Custom software for Know Your Customer, anti-money laundering checks and ongoing compliance monitoring. We don't build a second ComplyAdvantage or Refinitiv. We build the sector-specific flow, the case management layer and the integration between all your sources that off-the-shelf packages don't solve for your situation.
For standard screening against EU, UN and OFAC sanctions lists, PEP databases and adverse media feeds, good products already exist: ComplyAdvantage, NameScan, Sumsub, Onfido, Trulioo, Refinitiv World-Check, LexisNexis Bridger, Themis and Encompass. We have no intention of competing with them. Building our own sanctions list feed or maintaining a worldwide PEP database is a scale game we won't enter, as it rarely delivers anything fundamentally better than what is already on the market.
What we do build is the layer around them: the sector-specific KYC flow for trust offices, notaries, fiduciaries or crypto exchanges. The case management layer where your compliance officer handles files, flags escalations and records sign-off. The integration of multiple sources (the Chamber of Commerce register (KvK), iDIN, a purchased sanctions list API, your own customer database and your CRM) into one coherent file. And the risk scoring engine that fits your client base, not a generic retail bank.
For institutions falling under the Wwft, Wft, Wtt or DNB and AFM supervision, this is often where the gains lie. Your sanctions list provider does what it needs to do. Your own onboarding process, ongoing monitoring of existing relationships, UBO verification via KvK, periodic review of high-risk clients and the audit trail for the supervisor are often still spreadsheet work, semi-manual flows in SharePoint or loose modules in a CRM not designed for the purpose. That is where we provide custom software, built around the standard products you already pay for: not beside them, and certainly not instead of them.
Most projects start with one of these three and grow organically from there. In the first conversation we advise which variant will deliver the most for your type of institution and your client base.
A streamlined onboarding flow for new clients: identification via iDIN or passport scan with OCR and chip reading, KvK integration for business relationships, UBO enquiry with automatic mapping of the ownership structure, PEP and sanctions list checks via your existing screening provider, risk classification based on your own acceptance policy, and recording of the complete client acceptance file. Includes an escalation flow to the compliance officer when the risk score exceeds the threshold, and automatic notification to the relationship manager once the file is complete.
The software your compliance officer uses every day: a case management environment where alerts from screening, transaction monitoring and ongoing monitoring come in, are assessed, documented and closed. Workflows for handling true hits and false positives, the four-eyes principle for high-risk cases, automatic alerts when a review deadline is approaching, and an FIU reporting module with the right fields for the Dutch reporting chain. For ongoing monitoring, we re-screen your existing client base every night against the latest sanctions list and PEP updates, and flag adverse media relating to an existing client.
A complete compliance platform with deep integration across your core systems: transaction monitoring with its own rules engine that detects patterns (structuring, unusual geographic flows, transaction volumes outside the client profile), risk scoring that adapts to client type, dashboard reporting for DNB and AFM, and ongoing lifecycle monitoring from onboarding through to offboarding. Includes integration with your CRM, ERP, core banking system or investment administration, plus an audit trail that demonstrably records every action in the system for later inspection.
Sanctions screening carries its own obligation of immediate freezing and reporting, and the risk lies in the list changing while your file stays the same. See Sanctions Act software.
If the relationship begins away from the office, the check often comes after the transaction. How to bring that moment forward and enforce the block at the point of transaction is covered in the sanctions check app at the point of transaction.
If you act as a service provider to financial clients, there is a second layer of accountability: evidence that your own control measures have been carried out. See the app for signing off controls.
A production-ready compliance environment that connects to your existing screening providers and core systems, plus everything around it so you can manage it yourselves or have your IT partner manage it.
Four patterns we repeatedly see among institutions that approach us. If you recognise one of them, we would be happy to talk further.
You are a trust office, a notary, a fiduciary or a crypto exchange, and standard KYC suites are designed for a retail bank, not for your situation. The questionnaire, the UBO analysis, the risk criteria and the retention periods differ substantially. A bespoke onboarding flow built on top of a purchased screening feed is often a better fit than a suite you have to bend your processes around.
Client details sit in a CRM, transaction data in the core banking system, sanctions list hits in a separate tool from your screening provider, adverse media in a mailbox and the Wwft file on a shared drive. No one has a complete picture of a client. A bespoke compliance layer that brings these sources together into a single file makes your compliance officer's work considerably more efficient.
An off-the-shelf solution gives every asset manager, every estate agent and every fintech the same risk classification. As a compliance officer, you know your client base has a different profile from that standard assumption. A bespoke rules engine, in which you can configure country, sector and transaction-volume rules, and which you can justify to DNB or AFM, produces far sharper alerts.
You are an accountancy firm, notary or trust office that is itself subject to the Wwft and must carry out KYC for corporate clients. You want to offer your clients a private environment in which they can submit identification, record UBOs and take part in the annual review, branded as yours rather than that of an external SaaS provider.
A conversation in which we understand which supervision you fall under (DNB, AFM, BFT, NBA), which screening provider you currently use, which core systems are in place, which client types you serve and where the current flow falls short. We also map out the integrations required: KvK, iDIN, a purchased sanctions list API and your own client database. That way we already know, before the scope workshop, which smart API integrations form part of the project.
A workshop with the compliance officer, a partner or director, and interviews with the people who currently carry out the onboarding and monitoring work. We map out the current process flows and check them against the applicable legislation and regulation (Wwft, Wft, Wtt, EU AMLD). We identify where bespoke development adds value and where your existing screening provider is perfectly adequate. At the end, you have a concrete scope, a sprint plan and a first screen flow for onboarding or case management.
We work in two-week sprints and deliver a working, testable version at the end of each one. One compliance officer acts as product owner and one director or partner as sponsor. Early in the project we test the onboarding flow with real client cases, naturally in a sandboxed environment, so we can see where the flow runs into trouble before going live. A first tier is ready after a few sprints; a complete compliance platform with transaction monitoring runs over a project of several sprints. At the end of each sprint there is a short demo for the compliance team and a preview of the next sprint.
A phased rollout to your compliance team and relationship managers, with parallel running against the existing process so we can confirm that no alert is missed. Training for key users within your team and a short video introduction for relationship managers. From go-live we provide monitoring, security patches, integration maintenance and ongoing development in response to changes in sanctions regimes or new supervisory requirements. For every change to the Wwft or extension of a sanctions list, we carry out the impact analysis and the adjustment at our own cost.
The questions compliance officers, board members and MLROs usually ask us before a project starts.
A no-obligation introductory call of half an hour. We listen to how your compliance process currently runs, which screening provider you use and where it's causing friction, and we give direction you can act on straight away, even if we ultimately don't work together.
Appfront uses cookies and similar technologies to keep the website working properly, for analytics and for marketing. You choose what you allow. Read more in our privacy policy.
