Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now The FRAML Convergence — Unifying Fraud and AML MonitoringRegister Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore

Scale Identity Verification and KYC Operations in El Salvador

Verify Salvadorans and foreign residents through DUI database checks, document and face biometrics, and 10,000+ foreign ID document types, run KYB on CNR-registered businesses and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for SSF- and CNAD-supervised firms.

Banner Image for El Salvador
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for El Salvador KYC

Our Numbers Speak Volumes

94.49%

Pass
Rates

Under 5 secs

IDV
Verification

90%

eIDV
Coverage

THE EL SALVADOR VERIFICATION GAP

El Salvador IDV/KYC Challenges

Expired DUIs Cannot Anchor Onboarding

Expired DUIs Cannot Anchor Onboarding

The DUI law strips an expired card of all value as identification, and the RNPN is renewing DUIs in bulk until March 2027, so KYC in El Salvador meets old and new designs side by side. Shufti reads both and rejects expired cards.

Inclusion Rules Prohibit Blanket Rejections

Inclusion Rules Prohibit Blanket Rejections

Decreto 426 bars firms from refusing service only because of migration status or informal work, and every rejection needs a documented risk assessment. Shufti's AI Journey Builder sets simplified, standard or intensified checks by risk tier and records the reason behind each decision.

Customer Risk Must Stay Current After Onboarding

Customer Risk Must Stay Current After Onboarding

Decreto 426 requires systems that flag transactions out of line with a customer's profile, risk and source of funds, and regulated transactions must reach the UIF within five business days. Shufti compares every transaction with the customer's profile and re-screens customers as lists change.

Thin Case Files Weaken goAML Reports

Thin Case Files Weaken goAML Reports

After spotting an unusual transaction, a firm has 15 business days to analyse it and 24 hours to file a suspicious transaction report through the UIF's goAML platform. Shufti's case management gathers evidence, decisions and analyst notes so reports are ready on time.

Documents and Languages

Individual Documents Shufti Verifies in El Salvador

Shufti verifies 10 Salvadoran identity documents plus passports and ID cards from other countries. The cards below cover the core documents El Salvador onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

Documento Único de Identidad (DUI)

Issued by the RNPN under the Ley Especial Reguladora de la Emisión del DUI, the DUI identifies every adult Salvadoran and doubles as their tax number. Shufti checks the card's security features and runs biometric liveness, then confirms the DUI number against government identity data.

Documento Único de Identidad (DUI)

Carné de Residente (Residence Card)

Foreign residents carry a temporary or definitive residence card from the Dirección General de Migración y Extranjería, issued in a QR-coded design since December 2021. Shufti checks the card's security features and expiry and matches the holder's face to the photo.

Carné de Residente (Residence Card)

Salvadoran Passport

The Dirección General de Migración y Extranjería issues passports valid for six years. Shufti reads the MRZ and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Salvadoran Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign workers, investors and visitors without a residence card onboard with these, and chip-enabled passports can also be read by NFC.

Foreign Passports and National ID Cards

Salvadoran Driving License

Driving licences are issued through the Viceministerio de Transporte's Dirección General de Tránsito and stay valid for five years. Shufti checks authenticity, expiry and the photo against a live selfie, which suits ride-hailing, delivery and vehicle rental onboarding.

Salvadoran Driving License

Proof of Address

When a firm's risk policy asks for address proof, Shufti reads Salvadoran electricity and water bills, bank statements and lease contracts. It extracts the address and checks it against the customer's declared address in the same session as the ID.

Proof of Address
Documento Único de Identidad (DUI) Carné de Residente (Residence Card) Salvadoran Passport Foreign Passports and National ID Cards Salvadoran Driving License Proof of Address Documento Único de Identidad (DUI)
Escritura de Constitución (Deed of Incorporation) Registro de Comercio Records and Matrícula de Empresa Credential of the Legal Representative Business Address Proof Escritura de Constitución (Deed of Incorporation)

Entity Identity

Escritura de Constitución (Deed of Incorporation)

A Salvadoran company exists through a notarised deed registered at the CNR's Registro de Comercio. Shufti's AI-OCR reads ownership, capital and signing authority from the deed and flags GAN-generated or edited pages before any data is used.

