform
Identity verification in the BVI can run fully remote. Sections 23 and 29 of the AML Code accept electronic or digital verification for non-face-to-face customers, provided the data comes from reliable, independent sources and several sources are used where needed. Shufti supports each route below, plus registry checks for corporate clients.
NFC Chip Verification
LiveShufti reads the chip in Virgin Islands passports and most foreign biometric passports, confirming the data came from the issuing authority unaltered. This is the high-assurance remote route for Belongers and residents.
Document and Face Biometric
LiveThe customer captures an ID and a live selfie, and iBeta Level 3 liveness confirms a real person is present. Most overseas directors and investors take this route, since it works with any passport or national ID.
Video Identification
LiveAgent-led video sessions in English verify the customer and the document live, and the full session is recorded as evidence. The route suits higher-risk clients and company officers who need extra assurance.
Registry-Backed Corporate Checks
LiveFor corporate clients, Shufti checks Registry of Corporate Affairs records and certificates, then verifies directors and beneficial owners remotely in the same flow, wherever in the world they are based.
Fraud Prevention Across the British Virgin Islands Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help British Virgin Islands businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Real-time capture guidance for passports, Belonger cards and residence documents catches glare, blur and cropped edges before upload, so customers rarely need a second attempt.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for SAR filing with the FIA.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction behavior changes across the compliance lifecycle.
Passport Chip-First Flow Design
Belongers and residents verify through their passport chip first, and overseas owners, directors and investors move to foreign document checks in the same flow.
Shufti's IDV/KYC Solutions for the British Virgin Islands
KYC Solutions
BVI firms onboard Belongers, residents, work-permit holders and overseas investors, each holding different documents. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding breaks down once a printed photo or deepfake can pass for the client. Shufti matches a live selfie to the ID photo with iBeta Level 3 liveness and a false match rate below 0.001, confirming the person behind each application.
.
Age Verification
Age-restricted products need proof of age without slowing adult customers down. Shufti estimates age from a selfie in under five seconds and falls back to a document check when the estimate sits close to the limit.
.
Bank Account Verification
Redemptions and payouts sent to the wrong account create losses and disputes. Shufti validates BVI and foreign bank account details and matches the account holder's name to the verified customer in real time, before any funds move.
.
Address Verification
BVI addresses combine building and district names with P.O. boxes and VG postcodes, which slows manual review. Shufti's layout-aware extraction and fuzzy matching compare the address document with the application and reach a 99.3% pass rate.
.
Document Verification
Forged and altered IDs are built to pass a quick visual check. Shufti verifies passports, Belonger cards, residence documents and driving licences within seconds, testing every security feature for tampering.
.
Identity Verification
A BVI client file often combines a local document, a foreign passport and an address check. Shufti runs document, biometric, NFC and address checks in one API session, giving each customer a single decision and record.
.KYB Solutions
BVI corporate clients range from local trading companies to holding structures with owners on several continents. Shufti checks Registry of Corporate Affairs records, maps layered ownership and reads the filings section 96A requires in one KYB flow.
Explore More
Business Verification
Onboarding a BVI company means confirming its certificates, registered agent, signatories and everyone who owns or controls 10% or more. Shufti's live registry call confirms the company record, and declared owners are checked against the register of members and ownership details the company provides.
.
Enhanced Due Diligence
Trusts, PEP-linked owners and higher-risk jurisdictions call for more than standard checks. Shufti's due diligence forms branch by risk, collect source of wealth and source of funds evidence, and send verification links to each beneficial owner.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Perpetual KYC rescreens every customer against 4,000+ watchlists, including the sanctions lists the FIA publishes for the Territory and UN listings, refreshed every 15 minutes, with every hit resolved in one case file.
Explore More
Business AML Screening
Sanctions exposure often sits with an owner or director rather than the company itself. Shufti screens every entity, owner and director against the sanctions in force in the Territory, including its domestic designations list, PEP lists and 50,000+ adverse media sources, and perpetual KYB rescreens the portfolio.
.
Transaction Monitoring
The AML Code expects each transaction to fit what a firm knows about its customer. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by up to 60% and assembles report-ready case bundles for the FIA.
.
Travel Rule
Part VA of the AML Code requires BVI VASPs to send and receive originator and beneficiary information with each virtual asset transfer and keep it for at least five years. Shufti connects to major Travel Rule networks through one IVMS101 integration and verifies unhosted wallet ownership.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits, and reviewing each by hand buries real matches. The Co-Pilot reviews every hit, gives a confidence score and a written reason, and leaves the final call with your MLRO, with every override logged.
