- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Belize
- Bolivia
- Bosnia and Herzegovina
- Brazil
- British Virgin Islands
- Brunei
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Curaçao
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Georgia
- Germany
- Greece
- Guatemala
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Monaco
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- Uruguay
- USA
- Vanuatu
- Venezuela
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Guatemala
Verify Guatemalans and resident foreigners through DPI checks against RENAP records and non-residents through 10,000+ foreign ID document types, run KYB on Registro Mercantil companies and their beneficial owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for SIB-supervised firms.
Operational Performance for Guatemala KYC
Our Numbers Speak Volumes
99.35%
Pass
Rates
Under 5 secs
IDV
Verification
90%
eIDV
Coverage
Guatemala IDV/KYC Challenges
Decreto 15-2026 Rewrote Guatemala's AML Rules in September 2026
Any KYC solution for Guatemala now answers to Decreto 15-2026, which replaced the 2001 AML law on 17 September 2026 and gives the SIB six months to draft its regulation. Shufti's AI Journey Builder updates checks by product and risk tier without rebuilding onboarding.
Beneficial Owners Sit Behind a Confidential Share Register
The new law sets the beneficial owner threshold at 15%, but only the SIB and the Ministerio Público can query the Registro Mercantil's shareholder database. Firms rely on what companies hand over, and Shufti maps ownership from those documents and screens every 15% holder.
Lenders, Dealers and Crypto Firms Now Carry AML Duties
Lenders, e-money issuers, cooperatives, pawn shops, real estate brokers, vehicle dealers, virtual asset providers and lottery operators are obligated persons under Article 3, and each must register with the IVE. Shufti gives them KYC, KYB, screening and monitoring in one platform from day one.
Thin Case Files Weaken Reports to the IVE
Article 30 requires prompt suspicious transaction reports, and Article 34 requires records detailed enough to rebuild every transaction. When evidence sits in separate tools, both take longer. Shufti's case management keeps identity, screening and transaction data together in report-ready bundles for IVE filing.
Documents and Languages
Individual Documents Shufti Verifies in Guatemala
Shufti verifies 8 Guatemalan identity document types plus passports and ID cards from other countries. The cards below cover the core documents Guatemalan onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsDocumento Personal de Identificación (DPI)
Every Guatemalan adult carries the DPI, built around a 13-digit Código Único de Identificación (CUI) that never changes. Shufti checks the card's laser image, holograms and MRZ, matches the holder's live face and confirms the CUI against RENAP's records.
DPI for Domiciled Foreigners
Foreigners granted permanent residence by the Instituto Guatemalteco de Migración (IGM) receive a DPI in a different color, with their own CUI. Shufti verifies it through the same RENAP route as a citizen's card and records the holder's resident status in the case file.
DPIME for Minors
RENAP began issuing the DPIME in October 2026 to identify Guatemalan and domiciled foreign children aged 0 to 17. Shufti reads the card's CUI and date of birth, so family accounts and age-gated services can confirm exactly who a minor is.
Guatemalan Passport
The IGM issues passports under the Código de Migración, Decreto 44-2016. Shufti runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Non-resident investors, visiting workers and foreign directors of Guatemalan companies onboard with these documents in the same flow.
Guatemalan Driving License
The Departamento de Tránsito of the Policía Nacional Civil issues licenses under Decreto 132-96, and cards issued since October 2018 carry a QR verification code. Shufti checks authenticity, expiry and the face match, a fit for vehicle dealers, lenders and delivery platforms.
Proof of Address
Electricity, water, landline or home internet bills and IUSI property tax receipts no older than three months, the same evidence SAT accepts for registration, are read and matched to the customer's name in one step with the DPI.
Entity Identity
Patente de Comercio de Sociedad and de Empresa
The Registro Mercantil issues both patents when a company and its business are registered. Shufti checks each patent for tampering and matches the company name, registration number and address against live registry data at every check.
Escritura Constitutiva (Deed of Incorporation)
A notary drafts the public deed that founds every Guatemalan company. AI-OCR reads ownership, capital and signing authority from the testimonio and its amendments, and flags GAN-generated or edited pages before they reach an analyst.
Administrator Appointments
Appointments and removals of administrators are now registered by notarial acta, and companies formed before Decreto 15-2026 must register all administrators by March 2027 or lose access to registry procedures. Shufti matches the registered administrators to the people onboarding.
Business Address Proof
The address on the patente and the SAT tax record is cross-checked against recent utility bills or IUSI receipts, so a borrowed or mail-drop address surfaces before the company is approved.
