The customer passes the Onfido or Sumsub check, but someone still retypes the business register extract, proof of income and beneficial owner declaration into the CRM by hand. A private model extracts the fields and cross-checks them against the check result and the Dynamics 365 record, and the compliance officer makes the decision personally.
Built for ISO 27001NIS2 DORA
A new business customer passes the identity check through Onfido or Sumsub, and you get the result of matching the director's ID document to their face. Then they send a business register extract and a beneficial owner declaration, and some customers also send proof of income, some by email, some through the self-service portal, some scanned from paper. The compliance officer opens every file, retypes names, codes, document numbers and expiry dates into the customer record in Dynamics 365 or Salesforce, and then compares: is the director in the register extract the same person Onfido verified, do the declared beneficial owners match the shareholders in the extract, does the income amount match the application, is the document still valid. For one file this usually takes half an hour, and errors appear where the eye slides over codes.
The solution takes documents from the KYC mailbox and the self-service portal, pulls the Onfido or Sumsub check result through the API or from their report, and passes everything to a private model in a Bedrock EU region. The model recognises the document type, extracts the fields, cross-checks them across documents, against the check result and against the existing customer record in Dynamics 365 or Salesforce, and flags expiry dates, missing fields and mismatches. The result appears in the CRM as a draft customer record with notes and the source of each field. The specialist reviews, corrects and approves; until then nothing is written to the customer record and the customer status does not change. We connect to Onfido, Sumsub and the CRM through an API, a file export or an email flow, depending on your version. Data does not leave the EU, the model does not learn from it, and every action stays in the log, in line with GDPR and DORA.
Four steps from input to a record in your system, with human approval wherever there is risk.
The flow monitors the KYC mailbox and self-service uploads, pulls the Onfido or Sumsub check result through the API or from the report they send, and assigns everything to the customer's file by email address or application number. Scanned business register extracts and income statements are converted to text, and unreadable files are returned to the customer at once with a request to send them again.
The private model recognises whether a document is a business register extract, a beneficial owner declaration or proof of income, and extracts the fields: name, personal or company code, document number, expiry date, directors, shareholders, beneficial owners, income amount. It then compares the fields with each other, with the person verified by Onfido or Sumsub and with the customer record in Dynamics 365 or Salesforce, adding a note and a confidence level to every mismatch.
In Dynamics 365 or Salesforce, the compliance officer sees a draft record with the extracted fields, notes and a link to the place in the document each field came from. They approve it, correct it or ask the customer for additional documents. The customer status in the CRM changes only after a person approves, and their action is logged.
A document whose type the model does not recognise, or whose fields have low confidence, goes to a manual queue with no automatic filling. If the Onfido or Sumsub check failed, the file does not enter cross-checking. Every processing step is logged: who, when, which file, what result. We monitor recognition quality and extend the rules when a new document type appears.
Pulling the Onfido or Sumsub check result, receiving documents from email and the self-service portal, and passing the extracted fields to the customer record in Dynamics 365 or Salesforce with source links.
A specialist's window in the CRM with fields from the business register extract and certificates, mismatch notes and buttons to approve, edit or request more information.
A record of each document's processing with time, user and result, linked to the Onfido or Sumsub check ID and exportable for audit and the supervisor.
Training for the compliance team, monitoring of recognition quality and rule updates when the business register extract formats or your KYC procedure change.
Private model in an Amazon Bedrock EU region + Onfido or Sumsub check result and a Dynamics 365 or Salesforce customer record. We connect to these systems through an API, a file export or an email flow, depending on your version; we choose the method after a check. Learn more about this service and its limits on the service page.
No. The model only extracts, cross-checks and flags; the compliance officer makes the decision. The customer status in Dynamics 365 or Salesforce is written only after their approval, and this is visible in the log.
Yes. We pull the Onfido or Sumsub check result through their API or from the report they send, and we connect to Dynamics 365 or Salesforce through an API, a file export or an email flow, depending on your version. We choose the integration method after a check in the first week rather than promising it in advance.
We start with your most frequent ones: business register extracts, beneficial owner declarations, and proof of income from the tax authority or employer. The model runs in an Amazon Bedrock EU region, data does not leave the EU and is not used for training, and we sign a data processing agreement with you and describe the flow in your GDPR record of processing.
A quarterly report to the financial regulator means days of collecting data from Sage, the core system and registers into Excel and checking it by…
Complaints arrive in a shared Outlook inbox, ICT incident reports come from monitoring and Teams, and deadlines run from receipt.
What is the contract termination procedure, when is enhanced customer due diligence required, who approves an exception: staff ask colleagues in…
Where is my payment, what is my limit, how much does a transfer cost: the answers are already in your core system.
This service is delivered by specialists with valid international certifications. Their expertise is confirmed by independent organisations, not by us.
AI systems are deployed with protection against data leakage and model abuse.
The AI security programme and its controls are managed following the ISACA methodology.
AI risks are identified and managed like any other IT risk.
We reply within 1 business day