.Built To Fit the British Virgin Islands' Compliance Landscape
AML compliance in the BVI rests on the Proceeds of Criminal Conduct Act, the AML Regulations and the AML Code, which apply to every business carrying out relevant business. The FSC and the FIA then supervise different sectors, and the Registry sets corporate filing rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Proceeds of Criminal Conduct Act
The Act sets the money laundering offences and is the source of the AML Regulations and the AML Code. Section 26A names the FIA as the body that receives suspicious transaction reports, section 30A makes failing to report a suspicion an offence, and section 31 prohibits tipping off.
Anti-Money Laundering Regulations, 2008
Regulation 6 requires CDD on one-off transactions of $15,000 or more, $3,000 for gaming and betting and $1,000 for virtual assets. Regulation 10 requires records for at least five years after a relationship ends, and regulation 13 requires an MLRO, notified within 14 days.
Anti-Money Laundering and Terrorist Financing Code of Practice, 2008
Issued under section 27 of the Act, the Code sets the day-to-day CDD standard. Section 2 treats anyone holding 10% or more as a beneficial owner, section 21 requires ongoing CDD, sections 23 and 29 accept electronic verification, and Part VA carries the Travel Rule.
Financial Services Commission (FSC)
The FSC licenses and supervises banks, trust and company service providers, insurers, investment businesses, funds, money services businesses and VASPs, and monitors their AML compliance. Its Regulatory Code sets governance rules, including written contracts and contingency plans for any outsourced function.
Financial Investigation Agency (FIA)
The FIA is the Territory's financial intelligence unit and receives SARs through AMLive or its SAR form. Under section 5C of the Financial Investigation Agency Act it also registers and supervises DNFBPs, including lawyers, accountants, real estate agents and high-value dealers.
Registry of Corporate Affairs
Part of the FSC, the Registry holds company filings on VIRRGIN. Since January 2025 companies have filed their register of members and beneficial ownership information there, alongside the register of directors, and parties with a legitimate interest have been able to apply for access since 1 April 2026.
Virtual Assets Service Providers Act, 2022
In force since 1 February 2023, the Act bars anyone from providing a virtual asset service in or from within the Territory without FSC registration. Part VA of the AML Code adds the Travel Rule, and the AML Regulations apply CDD to virtual asset transactions.
International Tax Authority (ITA)
The ITA runs the BVIFARS portal, where financial institutions enrol and report under FATCA and CRS, and it administers economic substance reporting, which moved onto VIRRGIN in January 2026. Accurate reporting depends on classifying each account holder and collecting valid self-certifications.
Virgin Islands Sanctions Unit
Financial sanctions take effect through Sanctions Orders extended to the Territory. Anyone holding funds of a designated person must freeze them, avoid dealing unless the Governor grants a licence, and report to the Sanctions Unit in the Attorney General's Chambers. The FIA publishes the applicable lists.
Caribbean Financial Action Task Force (CFATF)
The CFATF published the BVI's fourth-round mutual evaluation in 2024, and the Territory has been under FATF increased monitoring since June 2025. The National Anti-money Laundering and Terrorist Financing Coordinating Council, set up under section 26B of the Act, coordinates the national response.
British Virgin Islands Data Residency and Deployment
The Data Protection Act does not require data to stay in the Territory, but section 7(1)(c) allows transfers out only with adequate safeguards or the individual's consent. Shufti offers on-premises deployment inside the BVI, including air-gapped setups, or cloud hosting named in your agreement.
Data Protection Act, 2021
The Act covers personal data processed in commercial transactions and is enforced by the Information Commissioner, appointed in May 2026. Its security principle in section 10 calls for practical steps against loss and misuse. Shufti protects identity and biometric data with encryption, role-based access and configurable retention.
FSC Outsourcing Requirements
Division 5 of the FSC's Regulatory Code bars licensees from outsourcing their compliance function and requires due diligence on providers, a written contract covering access to documents, and a contingency plan. Shufti's agreements give licensees the access, confidentiality and exit terms those sections expect.
Retention Controls
Regulation 10 of the AML Regulations sets five years after a relationship ends as the minimum, and section 11 of the Data Protection Act bars keeping data longer than necessary. Shufti sets retention by client and licence, treats minimums as floors, not deletion dates, and supports legal holds.
Encryption and Security
Identity data is encrypted in transit and at rest, with role-based access and full audit logging. ISO 27001:2022 certification and SOC 2 Type 2 reports give your vendor risk team the evidence for the provider due diligence the FSC's Regulatory Code requires.
Access Requests and Biometric Data
The Act gives individuals a right of access, with a 30-day response under section 14, and sensitive personal data generally needs explicit consent under section 20. Shufti returns verification results and supporting details through the API and back office, so your team can answer requests and explain outcomes.
Scope of Our Role
Shufti processes personal data on your instructions as data processor, and your firm keeps responsibility as data controller, including the section 10 duty to choose a processor with sound safeguards. Shufti's privacy notice identifies the limited activities it carries out as an independent controller.