Tax Identity
NIT and RTU Registration
SAT records every taxpayer in the Registro Tributario Unificado (RTU) and issues the Número de Identificación Tributaria (NIT). Shufti extracts the NIT, legal name and tax address from the RTU record and patente and checks that they agree.
CUI as NIT for Individual Merchants
SAT's harmonization lets individual taxpayers use their CUI as their tax identifier, and the Constitutional Court upheld it in September 2026 for tax matters. Shufti links a sole trader's NIT and CUI so tax and identity records reconcile.
Foreign Tax Registrations
Foreign parent companies and non-resident founders are verified against their home tax registrations, and Shufti flags any mismatch between those records, the share register and the ownership chart before onboarding completes.
Ownership and Control
Share Register (Registro de Acciones)
Article 125 of the Código de Comercio, as reformed by Decreto 15-2026, requires a share register with each holder's name, nationality and ID data, with changes notified to the Registro Mercantil within 10 business days. Shufti extracts every holder from certified extracts and screens them.
Beneficial Owners and Ownership Chart
Decreto 15-2026 defines a beneficial owner as anyone holding 15% or more, directly or through a chain of companies, trusts or foundations, or exercising control by other means. Shufti maps each layer to the people at the top and screens them.
Directors, Legal Representatives and Signatories
Each director, legal representative and authorized signatory is identity-verified and screened against sanctions and PEP lists, and Shufti alerts the team when a new administrator registration changes who controls the company.
Languages We Cover
Spanish, English and Expat Document Parsing
Guatemalan DPIs carry Spanish and English field labels, and non-residents bring documents in many other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy, including accented characters and the CUI on every DPI design. It averages 93% against Google Vision's 78.4% in its published benchmark, and zero-shot document intelligence reads unseen layouts on first sight, without a template.
Guatemalan Name Matching
Guatemalans carry two surnames, married women may add a surname with "de", and names in Mayan languages use apostrophes. Phonetic and spelling-variant rules keep these forms from splitting one person into several identities in sanctions and PEP screening.
Cross-Document Consistency Checks
Names and the CUI are reconciled across the DPI, passport, driving license, SAT tax records and company share registers, so a mismatch between any two records surfaces before approval.
Independent Validation
Shufti's Recognition Across Independent Evaluations

Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read MoreRegulatory Update
Every Verification Route Guatemalan Firms Rely On, in One Platform
Decreto 15-2026 asks firms to verify customers with documents, data and information from reliable, independent sources (Article 21) and to apply extra measures when customers are not physically present (Article 25). Shufti supports RENAP's identity verification service and the DPI, plus chip, database, document and video routes for non-residents and customers without a DPI.
RENAP Identity Verification
LiveRENAP's electronic service confirms whether a CUI and name exist in the national register. Shufti validates against it directly as the customer onboards and stores the positive or negative response in the case file as verification evidence.
RENAP Facial Comparison
LiveThe same RENAP service compares a submitted photograph one-to-one with the face on record. Where your institution contracts this service, Shufti sends the live selfie, after liveness, through your access, so the person onboarding is tied to the identity behind the CUI.
Docless Database (eIDV)
LiveCustomers enter their CUI and date of birth, and Shufti checks them against government identity records without a document upload, returning a decision in seconds that suits lower-risk products.
NFC Chip Verification
LiveThe DPI chip can be read only inside RENAP, so chip reads serve non-residents. Shufti reads most foreign biometric passports by NFC and checks the signed chip data against the printed page, the high-assurance route for foreign customers.
Document and Face Biometric
LiveiBeta Level 3 certified liveness confirms a real person is present before Shufti matches the face to the document photo. This is the route most non-residents and foreign directors take.
Fraud Prevention Across the Guatemalan Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Guatemalan businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for DPIs and Spanish-language bills catches glare, blur and cropped edges before submission, so fewer customers are asked to resubmit.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for RTS filing with the IVE.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file, while perpetual KYC/KYB tracks ownership, director and transaction behavior changes.
DPI and RENAP-First Flow Design
Guatemalans and domiciled foreigners verify through the DPI and RENAP first, while non-residents move to passport verification in the same flow.
Shufti's IDV/KYC Solutions for Guatemala
KYC Solutions
KYC services in Guatemala now cover citizens and domiciled foreigners holding a DPI, minors with the new DPIME and non-residents using foreign passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore MoreFace Verification
Decreto 15-2026 lists relationships without physical presence as a special situation needing extra measures, which puts weight on the selfie. Shufti pairs iBeta Level 3 liveness with a 99.5% first-try pass rate, so genuine customers clear the step quickly.
