KYC analysts need the change note to answer one question: which customers will now reach me, and why? Every 90 days the onboarding agent is recertified on your own files, and the documents it accepts, the sources it checks and the onboardings it may approve can change. Brief the delta, practise on hard files and sample the agent's approvals early.
What does recertification change in a KYC team?
A KYC agent usually collects and reads documents at depth 1, extracts the data, checks it against company registries and screening lists, and drafts a customer risk rating at depth 2. In some firms it approves standard, low-risk onboardings at depth 3, within the firm's own limits. Enhanced due diligence, politically exposed persons and any case with an unresolved screening match stay with an analyst, and some go to the money laundering reporting officer.
Recertification replays the agent on recent files. Two changes are common. The set of documents the agent may accept can narrow, for example if it misread a particular foreign identity document during the replay. And a new source can be added, such as a registry feed, which changes how strong the evidence behind a check is.
Provenance is the KYC analyst's core skill. A document confirmed with its issuer is signed. A customer's statement of occupation is declared. A photo of a utility bill uploaded through the app is external until verified. A rating that rests on declared facts can still be right, but the analyst should know that is what it rests on. A primer on the cycle is in what recertification is.
Who owns the cycle?
The KYC operations manager owns analyst readiness and the rota. The builder owns recertification. The financial crime policy owner owns the firm's own limits, such as which customer types the agent may approve. The reporting officer should see any change that widens agent approvals.
The steps
- Agent, depth 1: report the cycle. Files opened, documents accepted and rejected, screening matches, ratings drafted, onboardings approved and held, with the deciding bound for each.
- Person (quality analyst): re-review a sample of agent-approved onboardings.
- Person (builder): recertify on recent files, including hard document types and near-miss screening matches.
- Person (manager and builder): write the change note: documents accepted, sources added or removed, customer types the agent may approve.
- Person (reporting officer): sign if approvals widened.
- Agent, depth 2: draft practice files, checked by the quality analyst.
- Person (manager): brief analysts; each explains how they would treat each practice file.
- Person (quality analyst): sample the first fortnight of approvals and held files.
| Step | The agent does | Depth | Stays with a person |
|---|---|---|---|
| Document collection | Requests and reads documents | 1 | Unusual documents |
| Data checks | Checks against registries and lists | 1 | Resolving partial matches |
| Risk rating | Drafts with sources cited | 2 | Confirming the rating |
| Standard onboarding | Approves within limits | 3 | Setting the limits |
| Enhanced due diligence | Gathers evidence | 1 and 2 | The decision |
| Screening match | Holds and escalates | held | Clearing or confirming |
What should KYC analysts retrain on?
Documents that moved. If the agent no longer accepts a document type, analysts will see more of them. Give two worked examples of what good and bad look like.
Partial screening matches. The agent holds them. Analysts should practise the reasoning for clearing a partial match and recording why.
Ratings built on declared facts. Practise spotting a rating where the key input is the customer's own statement, and decide when to ask for evidence.
Periodic reviews. If recertification changed how the agent handles reviews of existing customers, analysts need to know which reviews will now come to them.
The FATF Recommendations set a risk-based approach to customer due diligence. An agent applying that approach faster does not change who answers for it.
Controls and the evidence they leave
- Re-review of agent approvals. Evidence: the sample and outcomes.
- Signed change note where approvals widened. Evidence: the note with the reporting officer's signature.
- Analyst briefing. Evidence: attendance and practice answers.
- Named clearance of every held screening match. Evidence: the clearance and reason in the append-only record.
- Practicum for new analysts. Evidence: the practicum log template for KYC analysts.
What to measure
Onboardings re-opened after quality review, by who approved them. Time held screening matches wait. The number of document types rejected by the agent and later accepted by analysts. If that last figure climbs, the agent may be too cautious on a document it handles well, which is a case for the next replay.
Where does readiness slip?
Analysts learn that the agent now approves a customer type only when the quality sample finds one. Widening approvals without telling the team removes a set of files from human eyes without anyone deciding that.
Screening matches get cleared on volume days with thin reasons. The reason is the evidence; without it, the clearance cannot be defended.
Analysts assume the agent checked something it did not. Accountability for the file stays with the team, as are KYC analysts accountable for an AI agent's mistakes explains. Fraud and credit teams run similar cycles; compare keeping fraud analysts ready for recertification.
Where the Academy fits
Pryme Intelligence Academy's Operator track teaches the reading skills a KYC analyst uses on every held file, including how a governed agent decides and human review. Module tests are set in the learner's own industry and role. Certified Pryme Operator is issued through VerifyDoc.ai, so a compliance team can check any analyst's status at source. More in the guide to AI literacy and certification for people who work with agents.
Questions people ask
Can the agent approve a politically exposed person?
No. Those cases need enhanced due diligence and senior sign-off. Keep them outside the agent's approval bounds.
What happens to files in flight if the agent drops to depth 1?
They stay open. The agent still reads and collects, but analysts complete ratings and approvals until the next successful certification.
Should analysts see why the agent rejected a document?
Yes. The verdict names the bound and the reason, and analysts need both to decide what to request next.