Spanish private banks and wealth managers should train KYC analysts to review what agents draft, not to redo it. Agents can read notarial deeds, assemble family business records and draft source-of-wealth narratives. Analysts must test those drafts, understand held cases and record corrections. Credibility, client acceptance, PEP approval and suspicion remain theirs, and the EU AI Act expects them trained.
What does wealth KYC look like in Spain?
Two client groups dominate many Spanish wealth books. One is domestic: families whose wealth comes from a business built over generations, often with property and a holding company alongside it. The other is international, especially Latin American clients who have moved part of their wealth and sometimes their residence to Spain.
For domestic clients, the evidence is often strong. Public deeds executed before a notary record company formations, share transfers and property sales, and the analyst can rely on them heavily. For Latin American clients, the evidence is harder: documents from several countries, businesses that changed hands informally, and sources of wealth in places where public records are thin or slow.
PEP checks are frequent in both groups, and the analyst must weigh political exposure in the client's home country as well as in Spain.
Which tasks can the agent take on?
Reading deeds and registry extracts (depth 1). The agent extracts parties, dates and amounts from notarial deeds and the mercantile registry, and builds the ownership chain. A notarial deed is signed: a named, identifiable party answers for it. A summary written by the client is declared.
Drafting the source-of-wealth narrative (depth 2). The agent writes the story, citing each document. For Latin American clients it marks which claims rest on foreign public records, which on audited accounts and which on the client's word.
Drafting requests for information (depth 2). The agent prepares the letter asking for missing evidence, in Spanish, for the relationship manager to send.
Periodic reviews (depth 3 for low-risk, stable clients). The agent completes the review within the firm's bounds and holds any change in residence, ownership or screening status.
Declines and exits are depth 4 and held every time.
Who decides what?
The analyst decides whether the wealth story is credible, whether to accept a PEP, whether something is suspicious, and whether to end a relationship. The agent drafts, gathers and checks. That split is not a matter of taste; it reflects who can be held responsible, and the analyst is the one the firm and its supervisors will name. The case is made in why KYC analysts are the real control in an AI agent deployment, and the lines analysts should hold are in what KYC analysts should never let an AI agent do.
One Spanish-specific trap deserves attention: the strength of notarial evidence for domestic clients can make analysts relax when the same agent produces an equally tidy narrative for an international client built on weaker documents. Training should make that difference visible.
What must analysts learn?
- The vocabulary. Depth, the four verdicts, the five bounds of the minimum chain and the provenance classes. An analyst must see at once that a narrative rests on declared claims.
- Review technique. Check each claim against its document; look for what is not there; decide. The method is in how KYC analysts review an AI agent's decisions.
- Correction. A rejected draft with a written reason improves the agent's brief and sources. See teaching KYC analysts to bank corrections.
- Certification basics. The agent is certified on the firm's own cases, its certificate lapses after 90 days, and a run that clears no depth drops it to depth 1 the same day.
Which rules apply in Spain?
Banco de España supervises banks, and the ECB supervises the largest directly. The national securities supervisor oversees investment firms and wealth managers' conduct, within guidelines set by ESMA, and the EBA sets guidelines for banks. The EU Anti-Money Laundering Authority (AMLA) is being established in Frankfurt.
The EU AI Act (Regulation (EU) 2024/1689) places duties on deployers. Article 4 asks them to ensure sufficient AI literacy among staff who operate AI systems; Article 26 sets out deployer obligations; Article 14 covers human oversight of high-risk systems. KYC is not among the high-risk uses listed in Annex III, but the literacy duty applies regardless.
GDPR governs the data, with the AEPD as Spain's data protection authority. Article 22 limits decisions based solely on automated processing with significant effects, and Article 35 may require an impact assessment. DORA governs ICT risk and third-party arrangements, including the agent platform. Spain's anti-money-laundering law, built on EU directives and the FATF Recommendations, requires due diligence scaled to risk, enhanced checks on PEPs and reporting of suspicion to the national financial intelligence unit.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
What does a 90-day plan look like?
Weeks 1 to 4. Foundations (about 4 hours) for analysts, leads, the compliance officer and relationship managers who handle international clients. The agent works at depth 1 on deeds and registry extracts. Keep completion records for the AI literacy file.
Weeks 5 to 8. Operator modules on human review, teaching the agent and when something goes wrong. Narratives move to depth 2. Run paired reviews: one domestic file, one Latin American file, same analyst, same day, to make the evidence gap visible.
Weeks 9 to 13. The Operator exam (40 questions; pass at 32 correct) and the two-week practicum on live files. Only certified analysts approve held cases afterwards. The training plan template for KYC analysts gives a copyable version, and AI agent skills by role shows the roles around the analyst.
Where the Academy fits
Pryme Intelligence Academy provides the evidence a Spanish firm needs for its literacy file and its supervisors: Foundations badges for everyone, Certified Pryme Operator for the analysts who approve held cases, and an admin view of progress and expiry dates. Lessons can be read or listened to, and labs run in a free Build workspace, so analysts can practise on sample files before touching live ones.
Questions people ask
Does a notarial deed settle a source-of-wealth question?
It is strong evidence that a transaction happened, because the notary answers for it. It does not prove where the money for that transaction came from, which is still the analyst's question.
Can the agent assess political exposure in Latin American countries?
It can screen and assemble what public sources say. Whether a role in another country makes the client a PEP, and what that means for the file, is the analyst's decision.
Do we need a fundamental rights impact assessment?
Article 27 applies to certain deployers of high-risk systems. KYC is not listed as high-risk, but confirm the position for your firm with counsel.