.Age Verification
Lottery and bingo operators now carry AML duties, and age-restricted platforms need to tell adults from minors. Shufti estimates age from a selfie in under 5 seconds and falls back to the DPI or DPIME date of birth when the estimate is close.
.Bank Account Verification
Payouts, loan disbursements and remittance credits fail when the account belongs to someone else. Shufti validates the account number format and checksum and matches the account holder's name to the verified customer in real time.
.Address Verification
Guatemalan electricity, water and phone bills all use different layouts. Shufti's layout-aware extraction reads the name, address and issue date, fuzzy-matches them to the DPI and rejects documents older than the accepted window.
.Document Verification
Several DPI designs circulate, since RENAP introduced its color card in January 2025 and earlier cards stay valid until they expire. Shufti verifies each design, plus passports, licenses and the DPIME, within seconds and flags tampering, screenshots and replayed images.
.Identity Verification
Guatemala identity verification often spreads one customer across separate vendors for documents, selfies, RENAP checks and addresses. Shufti runs document, biometric, NFC, address and eIDV checks in one API session, with one decision and one audit record.
.KYB Solutions
Due diligence on a Guatemalan company starts with the Registro Mercantil patents and deed, follows owners through holding companies and trusts, and identifies the beneficial owners Decreto 15-2026 defines. Shufti's live registry calls keep the company record current, and ownership comes from the certified share register.
Explore MoreBusiness Verification
Onboarding a Guatemalan company means confirming its patente, NIT, legal representative and everyone who owns or controls 15% or more. Shufti's live registry call confirms the patente and company record, and owners are checked against the certified share register and declarations the company provides.
.Enhanced Due Diligence
Article 24 of Decreto 15-2026 requires stricter due diligence for high-risk customers and links to FATF high-risk jurisdictions, and Article 25 adds PEPs, state contractors, trusts and non-profits. Shufti's branching questionnaires score each answer and request owner verification by link.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the UN Security Council lists Guatemalan firms must check, refreshed every 15 minutes, with every hit kept in one case file.
Explore More
Business AML Screening
A Guatemalan company's risk often sits with its shareholders and legal representatives. Shufti screens the entity and every owner and administrator against sanctions, PEP and adverse media sources, and perpetual KYB rescreens them whenever the share register or board changes.
.
Transaction Monitoring
Article 28 requires monitoring of every transaction, and Article 31 a daily register of cash received of USD 10,000 or more. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by 60% and builds report-ready case bundles for the IVE.
.Travel Rule
Decreto 15-2026 names virtual asset service providers as obligated persons. Shufti's Travel Rule solution exchanges IVMS101 originator and beneficiary data across major networks through one integration and verifies ownership of unhosted wallets before funds move.
.AI Compliance Co-Pilot
One common name can return 140+ screening hits, and double surnames add more. Shufti's AI Compliance Co-Pilot reviews every hit, gives a 0 to 100 confidence score and a written reason, and leaves the final call with your compliance officer.
.Built To Fit Guatemala's Compliance Landscape
AML compliance in Guatemala runs under one national law, Decreto 15-2026, with the Superintendencia de Bancos supervising every obligated person through the IVE, while registries and identity authorities set the records firms verify against. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.
Decreto 15-2026 (Integral AML/CFT Law)
Published on 17 June 2026 and in force since 17 September 2026, the law repealed Decreto 67-2001 and the 2005 terrorist financing law (Article 126). It defines beneficial owners at 15% (Article 2), sets due diligence and continuous follow-up (Article 21) and fines of up to USD 300,000 (Article 66).
Superintendencia de Bancos (SIB)
The SIB supervises banks, financial companies, insurers, exchange houses and financial groups under Decreto 18-2002, and Decreto 15-2026 extends its AML supervision to every obligated person (Article 63). It must submit the law's regulation by March 2027 (Article 127) and publish the PEP positions list.
Intendencia de Verificación Especial (IVE)
The IVE, part of the SIB (Article 51), is Guatemala's financial intelligence unit. Obligated persons register with it (Article 5), file suspicious transaction reports through their compliance officer (Article 30), report cash transactions of USD 10,000 or more (Article 31) and use only the channels it sets (Article 33).
Registro Mercantil General de la República
The Registro Mercantil registers companies under the Código de Comercio (Decreto 2-70). As reformed by Decreto 15-2026, it keeps a confidential shareholder database open only to the SIB and the Ministerio Público, and companies must update their share registers by September 2027 (Article 120).