Escritura de Constitución (Deed of Incorporation)

Registro de Comercio Records and Matrícula de Empresa

The CNR's Registro de Comercio holds each company's registration, and its matrícula de empresa must be renewed every year. Shufti calls the live registry at every check, so a lapsed matrícula or changed record surfaces immediately.

Registro de Comercio Records and Matrícula de Empresa

Credential of the Legal Representative

A company's legal representative acts through a credential registered at the Registro de Comercio, which the Ministerio de Hacienda asks for at tax registration. Shufti verifies the representative's DUI or passport, screens them and matches their name to the registered credential.

Credential of the Legal Representative

Business Address Proof

Firms must record a company's main address in El Salvador. Shufti cross-checks the address on lease contracts and utility bills against the registry record and the deed, flagging any mismatch for review.

Business Address Proof

Tax Identity

NIT for Companies

Companies register their NIT and IVA status with the Ministerio de Hacienda's taxpayer registry under Articles 86 to 88 of the Código Tributario. Shufti extracts the NIT from the registration card and cross-checks the company name against the deed and registry.

NIT for Companies

DUI as NIT for Individuals

Since Decreto Legislativo 203 of 2021, an adult Salvadoran's NIT is their DUI number, while foreigners and minors keep a separate NIT. Shufti links sole traders and signatories to one tax identity without a second document.

DUI as NIT for Individuals

Foreign Tax Registrations and FATCA/CRS

Foreign shareholders and parent companies bring their own tax numbers. Shufti captures foreign tax registrations and FATCA and CRS self-certifications in the same KYB flow, checking each against the entity's documents.

Foreign Tax Registrations and FATCA/CRS
NIT for Companies DUI as NIT for Individuals Foreign Tax Registrations and FATCA/CRS NIT for Companies
Beneficial Owners at 25% Shareholder Register and Ownership Chart Directors, Administrators and Legal Representatives Beneficial Owners at 25%

Ownership and Control

Beneficial Owners at 25%

Article 15 of Decreto 426 requires firms to identify every natural person who owns or controls 25% or more of a company, directly or indirectly, or controls it by other means. Shufti extracts those owners from company documents and screens each one.

Beneficial Owners at 25%

Shareholder Register and Ownership Chart

Salvadoran groups often hold shares through other companies. Shufti maps ownership through each intermediate layer from the shareholder register and corporate documents, then screens every owner against sanctions, PEP and adverse media lists.

Shareholder Register and Ownership Chart

Directors, Administrators and Legal Representatives

Shufti verifies the identity of each director, administrator and authorised signatory, screens them on onboarding, and alerts your team when the board or legal representation changes at the Registro de Comercio.

Directors, Administrators and Legal Representatives

Languages We Cover

Spanish, English and Expat Document Parsing

Salvadoran documents are printed in Spanish with accents and compound surnames, and foreign residents hold IDs in many other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy, so accented names and dates are captured without loss. It averages 93% against Google Vision's 78.4% in its published benchmark, and zero-shot document intelligence reads unseen layouts on first sight, without a template.

Spanish, English and Expat Document Parsing

Spanish Name Matching

Salvadoran names carry two surnames, and married women may add a surname with "de". Shufti's screening applies Spanish naming rules and accent variants, so sanctions and PEP matches hold across spellings.

Spanish Name Matching

Cross-Document Consistency Checks

Shufti reconciles names, dates and identifiers across the DUI, passport, residence card, driving licence, NIT and Registro de Comercio records, and flags every mismatch.

Cross-Document Consistency Checks
Spanish, English and Expat Document Parsing Spanish Name Matching Cross-Document Consistency Checks Spanish, English and Expat Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route El Salvador Firms Rely On, in One Platform

The UIF's AML Instructivo lets firms identify customers in person or remotely through digital channels once they have assessed the risk of those channels (Article 12), with identity verified against official government ID. Shufti supports each route, plus chip, database, document, and video routes for non-residents and customers without a DUI.

