- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Belize
- Bolivia
- Bosnia and Herzegovina
- Brazil
- British Virgin Islands
- Brunei
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Curaçao
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Monaco
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vanuatu
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Vanuatu
Verify citizens and residents through national ID card checks, ePassport NFC and 10,000+ foreign ID document types, run KYB on VFSC-registered companies and their beneficial owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for RBV-, VFSC- and FIU-supervised firms.
Operational Performance for Vanuatu KYC
Our Numbers Speak Volumes
80%
Pass
Rates
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
Vanuatu IDV/KYC Challenges
Many Customers Lack a Passport or Driving Licence
Regulation 4(3) asks for one photographic and one non-photographic document, yet the RBV's 2024 survey found only 47% of adults hold a photo ID such as a passport or driving licence. Shufti verifies national ID cards, birth certificates and electoral cards, each tied to a live selfie.
Remote Islands Put Onboarding on Mobile Phones
KYC verification in Vanuatu reaches the 300,019 people counted in the 2020 census, about 78% of them in rural areas across 83 main islands. Shufti's capture guidance and liveness checks run on the customer's own smartphone, so an outer-island customer can verify without travelling to a branch.
Ongoing Due Diligence Runs on a Six-Month Clock
Section 17 of the AML/CTF Act requires ongoing due diligence, and Regulation 8(3) generally sets reviews no more than six months apart. Shufti checks transactions against each customer's profile, refreshes sanctions and PEP data every 15 minutes and flags registry, director and ownership changes.
Two-Day STR Deadlines Leave No Room for Thin Case Files
Section 20 gives reporting entities two working days to report a suspicious transaction to the FIU, and the APG on-site evaluation in November 2026 will test how well that reporting works. Shufti's case management turns each alert into a report-ready bundle with the evidence attached.
Documents and Languages
Individual Documents Shufti Verifies in Vanuatu
Shufti verifies 6 Vanuatu identity documents plus passports and ID cards from other countries. The cards below cover the core documents Vanuatu onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsVanuatu National Identity Card
CRIM has issued national ID cards since 2017, now under the Vanuatu National Identity Act No. 27 of 2021, each carrying a unique ID number and a QR code. Shufti tests the card for tampering, screenshots and print-and-scan copies, then confirms the holder with liveness.
Residence and Work Permits
Vanuatu Immigration issues visas and permits to foreign residents and workers through its eVisa portal, with work visas granted under the Labour (Work Permit) Act, CAP 187. Shufti verifies the permit, checks its expiry and matches it to the holder's passport and selfie.
Vanuatu Electoral Registration Card
The FIU's July 2026 Simplified Due Diligence guideline lists the Electoral Registration Card among primary identity documents, alongside the passport and national ID card. Shufti checks the card for tampering, reads its details and cross-checks them against the customer's other documents.
Vanuatu Passport
Vanuatu Immigration issues passports under the Passport Act No. 20 of 2009 and now issues an electronic passport with a chip. Shufti reads the chip through NFC and applies nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Expatriate workers, foreign investors and non-resident directors of international companies use these documents to onboard with Vanuatu firms.
Vanuatu Driving Licence
The Vanuatu Police Force Traffic Unit tests drivers, and the licence is issued for three years under the Road Traffic (Control) Act, CAP 29. Shufti checks authenticity, expiry and the face match, which helps lenders, vehicle hire firms and car dealers onboard drivers quickly.
Birth Certificates and Proof of Address
The FIU accepts birth certificates as primary ID for minors and rural customers, and CRIM issues them under Act No. 28 of 2021. Shufti verifies birth certificates, UNELCO or VUI electricity bills and bank statements in the same step as the photo ID.
Entity Identity
Certificate of Incorporation
VFSC registers local companies under the Companies Act No. 25 of 2012 and international companies under the International Companies Act, CAP 222, and issues a certificate for each. Shufti checks the certificate for tampering against live VFSC registry data at every check.
VFSC Registry Record
The VFSC register shows each company's status, directors and shareholders and records business names under the Business Names Act, CAP 211. Shufti calls the registry live at every check, so a struck-off company or a changed director shows up before onboarding.
Constitution and Articles
Companies file their constitution with VFSC on registration, setting out ownership, share capital and signing authority. Shufti's AI-OCR reads those terms from the filed document and flags pages that were generated with GANs or edited after filing.
Business Licence and Address Proof
Under the Business Licence Act, CAP 249, the Department of Customs and Inland Revenue licenses businesses in Port Vila, Luganville and Lenakel, and provincial governments license the rest. Shufti cross-checks the licensed address against leases and utility bills in the company's name.