Superintendencia de Administración Tributaria (SAT)
SAT administers the Registro Tributario Unificado and issues the NIT to companies and individuals. Its harmonization of the CUI as the individual tax identifier took effect in 2025, and in September 2026 the Constitutional Court upheld it while limiting its use to tax matters.
Registro Nacional de las Personas (RENAP)
RENAP issues the DPI under Decreto 90-2005, which makes it the only identification document for civil, administrative and legal acts (Article 50) and bars anyone from demanding another ID or retaining the card (Article 54). Its electronic service verifies identity by CUI, name, fingerprint or face.
Instituto Guatemalteco de Migración (IGM)
The IGM took over from the Dirección General de Migración when the Código de Migración (Decreto 44-2016) entered into force in May 2017. It issues passports and grants residence, and foreigners with permanent residence then receive a DPI from RENAP under Article 55 of the RENAP law.
Registro del Mercado de Valores y Mercancías
A dependency of the Ministerio de Economía, the Registro controls the legality and registration of acts in the stock exchange and over-the-counter markets under Decreto 34-96. Securities brokers and intermediaries outside SIB supervision are obligated persons under Article 3 of Decreto 15-2026.
UN Security Council Sanctions Lists
Article 43 of Decreto 15-2026 requires every obligated person to check customers permanently against UN terrorism and proliferation lists under Resolutions 1267, 1718, 2231 and successors. A match triggers a preventive freeze and written notice to the Ministerio Público within 24 hours.
CONCLAFT
Created by Article 45 of Decreto 15-2026, the national council chaired by the Vice President coordinates state agencies against money laundering, terrorist financing and proliferation financing. Its members include the ministers of foreign affairs, interior, defense and economy, and the Superintendent of Banks (Article 47).
GAFILAT
Guatemala is a member of GAFILAT, whose last full mutual evaluation of the country dates from 2016 and rated its technical compliance and effectiveness. Guatemala was not on the FATF grey list as of June 2026, and Article 24 requires enhanced due diligence for FATF high-risk jurisdictions.
Guatemala Data Residency and Deployment
No major public cloud provider runs a region in Guatemala, so Shufti can be deployed on-premises in your own infrastructure, air-gapped if required, keeping identity data inside the country. Cloud hosting locations and transfer arrangements are defined in your agreement.
Constitutional and Public Information Protections
Guatemala has no comprehensive personal data protection law yet, with several bills still before Congress. Article 24 of the Constitution protects private documents, and Decreto 57-2008 punishes selling personal data without written consent (Article 64). Shufti uses biometric data only for verification.
DPI and CUI Handling
Article 54 of the RENAP law bars anyone from demanding an ID other than the DPI or retaining the card, and CUI use as a tax number is limited to tax matters. Shufti works from a capture of the card, never the card itself, and masks the CUI by role.
Bank Technology Risk and Outsourcing (JM-98-2025)
Junta Monetaria Resolution JM-98-2025 keeps daily backups of critical data inside Guatemala (Article 20), allows offshore processing with encryption keys under the bank's control (Article 39) and requires prior SIB authorization for critical outsourced services (Article 45). Shufti supplies the certifications and audit reports banks file.
Retention Controls
Decreto 15-2026 sets a five-year minimum after a relationship ends, and banks and other financial obligated persons keep records digitally for a further 10 years (Article 34). Shufti configures retention by client and license, applies legal holds and treats statutory minimums as floors, not deletion dates.
Encryption and Security
Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 certification and a SOC 2 Type 2 report support the vendor due diligence banks, insurers and payment firms run before they sign.
Automated Decisions and Biometric Data
Guatemala's public information law classes physical characteristics as sensitive data (Decreto 57-2008, Article 9), and customers expect to know why a check failed. Verification results, reasons and evidence are available through the API and back office, so support teams can explain outcomes and escalate disputed results.
Scope of Our Role
Shufti processes identity data only on the firm's written instructions as a service provider, and the firm keeps responsibility for its own AML obligations under Decreto 15-2026. Shufti's privacy notice identifies any activities where it acts independently.