Fraud Prevention Across the El Salvador Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help El Salvador businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Fraudsters who steal passwords or swap SIM cards try to reset credentials and drain accounts. Shufti flags unfamiliar devices, impossible travel and risky recovery attempts, then asks for a fresh selfie against the original onboarding face before high-risk changes go through, so legitimate customers keep access.

  • 02

    Social Engineering and Manipulated Payments

    Authorised push payment scams usually begin with a convincing phone call from someone posing as the bank. Shufti's active-call detection and behavioral biometrics spot hesitation, coached typing and a live call during a transfer, and transaction monitoring holds the payment for review before money leaves the account.

  • 03

    Device Spoofing and Automated Attacks

    Bots, emulators and tampered devices let one attacker open dozens of accounts in minutes. Shufti's device fingerprinting recognises the same device behind different identities, detects emulators, rooted phones, VPN masking and location spoofing, and blocks scripted sign-ups without adding friction for real customers on genuine phones.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Organised groups reuse the same faces, documents, devices and phone numbers across many applications. Shufti's fraud network detection links those shared attributes into one view, and cross-company fraud intelligence warns you when an identity already tied to fraud elsewhere tries to onboard with your firm.

  • 05

    Synthetic Identities and Fabricated Documents

    Synthetic identities mix real and invented details to pass basic checks and build credit before they vanish. Shufti's email and phone enrichment checks the age and history of contact details, and zero-shot document intelligence catches fabricated templates, so made-up customers are stopped at onboarding, before any credit is extended.

  • 06

    Deepfakes and Camera Injection

    Fraudsters feed AI-generated faces or replayed videos into the camera stream to beat selfie checks at onboarding and login. Shufti's deepfake detection and liveness checks spot synthetic faces, masks, replays and virtual camera injection, so only a real person present on camera gets through.

  • 07

    Money Mules and Rapid Fund Movement

    Mule accounts receive remittances, loan proceeds or scam payouts and move them on within hours. Shufti's money mule detection watches for new accounts with sudden inflows, rapid pass-through transfers to new beneficiaries and shared devices, so your team can freeze activity before the funds disappear across borders.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Shell companies and front businesses hide the people who really control the money moving through them. Shufti's KYB checks Registro de Comercio records, maps owners through every corporate layer and screens directors and owners, so a business with concealed control is flagged before it opens an account.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for the DUI, residence cards and accented Spanish names helps customers get a clear image the first time.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes, and decision history, packaged as report-ready bundles for STR filing through goAML.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director, and transaction behavior changes.

One Workflow, One Back Office

DUI-First Flow Design

Salvadorans clear a docless DUI check first, while foreign residents and visitors move to residence card or passport verification in the same flow.

DUI-First Flow Design

Shufti's IDV/KYC Solutions for El Salvador

KYC Solutions

Salvadorans onboard with a DUI, foreign residents with a residence card and visitors with a passport. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

A stolen or borrowed DUI is useless if the holder's face must match it live. Shufti's iBeta Level 3 liveness and face match confirm the person on camera owns the document, with a 99.5% first-try pass rate for genuine customers.

.
Age Verification

Age Verification

Online gaming and age-restricted services need to keep minors out without slowing adults down. Shufti estimates age from a selfie in under five seconds and falls back to the DUI's date of birth when the estimate is close to the limit.

.
Bank Account Verification

Bank Account Verification

Payouts and loan disbursements fail when an account number is wrong or belongs to someone else. Shufti validates the account format and checksum and matches the account holder's name in real time, so funds reach the verified customer.

.
Address Verification

Address Verification

Address proof in El Salvador comes as utility bills, bank statements and leases in varied layouts. Shufti's layout-aware extraction and fuzzy matching handle them with a 99.3% pass rate, and a docless address check returns in under three seconds.

.
Document Verification

Document Verification

Old and new DUI designs, residence cards and foreign IDs all reach the same onboarding flow. Shufti checks each within seconds, catching edited, printed, replayed and AI-generated documents.

.
Identity Verification

Identity Verification

Some customers need one check and others need four. Shufti runs document, biometric, NFC, address and eIDV checks in one API session, so Salvadoran identity verification adds steps only when the risk calls for them.