Tax Identity
Tax Identification Number (TIN)
The Department of Customs and Inland Revenue has issued TINs since 1 January 2020 under the Tax Administration Act No. 37 of 2018, and businesses need one for VAT and a business licence. Shufti extracts the TIN and cross-checks it against the licence and VFSC records.
VAT Registration
The Value Added Tax Act, CAP 247, makes registration compulsory once taxable supplies exceed or are expected to exceed VT 4 million in 12 months. Shufti reads the VAT certificate and matches its name and TIN to the company record, so a lapsed registration surfaces early.
Foreign Tax Registrations
International companies and subsidiaries of foreign groups often hold tax numbers issued abroad. Shufti reads those registrations from foreign tax documents and matches the entity name and address to the VFSC record, so a mismatch is flagged during onboarding.
Ownership and Control
Beneficial Ownership Records and the VFSC UBO Form
Section 58A of the International Companies Act requires up-to-date beneficial owner records, with an owner defined as anyone entitled to 25% or more, and VFSC's UBO form asks for updates within 25 days of a change. Shufti extracts each owner at that threshold and screens them.
Shareholder Register and Ownership Chart
International companies often use nominee shareholders and directors, and section 58A also requires records of the person who nominated each one. Shufti maps ownership through intermediate companies and nominees to the natural persons in control, then screens them against sanctions, PEP and adverse media lists.
Directors and Authorised Signatories
Directors and signatories named in the VFSC record each pass through ID verification and screening. Shufti alerts your team when the registry shows a board change, so a new director is checked before they sign for the company.
Languages We Cover
Bislama, English, French and Expat Document Parsing
Bislama is Vanuatu's national language and, with English and French, one of its official languages, while foreign investors and workers bring documents in other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads foreign investors' document layouts it has never seen on first sight, without waiting for a template.
Ni-Vanuatu Name Matching
Ni-Vanuatu names can appear with different spellings across Bislama, English and French records, and expatriate names arrive transliterated from other scripts. Phonetic and transliteration rules match these variants in sanctions and PEP screening, so a spelling difference does not hide a hit.
Cross-Document Consistency Checks
Names, dates of birth and identifiers are reconciled across the national ID card, passport, birth certificate, electoral card, VFSC record and TIN, so a mismatch between documents surfaces before the account opens.
Independent Validation
Shufti's Recognition Across Independent Evaluations

Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read MoreRegulatory Update
Every Verification Route Vanuatu Firms Rely On, in One Platform
Regulation 4 lets reporting entities rely on electronic data judged on its accuracy, security and whether a government body maintains it, and asks them to decide whether to use document authentication services. Shufti supports every route Vanuatu firms use, plus chip, document and video routes for customers without a national ID card.
National ID Number and Registry Cross-Checks
LiveShufti reads the national ID number, TIN and VFSC company number from the documents a customer submits, matches them across the file and against VFSC records, and saves every result to the case file where supervisors can review it.
NFC Chip Verification
LiveShufti reads the chip in Vanuatu's electronic passport and most foreign biometric passports. Chip data gives remote onboarding high-assurance evidence, which matters for the non-face-to-face customers the FIU excludes from simplified due diligence.
Document and Face Biometric
LiveShufti verifies the national ID card, permit or passport, then matches the holder through iBeta Level 3 liveness that blocks masks, replays and injected video. Most outer-island customers, foreign residents and non-residents take this route.
Video Identification
LiveAgent-led sessions in the language your customers use let trained staff confirm identity live for high-risk customers, with consent captured and the full session recorded as evidence for the enhanced due diligence file.
Fraud Prevention Across the Vanuatu Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Vanuatu businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for national ID cards, birth certificates and permits cuts blur, glare and cropping, so more customers pass on their first attempt.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes, and decision history, packaged as report-ready bundles for STR filing with the FIU.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director, and transaction behavior changes across the compliance lifecycle.
National ID Card-First Flow Design
Ni-Vanuatu customers verify with the national ID card first, while foreign residents and non-residents switch to permit or passport verification in the same flow.
Shufti's IDV/KYC Solutions for Vanuatu
KYC Solutions
Vanuatu firms onboard citizens with national ID cards and birth certificates, foreign residents with permits and non-residents with passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore MoreFace Verification
Remote onboarding needs proof that a live customer is present. Shufti matches the selfie to the ID card or passport photo with iBeta Level 3 liveness and a 99.5% first-try pass rate, so genuine customers finish quickly and impostors are stopped at the camera.
