Outsourced compliance, operations, treasury & growth teams for regulated fintechs in the UK, EU, US and Canada

Home / Services / Compliance & AML / Customer Due Diligence (CDD)

Compliance & AML

Customer due diligence that is risk-based, consistent and defensible

We set and apply CDD standards that match your risk appetite, from simplified checks for low-risk customers to full reviews for higher-risk relationships.

At a glance

CDD standards by risk tier

Purpose and expected activity

Source of funds checks

Occupation and profile checks

Supporting fintechs in the UK, EU, US and Canada

Overview

Knowing your customer beyond the ID document

CDD is more than identity verification. Regulators expect you to understand why a customer is using your service, what activity to expect and whether their funds make sense. Without that, monitoring has no baseline and investigations have no context.

Hilix defines your CDD requirements by risk level and customer type, builds them into your onboarding flow and operates the reviews. We capture purpose, expected activity and source of funds in a structured way, so later monitoring and investigations can quickly spot what does not fit.

What’s included

Everything included in Customer Due Diligence (CDD)

CDD standards by risk tier

Simplified, standard and enhanced requirements defined for each customer segment.

Purpose and expected activity

Structured capture of why customers use your service and what normal looks like.

Source of funds checks

Evidence requests and reviews proportionate to transaction size and risk.

Occupation and profile checks

Employment, income and profile consistency assessed against declared activity.

Ongoing due diligence

Trigger-based and periodic reviews when customer behaviour or risk changes.

Record keeping

Retention, file structure and audit trails that meet regulatory requirements.

Who this is for

  • Remittance and money transfer businesses
  • Digital wallets with tiered account limits
  • FX businesses handling larger individual transactions
  • Fintechs updating CDD after a regulatory review

What you receive

  • CDD procedure and risk-tier matrix
  • Operated CDD reviews with evidence
  • Source of funds request templates
  • Trigger rules for refreshed due diligence
  • CDD quality and completion MI

How we work

How we take over or build your compliance function

Diagnose

We review your policies, risk assessment, case files, queues and systems to see what works, what is missing and what is exposed.

Design

We agree scope, service levels, escalation rules and the decisions that stay with your MLRO, then document them.

Operate

Our analysts work inside your tools, clear queues to agreed SLAs and record every decision with evidence.

Report and improve

Weekly and monthly MI, quality checks and trend analysis feed continuous improvement and board reporting.

FAQ

Customer Due Diligence (CDD): common questions

What is the difference between CDD and KYC?

KYC usually refers to verifying identity. CDD is broader and includes understanding the purpose of the relationship, expected activity, source of funds and keeping that information up to date.

When is simplified due diligence allowed?

Only where your risk assessment supports it and regulation permits it. We help you document the justification and the limits that apply.

Can you refresh CDD on existing customers?

Yes. We run periodic review and remediation projects to bring existing customer files up to current standards.

Keep exploring

Related services

Free 30-minute consultation

Tell us where it hurts. We will show you how a seasoned fintech team fixes it.

Compliance backlog, a regulator letter, a new corridor, stalled growth or a support queue that will not shrink. Share it with us and get a clear scope, timeline and proposal within 48 hours.