.

KYB Solutions

Salvadoran companies sit on the CNR's Registro de Comercio, often with layered ownership. Shufti's live registry calls and owner mapping cover the beneficial ownership rule in Decreto 426 without manual chasing.

Explore More
Business Verification

Business Verification

Onboarding a Salvadoran company means confirming its Registro de Comercio record, NIT, legal representative and everyone who owns or controls 25% or more. Shufti's live registry call pulls that picture together in one check, putting corporate onboarding under two minutes.

.
Enhanced Due Diligence

Enhanced Due Diligence

Decreto 426 requires source of wealth or source of funds evidence for high-risk clients and intensified monitoring of PEPs. Shufti's branching questionnaires, configurable risk scoring and UBO verification links collect that evidence in one place.

.

AML Screening

A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC re-screens customers against 4,000+ watchlists, including the UN Security Council lists El Salvador enforces, refreshes data every 15 minutes and keeps every hit in one case file.

Explore More
Business AML Screening

Business AML Screening

Owners and directors can become sanctioned or exposed long after a company onboards. Shufti's perpetual KYB re-screens them against UN Security Council lists, PEP data and 50,000+ adverse media sources, and alerts you the moment exposure changes.

.
Transaction Monitoring

Transaction Monitoring

Remittances, transfers and digital-asset payments move fast. Shufti's library of 500+ pre-built rules covering structuring, smurfing, and mule activity cuts false positives by up to 60%, and report-ready case bundles support filing with the UIF.

.
Travel Rule

Travel Rule

Decreto 426 brings digital asset and bitcoin service providers into AML duties, including reports on digital-asset transactions. Shufti's single Travel Rule integration exchanges IVMS101 originator and beneficiary data with counterparty VASPs and verifies unhosted wallet ownership.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits, and Salvadoran surnames repeat often. Shufti's AI Compliance Co-Pilot reviews every hit, gives a confidence score and a written reason, and your MLRO keeps the final call.

.
REGULATORY ALIGNMENT

Built To Fit El Salvador's Compliance Landscape

AML compliance in El Salvador starts with Decreto 426, which applies to every obligated sector, while the BCR, SSF, CNAD and other supervisors add their own rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.

Decreto Legislativo 426 (AML/CFT/CPF Law)

Decreto Legislativo 426 (AML/CFT/CPF Law)

In force since October 2025, it replaced the 1998 AML law and covers ten groups of obligated subjects (Article 7). Firms must identify owners holding 25% or more (Article 15), monitor transactions against each customer's profile (Article 9) and keep records for at least 15 years (Article 26).

Banco Central de Reserva de El Salvador (BCR)

Banco Central de Reserva de El Salvador (BCR)

The BCR's Comité de Normas writes the technical rules that SSF-supervised firms follow. NRP-36 sets AML risk management duties and was aligned with Decreto 426 in July 2026, while NRP-23 governs information security and requires notice to the SSF before a data centre moves abroad.

Superintendencia del Sistema Financiero (SSF)

Superintendencia del Sistema Financiero (SSF)

The SSF supervises banks, insurers, pension fund managers, securities firms, exchange houses, money transmitters and electronic money providers for AML compliance (Article 12). It also supervises bitcoin service providers, which must follow the technical rules the BCR's Comité de Normas issues for them, and applies risk-based supervision (Article 13).

Unidad de Investigación Financiera (UIF)

Unidad de Investigación Financiera (UIF)

The UIF sits within the Fiscalía General de la República and is the only national centre for suspicious transaction reports (Article 3). Reports move to its goAML platform sector by sector, and its Instructivo stays in force until a replacement is issued (Article 61).

Comisión Nacional de Activos Digitales (CNAD)

Comisión Nacional de Activos Digitales (CNAD)

The CNAD licenses and supervises digital asset service providers under the Ley de Emisión de Activos Digitales of 2023. Decreto 426 makes it their AML supervisor (Article 12) and requires digital-asset transactions to be reported to the UIF within five business days (Article 25).