.Age Verification
Casinos, interactive gaming operators and age-restricted retailers need age checks that do not hold adults up. Shufti estimates age from a selfie in under five seconds, blocks 99.8% of underage attempts and switches to a document check when an estimate sits close to the limit.
.Bank Account Verification
Loan disbursements, salary payments and payouts go astray when the account belongs to someone else. Shufti validates Vanuatu bank account details and matches the account-holder name in real time against the verified customer before any money moves.
.Address Verification
Address documents in Vanuatu come in many layouts, from electricity bills to bank letters. Shufti's layout-aware extraction and fuzzy matching read the address and compare it with the one declared, reaching a 99.3% pass rate on address checks.
.Document Verification
Vanuatu document checks span national ID cards, birth certificates, permits and foreign passports. Shufti verifies each within seconds with forensic checks that catch screenshots, replays, synthetic cards and print-and-scan copies before a fake reaches your back office.
.Identity Verification
Identity verification in Vanuatu asks more of PEPs and other high-risk customers, who face enhanced checks under Regulation 6 and often several proofs at once. Shufti runs document, biometric, NFC and address checks in one API session, so the full evidence set arrives as a single result your analysts can review.
.KYB Solutions
Vanuatu companies register with VFSC as local or international companies, and many international companies have nominee shareholders or owners abroad. Shufti's live registry calls and ownership mapping give firms the full picture in one check, covering the beneficial owner and control structure details Regulation 3(b) asks for.
Explore MoreBusiness Verification
Onboarding a Vanuatu company means confirming its VFSC registration, TIN, signatories and everyone who owns or controls 25% or more. Shufti's live registry call confirms the VFSC record, directors and shareholders, and owners at 25% or more are checked against the beneficial ownership records the company keeps.
.Enhanced Due Diligence
Companies with PEP links, nominee structures or owners in high-risk jurisdictions need deeper review. Shufti's branching due diligence questionnaires collect source-of-funds and ownership evidence, score the answers and send UBO verification links to each owner.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC screens customers against 4,000+ watchlists, including the UN sanctions lists that bind Vanuatu firms, refreshes the data every 15 minutes and keeps every alert in one case file.
Explore More
Business AML Screening
Owners and directors can become sanctioned or politically exposed long after a company is onboarded. Shufti screens the company, its owners and its directors against UN sanctions lists, PEP data and 50,000+ adverse media sources in 80+ languages, then rescreens the portfolio under perpetual KYB.
.
Transaction Monitoring
Regulation 12 sets large cash reporting at VT 1 million, and VT 200,000 for money changers, so launderers split amounts below those lines. Shufti's library of 500+ pre-built rules covering structuring, smurfing, and mule activity cuts false positives by 60% and turns alerts into report-ready case bundles.
.Travel Rule
Section 27(2) of the Virtual Assets Services Providers Act No. 3 of 2025 requires beneficiary information on cross-border transfers of USD 1,000 or EUR 1,000 or more. Shufti's Travel Rule integration connects to major networks through IVMS101 and verifies who owns unhosted wallets.
.AI Compliance Co-Pilot
One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot works through every hit, attaches a confidence score and a written reason, and logs any override, while the MLRO still decides what gets escalated.
.Built To Fit Vanuatu's Compliance Landscape
The AML/CTF Act and the FIU's guidelines apply to every reporting entity in Vanuatu, while the RBV and VFSC add licensing and prudential rules for the firms they supervise. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Anti-Money Laundering and Counter-Terrorism Financing Act No. 13 of 2014
In force since 24 June 2014 and consolidated in 2025 after five amending Acts, this law applies to every reporting entity listed in section 2. Section 12 requires identification of customers and beneficial owners, section 17 ongoing due diligence and section 19 six-year record retention.
Vanuatu Financial Intelligence Unit (FIU)
Established within the Office of the Attorney General under section 4, the FIU receives reports and issues enforceable guidelines, including its July 2026 Simplified Due Diligence guideline. Section 20 requires suspicious transaction reports within two working days, delivered by fax, email or hand under section 26.
Reserve Bank of Vanuatu (RBV)
The RBV licenses domestic banks under the Financial Institutions Act, CAP 254, and international banks under the International Banking Act, CAP 280. Its Prudential Guideline No. 9 sets customer due diligence for banks, and its July 2025 Mobile Money Operating Guidelines allow tiered KYC for wallets.