Data Residency and Privacy Controls in Guatemala
Guatemala AML Sources That Strengthen Decisions
Intendencia de Verificación Especial (IVE)
Ministerio Público – Fiscalía contra el Lavado de Dinero u Otros Activos
Superintendencia de Bancos (SIB)
Secretaría Nacional de Administración de Bienes en Extinción de Dominio (SENABED)
Superintendencia de Administración Tributaria (SAT)
Policía Nacional Civil – Subdirección General de Investigación Criminal
Banco de Guatemala
Grupo de Acción Financiera de Latinoamérica (GAFILAT)
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
OAS Group of Experts for the Control of Money Laundering (GELAVEX)
INTERPOL Financial Crime and Anti-Corruption Centre (IFCACC)
United Nations Office on Drugs and Crime (UNODC)
International Monetary Fund AML/CFT Thematic Fund
Turn Guatemala Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Guatemala
Onboard Remote Customers Under The New Due Diligence Rules
Guatemalan banks apply Decreto 15-2026 due diligence under SIB supervision, with extra measures for customers who never visit a branch (Article 25). Shufti verifies the DPI against RENAP, matches a live face, screens every customer and rescreens the book, while on-premises deployment fits Junta Monetaria technology rules.
Frequently Asked Questions
Does Shufti support RENAP verification, and what happens when customers cannot use it?
Yes. Shufti validates the CUI against government identity records and, through your institution's RENAP access, compares the live selfie with the RENAP record. Customers whose details cannot be confirmed, or who hold no DPI, move to passport NFC, document and face biometrics or video identification in the same flow.
Is a DPI image enough to verify a Guatemalan customer?
No. An image can be edited, replayed or printed from a template. Shufti checks the DPI's security features, matches a live face with iBeta Level 3 liveness and confirms the CUI with RENAP, because only RENAP can open the card's chip.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a non-resident's national ID or a newly issued card, such as RENAP's DPIME for minors, can be verified on first sight with forensic checks and face matching.
How accurately does Shufti read Guatemalan identity documents?
Shufti's OCR reads the Spanish and English fields on the DPI, passport and driving license, extracting names, dates of birth and the 13-digit CUI. It handles accents, two surnames and married names, and validates the CUI's check digit before the record reaches RENAP.
How does Shufti verify ownership when a Guatemalan company has several corporate layers?
Shufti reads the Registro Mercantil record, deed and certified share register for each Guatemalan company in the chain, maps holdings through foreign parents and trusts, and identifies each beneficial owner as Decreto 15-2026 defines them. Each is identity-verified and screened.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Article 21 of Decreto 15-2026 requires continuous follow-up during the relationship, checking transactions against the customer's profile, risk level and source of funds. Shufti monitors transactions against behavioral baselines, rescreens customers and flags registry, director and ownership changes as they happen.
How does Shufti keep screening current and handle Guatemalan name variations?
Sanctions, PEP and adverse media data refresh every 15 minutes, including the UN lists named in Article 43 and the PEP positions the SIB defines. Native phonetic models for 80+ languages match double surnames, married names and spelling variants, so one person stays one record.
Can we choose where data is hosted or run verification inside our own infrastructure?
Yes. Deploy Shufti on-premises, air-gapped if required, so identity data stays in Guatemala on your own network, or use Shufti's cloud with hosting locations and transfer terms set in your agreement, including the encryption-key control banks need under JM-98-2025.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is used only for verification, CUIs can be masked by role, and ISO 27001:2022 and SOC 2 Type 2 reports support your vendor due diligence.
Can we configure different retention periods for different Guatemalan licenses?
Yes. Retention is set per client, license and record type, so a bank keeps records for the five-year minimum plus the further 10 years Article 34 requires of financial firms, while a real estate broker keeps the five-year schedule. Legal holds pause deletion.
What does Shufti provide when our compliance team needs to prepare an RTS for the IVE?
Shufti's case file holds the verified identity, screening results, transaction history, alerts and analyst notes in one place. Your compliance officer exports a report-ready bundle for filing through the IVE's channels, and the records stay complete enough to rebuild each transaction.
Can we add verification checks without rebuilding our onboarding journey?
Yes. The AI Journey Builder adds or reorders checks such as RENAP validation, NFC chip reads, video identification and address proof by product and risk tier, so changes for the SIB's coming regulation go live without code changes to your app.
How does Shufti make verification queries easier for our customer support team?
Each decision shows in the back office with its reason, the check that failed and the evidence captured. Support agents can explain a rejection, request a clearer DPI image or escalate a disputed result for human review without contacting the compliance team.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
11 September, 2026
Enterprise Guide to Docless Identity Verification in Latin America
A practitioner's guide to docless onboarding across Brazil, Mexico, Argentina, Chile, Colombia and Peru, covering the registry and the remote onboarding rule in each.
Product Guide