Lotería Nacional de Beneficencia (LNB)

Lotería Nacional de Beneficencia (LNB)

The LNB supervises online casinos and online gaming for AML compliance, while the Superintendencia de Obligaciones Mercantiles covers physical casinos, non-bank lenders, real estate agents, precious metal dealers and cash transport firms (Article 12). Each must apply customer due diligence and report suspicious transactions.

Registro Nacional de las Personas Naturales (RNPN)

Registro Nacional de las Personas Naturales (RNPN)

The RNPN issues the DUI under the Ley Especial Reguladora de la Emisión del DUI, the official ID for adult Salvadorans. An expired DUI has no value as identification (Article 4-J), and with the Secretaría de Innovación the RNPN operates the Identidad Digital login for government services.

Ley Especial contra Actos de Terrorismo

Ley Especial contra Actos de Terrorismo

Article 37 lets a judge, or the Fiscalía in urgent cases, freeze assets of persons designated by the UN Security Council. Obligated firms must report matches to the Fiscalía through the UIF without delay and hold the assets, and the UIF also circulates national lists.

Comité Interinstitucional para la Prevención y Control del LA/FT/FPADM (CIPLAFT)

Comité Interinstitucional para la Prevención y Control del LA/FT/FPADM (CIPLAFT)

CIPLAFT is chaired by the Fiscal General, with the UIF as technical secretariat, and brings together ten authorities that approve the national AML strategy (Articles 5 and 6). El Salvador approved its most recent national risk assessment in 2023, and GAFILAT approved its fourth-round mutual evaluation in 2024.

El Salvador Data Residency and Deployment

No major public cloud provider runs a region in El Salvador, so Shufti supports on-premises deployment in the country, including air-gapped setups. Hosting locations, sub-processors and transfer arrangements are defined in your agreement, so you know where identity data sits at every stage.

Ley para la Protección de Datos Personales (Decreto 144)

The 2024 data protection law treats biometric data as sensitive, requires breach notice to the Agencia de Ciberseguridad del Estado, the Fiscalía and affected people within 72 hours, and is supervised by that agency. Shufti applies encryption, role-based access and configurable retention to identity and biometric data.

Financial-Sector Outsourcing Rules (NRP-23)

NRP-23 requires supervised firms to tell the SSF where their main and backup data centres sit, 30 business days in advance, and to meet extra conditions before placing one outside El Salvador. Shufti's deployment options and audit access support that filing.

Retention Controls

Decreto 426 sets a 15-year minimum that runs from the end of each transaction or customer relationship. Shufti's retention is configurable by client and jurisdiction, statutory minimums are not treated as automatic deletion dates, and legal holds pause deletion when needed.

Encryption and Security

Shufti encrypts identity data in transit and at rest, restricts access by role and logs every action for audit. ISO 27001:2022 certification and a SOC 2 Type 2 report give your vendor risk and information security teams independent evidence for their assessments.

Automated Decisions and Biometric Data

People have rights of access, rectification, cancellation, opposition, portability, erasure and limitation under the data protection law. Shufti returns verification results and supporting details through the API and back office, so your support team can explain outcomes and escalate disputed results.

Scope of Our Role

Shufti processes personal data on your instructions as an encargado del tratamiento under the data protection law, while your firm stays the responsable with the legal duties that role brings. Shufti's privacy notice identifies the limited activities where it acts as an independent controller.

Data Residency and Privacy Controls in El Salvador

BUILT FOR COMPLIANCE TEAMS

El Salvador AML Sources That Strengthen Decisions

Turn El Salvador Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in El Salvador

Simplified Digital Accounts With Full Identity Checks

The Ley para Facilitar la Inclusión Financiera lets banks open simplified savings accounts through electronic channels, with the DUI as the core document. Shufti's DUI database check, liveness and risk-⁠tiered flows open these accounts remotely and step up checks when balances or risk grow.

Frequently Asked Questions

Does Shufti support DUI verification, and what happens when customers cannot use it?

Yes. Shufti verifies the DUI by document and face biometrics or by a docless check of the DUI number and date of birth against government identity data. Customers without a valid DUI move to residence card, passport, NFC or video verification in the same flow.