Vanuatu Financial Services Commission (VFSC)
VFSC is the company registrar and licenses financial dealers under the Financial Dealers Licensing Act, CAP 70, and company and trust service providers under Act No. 8 of 2010. Its free online search lets anyone check a local or international company and download its certificate of incorporation.
Virtual Assets Services Providers Act No. 3 of 2025
Section 10 lets only companies holding a VFSC licence provide virtual asset services, and section 11 sets the licence classes. VFSC's January 2026 guidelines, issued under section 59, require VASPs to apply Travel Rule controls, screen for sanctions and file suspicious transaction reports with the FIU.
Department of Customs and Inland Revenue (DCIR)
The DCIR issues TINs under the Tax Administration Act No. 37 of 2018, administers VAT and grants business licences in municipal areas. Its Director also licenses casinos under the Casino (Control) Act, CAP 223, which makes each casino operator a reporting entity under the AML/CTF Act.
Civil Registration and Identity Management Department (CRIM)
CRIM keeps Vanuatu's civil registers and issues national ID cards and birth certificates. The Vanuatu National Identity Act No. 27 of 2021 and the Civil Registration and Identity Management Act No. 28 of 2021 took effect on 11 January 2022 and give each person a unique national ID number.
United Nations Financial Sanctions Act No. 6 of 2017
Under section 3, UN Security Council designations take effect in Vanuatu immediately, and section 4 lets the Prime Minister make domestic designations. Section 16 requires anyone holding a designated person's property to report it within five working days, and the FIU is still preparing a domestic sanctions list.
Asia/Pacific Group on Money Laundering (APG)
The APG assesses AML compliance in Vanuatu, which left the FATF increased monitoring list in June 2018 and was absent from it in June 2026. Its 2015 mutual evaluation rated effectiveness low across all 11 immediate outcomes, and the next on-site visit is set for November 2026.
Telecommunications, Radiocommunications and Broadcasting Regulator (TRBR)
TRBR oversees Vanuatu's telecom operators, and its SIM Card Registration Regulation, Order No. 105 of 2022, requires subscribers to register their SIM cards with personal details and valid ID. Registered SIMs also anchor the mobile money wallets that the operators offer.
Vanuatu Data Residency and Deployment
Section 15 of the Data Protection and Privacy Act bars using personal data collected in Vanuatu elsewhere without the Minister's prior authorisation, unless the destination is prescribed. Shufti runs on-premises inside Vanuatu infrastructure, including air-gapped setups, and any other hosting location is fixed in the agreement.
Vanuatu Data Protection and Privacy Act (No. 13 of 2024)
The Act commenced on 2 January 2025, with the Deputy Commissioner of Data Protection and Privacy under the Digital Safety Authority Act No. 15 of 2024 overseeing it, and section 6 treats biometric data as a special category. Shufti applies encryption, role-based access controls and configurable retention.
Children's Data and Age Checks
Section 7 prohibits processing a child's personal data unless an exception applies, such as parental consent or a legal obligation, and calls for age verification mechanisms where communication is aimed at children. Shufti's selfie age estimation and document fallback give firms that check at sign-up.
Retention Controls
Section 19 of the AML/CTF Act sets six years as the minimum for transaction records, reports and identity evidence, counted from the transaction, report or end of the relationship. Shufti configures retention by client and licence, treats statutory minimums as floors rather than deletion dates and applies legal holds.
Encryption and Security
The Cybercrime Act No. 22 of 2021 makes illegal access, data interference and computer fraud offences in Vanuatu. Shufti encrypts data in transit and at rest, enforces role-based access and audit logging, and holds ISO 27001:2022 certification and SOC 2 Type 2 reports for vendor assessments.
Automated Decisions and Biometric Data
Section 13 lets a customer ask not to be subject to a solely automated decision, and decisions based on contract or consent must allow human intervention. Shufti returns verification results and their reasons through the API and back office, so support teams can explain and escalate disputed outcomes.
Scope of Our Role
Shufti processes data on the firm's instructions as a data processor under a written agreement. The firm remains the data controller under the Data Protection and Privacy Act and keeps its compliance duties, and Shufti's privacy notice identifies any activities it carries out as an independent controller.