Data Residency and Privacy Controls in the British Virgin Islands
British Virgin Islands AML Sources That Strengthen Decisions
Financial Services Commission (FSC)
Financial Investigation Agency (FIA)
National Anti-money Laundering and Terrorist Financing Coordinating Council (NAMLCC)
Attorney General's Chambers (AGC)
Virgin Islands Sanctions Unit
Office of the Director of Public Prosecutions (DPP)
Royal Virgin Islands Police Force (RVIPF)
His Majesty's Customs
International Tax Authority (ITA)
Ministry of Financial Services, Economic Development and Digital Transformation
Caribbean Financial Action Task Force (CFATF)
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
International Monetary Fund (IMF)
Foreign, Commonwealth & Development Office (FCDO)
Turn British Virgin Islands Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in the British Virgin Islands
Faster Onboarding For Local And International Clients
Banks and trust companies licensed under the Banks and Trust Companies Act serve island residents alongside international clients with layered structures. Shufti verifies passports, Belonger cards and foreign IDs, maps trust and corporate ownership, and keeps every client under perpetual KYC with sanctions and PEP rescreening.
Frequently Asked Questions
Does Shufti support a BVI digital ID, and what happens when customers cannot use one?
The BVI has no national digital ID that private firms can use for KYC today. Shufti verifies Belongers and residents through their passport chip or a Belonger or residence document with a live selfie, and overseas customers through their passport chip or national ID with a live selfie.
Is a Belonger Card image enough to verify a British Virgin Islands customer?
An image shows only what is printed, so Shufti checks the card's layout and security features for tampering and matches the holder to a live selfie. For higher-risk customers, the passport chip read over NFC adds data signed by the issuing authority.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Zero-shot learning lets Shufti master new document formats in minutes, building on the active processing of 10,000+ ID document types, so rare IDs are still checked for tampering. That matters in the BVI, where many company owners, directors and investors hold documents issued abroad.
How does Shufti OCR compare with Google OCR on the foreign documents BVI firms receive?
BVI documents are in English, but owners' and investors' documents arrive in many scripts. Across the languages in its published benchmark, Shufti's OCR averages 93% accuracy against Google Vision's 78.4%, so foreign IDs are read correctly first time.
How does Shufti verify ownership when a BVI company has several corporate layers?
Shufti maps ownership through each intermediate company, partnership and trust until it reaches the natural persons in control. It flags everyone at the 10% threshold in the AML Code, compares results with the client's VIRRGIN filings and register of members, and screens each owner.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Section 21(1) of the AML Code requires firms to scrutinise transactions against the customer's profile, screen for new PEP and sanctions exposure and update CDD on trigger events. Shufti monitors behavioral baselines and tracks ownership, director and registry changes alongside rescreening.
How does Shufti keep screening current and handle name variations?
Shufti refreshes sanctions, PEP and adverse media data every 15 minutes, covering the sanctions lists the FIA publishes for the Territory, its domestic designations and UN listings. Native phonetic models in 80+ languages match transliterated, reordered and abbreviated names without flooding analysts with false hits.
Can we choose British Virgin Islands hosting or run verification inside our own infrastructure?
Yes. Shufti can run on-premises inside your own infrastructure in the BVI, including fully air-gapped deployments, or in cloud hosting named in your agreement. Transfer terms are documented, giving your firm the adequate safeguards section 7(1)(c) of the Data Protection Act asks for.
What controls help us protect identity and biometric data?
Encryption in transit and at rest, role-based access controls, audit logs and configurable retention protect identity and biometric data. ISO 27001:2022 certification and SOC 2 Type 2 reports support vendor assessments and the security principle in section 10 of the Data Protection Act.
Can we configure different retention periods for different BVI licences?
Yes. Retention is set per client, licence and jurisdiction. Regulation 10 of the AML Regulations requires at least five years after a relationship ends, and longer while an investigation runs, so Shufti treats minimums as floors and supports legal holds.
What does Shufti provide when our compliance team needs to prepare a SAR for the FIA?
Shufti packages the customer's verification results, screening hits, transaction alerts, analyst notes and decision history into a report-ready bundle. Your MLRO reviews it and files the SAR with the FIA through AMLive or the SAR form, and the evidence trail stays on file.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder adds or reorders checks such as NFC, video identification, KYB and EDD forms without code changes. Rules route customers by product, geography and risk tier, so new FSC or FIA expectations are handled through configuration.
How does Shufti make verification queries easier for our customer support team?
Every decision comes with the reason behind it, visible in the back office and returned through the API. Support teams see which check failed, show the customer what to fix and escalate disputed results, which also helps answer access requests under the Data Protection Act.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
10 September, 2026
ACU: The Caribbean's First Fully Digital Onboarding
How Curaçao's ACU Credit Union became the first financial institution in the Caribbean to offer fully digital member onboarding, with an 86.9% approval rate.
Case Study