Is a DUI image enough to verify a Salvadoran customer?

No. An image can be printed, edited or replayed. Shufti analyses the card's security features, rejects expired cards that the DUI law strips of value, confirms the number against government data and matches the holder's live face to the photo.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot document intelligence reads layouts it has never seen before and learns a new format in minutes, so coverage keeps pace as countries redesign their IDs. Foreign residents, investors and visitors can onboard with documents from their home country without waiting for a template update.

How accurately does Shufti OCR read Salvadoran identity documents?

Shufti's OCR reads Spanish-language documents with accents, both surnames and married names intact, and averages 93% accuracy against Google Vision's 78.4% across its published benchmark. It reads DUI numbers, dates of birth, expiry dates and MRZ lines exactly, so sanctions screening and registry checks run on clean data from the first attempt.

How does Shufti verify ownership when a Salvadoran company has several corporate layers?

Shufti pulls the company's Registro de Comercio record, reads the deed and shareholder register, and follows each corporate shareholder through every layer. It identifies everyone owning or controlling 25% or more under Article 15 of Decreto 426 and screens each owner.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Article 9 of Decreto 426 requires systems that flag transactions out of line with a customer's profile. Shufti monitors transactions against behavioral baselines, re-screens customers and owners, and watches registry, director and ownership changes for businesses, alerting your team when a profile shifts.

How does Shufti keep screening current and handle Salvadoran name variations?

Shufti refreshes sanctions, PEP and adverse media data several times an hour, including the UN Security Council lists firms must check under Article 37 of the Ley Especial contra Actos de Terrorismo. Its matching handles two surnames, married names and missing accents.

Can we choose El Salvador hosting or run verification inside our own infrastructure?

Yes. Shufti supports on-premises deployment in El Salvador, including air-gapped setups for firms that cannot send data out. Hosting locations and transfer arrangements are set in your agreement, which helps with the data centre notice that NRP-23 requires of SSF-supervised firms.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, restricts access by role, logs every action and holds ISO 27001:2022 certification and a SOC 2 Type 2 report. These controls support your duties for biometric data, which El Salvador's data protection law treats as sensitive.

Can we configure different retention periods for different El Salvador licenses?

Yes. Retention is configurable by client, product and jurisdiction, so a bank, a digital asset provider and a casino in one group can each follow their own rules. Decreto 426's 15-year minimum is respected, and legal holds pause deletion during investigations.

What does Shufti provide when our compliance team needs to prepare a goAML report?

Shufti's case management assembles the customer profile, verification results, screening hits, flagged transactions, analyst notes and decision history into a report-ready bundle for filing through goAML. Your compliance officer can file within 24 hours of finishing the analysis, as Decreto 426 requires.

Can we add verification checks without rebuilding our onboarding journey?

Yes. Shufti's AI Journey Builder adds or removes checks such as liveness, NFC, address proof or video identification by risk tier, product or customer type. Changes go live through configuration, so your app and API integration stay as they are.

How does Shufti make verification queries easier for our customer support team?

Each decision comes with its results, reasons and supporting evidence in the back office and through the API. Support agents can see why a DUI or selfie failed, tell the customer what to fix and escalate disputed results to compliance.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of eIDV Global Capability Matrix

    5 January, 2026

    eIDV Global Capability Matrix

    Shufti's eIDV coverage across 87 jurisdictions, showing which passive, active and biometric database checks, plus address and age checks, are available in each.

    Coverage Sheet

    Read More
    Read More
    Cover of AML Screening: Latin America (LATAM)

    23 September, 2025

    AML Screening: Latin America (LATAM)

    Fragmented domestic watchlists, dual surnames and shrinking STR deadlines make LATAM screening hard. How Shufti screens names accurately across the region.

    Regional Brief

    Read More
    Read More
    Cover of ID Verification Guide for Crypto Exchanges

    17 November, 2025

    ID Verification Guide for Crypto Exchanges

    As crypto rules tighten, exchanges must raise assurance without slowing sign-ups. A buyer's guide to risk-based KYC, AML and fraud controls for crypto platforms.

    Product Guide

    Read More