Data Residency and Privacy Controls in Vanuatu
Vanuatu AML Sources That Strengthen Decisions
Vanuatu Financial Intelligence Unit (FIU)
Reserve Bank of Vanuatu (RBV)
Vanuatu Financial Services Commission (VFSC)
Vanuatu Police Force Criminal Investigation Department (CID)
Office of the Public Prosecutor (OPP)
Department of Customs and Inland Revenue (DCIR)
Office of the Registrar of Cooperatives and Business Development Services (ORCBDS)
Asia/Pacific Group on Money Laundering (APG)
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
International Monetary Fund (IMF)
United Nations Office on Drugs and Crime (UNODC)
Australian Transaction Reports and Analysis Centre (AUSTRAC)
International Criminal Police Organization (INTERPOL)
United Nations Security Council
Turn Vanuatu Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Vanuatu
Customer Due Diligence For RBV KYC Compliance
Vanuatu's five commercial banks apply Prudential Guideline No. 9 to citizens, foreign residents and international companies alike. Shufti verifies national ID cards, passports and permits with liveness, maps company owners from VFSC records and keeps every customer under ongoing screening and transaction monitoring.
Frequently Asked Questions
Does Shufti support the Vanuatu National Identity Card, and what happens when customers cannot use it?
Yes. Shufti verifies the card, reads its national ID number and confirms the holder with liveness. Customers without one, such as foreign residents or non-residents, verify with a permit or passport and liveness in the same flow, without starting again.
Is a Vanuatu National Identity Card image enough to verify a customer?
No. A printed, edited or screen-captured copy can pass a quick visual check. Shufti tests the card for tampering, screenshots and print-and-scan copies, then confirms the holder with liveness, giving remote onboarding the reliable and independent evidence Regulation 4 expects.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot document intelligence learns new layouts in minutes instead of waiting for template updates. Expatriate workers, foreign investors and non-resident directors can onboard with documents from 240+ countries and territories, checked with the same forensic and biometric controls as Vanuatu documents.
How does Shufti OCR compare with Google OCR for documents used in Vanuatu?
Vanuatu documents use the Latin script in Bislama, English and French, while foreign workers and investors bring documents in other scripts. Across the languages in its published benchmark, Shufti's OCR averages 93% accuracy against Google Vision's 78.4%, so those documents need fewer manual corrections.
How does Shufti verify ownership when a Vanuatu company has several corporate layers?
Shufti follows ownership from the VFSC record through the share register, nominee records and each intermediate company, including holdings registered abroad, until it reaches the natural persons in control. Each owner is then verified and screened, as Regulation 3(b) expects for legal persons.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Section 17 of the AML/CTF Act requires ongoing due diligence for the whole relationship, so Shufti also monitors transactions against each customer's profile, tracks adverse media and flags changes to a company's registration, directors and owners, opening a review whenever risk shifts.
How does Shufti keep screening current and handle Vanuatu name variations?
Watchlist data refreshes every quarter hour, including the UN sanctions lists that apply under the United Nations Financial Sanctions Act. Native phonetic models match Bislama, English and French spellings and transliterated foreign names, so AML screening in Vanuatu does not miss a variant spelling.
Can we choose Vanuatu hosting or run verification inside our own infrastructure?
Yes. Shufti deploys on-premises inside your infrastructure in Vanuatu, including air-gapped setups, which keeps identity data in the country and avoids the ministerial authorisation section 15 of the Data Protection and Privacy Act requires for use elsewhere. Any other hosting location is named in the agreement.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, limits access by role, logs every action and holds ISO 27001:2022 certification and SOC 2 Type 2 reports. Those controls support the duties the Data Protection and Privacy Act places on firms processing biometric data as a special category.
Can we configure different retention periods for different Vanuatu licences?
Yes. Retention is set by client, licence and jurisdiction, so a bank, a VASP and a financial dealer in one group each keep records under their own rules, with the six-year AML/CTF Act minimum as a floor and legal holds during investigations.
What does Shufti provide when our compliance team needs to prepare an FIU report?
Shufti assembles the verification results, screening hits, transaction alerts, analyst notes and decision history for each case into one bundle. Your team uses it to complete the prescribed suspicious transaction report form and send it to the FIU within the two working days section 20 allows.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Checks such as NFC, video identification or address verification are added or reordered in Shufti's AI Journey Builder by geography, product and risk tier. The change is a configuration update, so your integration and the screens customers already see stay the same.
How does Shufti make verification queries easier for our customer support team?
Each back-office decision lists the checks that passed or failed, the reason and the evidence behind it. Support agents can explain a rejected ID card or selfie, ask the customer for a fresh capture and escalate a disputed result without involving engineers.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 February, 2026
Forex Identity Verification Buyer's Guide
For brokers licensed across several jurisdictions. How to assess identity verification vendors on KYC and AML compliance, deepfake defence and trader onboarding speed.
Product Guide





