Automate KYC onboarding reviews from your written procedure
A KYC agent follows your onboarding procedure on each applicant: it reads the documents, runs the screening, applies your rules and asks a reviewer wherever the procedure says a person decides.
Works with


- Custom REST
and any system with an API via Custom REST
What is a KYC onboarding review?
The procedure
A KYC onboarding review checks that a new customer is who they say they are before the account opens. An analyst collects the ID and proof of address, screens the person and gives a risk rating under your policy. The judgment calls sit in the screening hits and the high-risk files.
What the agent does
Pulls the applicant, ID and proof of address from Sumsub
Checks each document against the sections of your procedure
Screens the applicant, directors and owners in ComplyAdvantage
Applies your risk rules and drafts any request for missing documents
What your team decides
Whether a possible PEP or sanctions match is the same person
Approval of any applicant rated High risk
Whether a request for documents goes to the applicant
Escalations to your MLRO or compliance officer
Example runs for onboarding analysts, MLROs or compliance officers, and compliance operations
KYC Review Agent
Reviews each new applicant against your onboarding procedure.


- +1
Trigger: Sumsub · applicantReviewed
From a procedure KYC review · v1.3
Maya
New applicant: Halden Trading. Run the onboarding review.
KYC Review Agent
Pulled the applicant, ID and proof of address from Sumsub- Checked the documents against section 3 of the procedure
Screened the director and owners in ComplyAdvantage: no hits- Risk rating is Medium, so no reviewer is needed
risk_rating != "High"
Approved. Halden Trading meets each check in v1.3 of the procedure, and the run logs the rule that skipped review.
4 steps · 0 reviews
KYC Review Agent
Reviews each new applicant against your onboarding procedure.


- +1
Trigger: Sumsub · applicantReviewed
From a procedure KYC review · v1.3
Priya
New applicant: Ostrava Metals. Run the onboarding review.
KYC Review Agent
Pulled the applicant and the director's ID from Sumsub
Screened the director in ComplyAdvantage: 1 possible PEP match- Paused for a reviewer: section 4 sends any screening hit to a person Waiting for a reviewerTom: different person, date of birth and country differ
- Recorded the decision and continued the checks
- Risk rating is Medium after review
risk_rating != "High"
Approved after review. Tom ruled the possible match a different person. His reason and the match details are attached to the run.
5 steps · 1 review
KYC Review Agent
Reviews each new applicant against your onboarding procedure.

- +1
Trigger: Sumsub · applicantReviewed
From a procedure KYC review · v1.3
Lena
New applicant: Harbor Lane. Run the onboarding review.
KYC Review Agent
Pulled the applicant and the uploaded documents from Sumsub- Proof of address is missing, which section 3 requires
documents.missing.size() > 0 Drafted the request for documents and saved it to the case folder
- Held the request for a reviewer to approve Waiting for a reviewerTom: approved, your team sends it
Waiting on the applicant. The request for the missing proof of address was approved and handed to your team to send. The run resumes when the document arrives.
4 steps · 1 review
Setting up the KYC Review Agent
Connect your systems
Pull applicants and documents from Sumsub, screen in ComplyAdvantage, keep evidence in Google Drive, and reach any other system with an API through Custom REST.


- Custom REST
Write the rules
Write the branch conditions once in CEL. Each run logs the rule that sent it to a reviewer or let it skip review.
screening.hits > 0 || risk_rating == "High"Ask a reviewerdocuments.missing.size() > 0Request documentsrisk_rating != "High"ApproveAdd reviewers where the procedure says
The agent stops where your procedure says a person decides, shows the evidence it gathered, and resumes on the reviewer's decision.
Review requested: Ostrava Metals
- Reason
- Possible PEP match on a director
- Rule
- screening.hits > 0
- Procedure
- KYC review · v1.3
Different personEscalate
Start it from the event
Start a review when Sumsub marks an applicant as reviewed, or when your onboarding system posts a new applicant to a webhook. A daily schedule picks up applicants still waiting on documents.
- Sumsub · applicantReviewed
- Daily at 06:00 · applicants awaiting documents
- Inbound webhook · new applicant
Version and evaluate
Write test scenarios for a clean applicant, a screening hit and a missing document. Each new version of the KYC review runs them first, and a failing scenario blocks publishing.
KYC review · v1.3Published
12/12 scenarios passed
KYC review · v1.2 Superseded
KYC review · v1.1 Superseded
Share with the team
Your compliance team authors the onboarding procedure, onboarding analysts review paused runs, and internal audit reads runs and versions with the Auditor role. Admins manage access per workspace.
Admin
Author
Reviewer
Auditor
Questions about KYC onboarding automation
Does the agent approve applicants on its own?
Only where your procedure allows it. In the clean example the rating is Medium and no rule calls for a person, so the agent approves and logs the rule it used. A screening hit or a High rating pauses the run.
Which systems does it read from?
Sumsub for the applicant and documents, ComplyAdvantage for screening and Google Drive for the case folder. Other systems with an API connect through Custom REST.
What happens when a document is missing?
The agent drafts the request and a reviewer approves it. Your team sends it, and the run waits until the document arrives.
Can we change the risk rules later?
Yes. Edit the procedure or its CEL rules and publish a new version. Finished runs keep the version they followed, and new runs use the new one.
Controls your auditors will ask about
These controls apply to each agent you build. Sample data
Admin
Author
Reviewer
Auditor
Role-based access
Admin, Author, Reviewer and Auditor roles, scoped to each workspace.
- 41
7c2e… - 42
a91f… ← 7c2e - 43
03d8… ← a91f
Hash-chained audit log
Each entry carries the hash of the one before it. Verifying the log recomputes the chain and flags entries that no longer match.
- 41
- v1.1v1.2v1.3Published
Versioned specs
Each run records the exact version it followed; old versions stay readable.
- vault/sumsub/key
Secrets in a vault
Steps point to a vault path, and the key stays in the vault.
- Signed delivery accepted
- Unsigned delivery rejected
Signed webhook triggers
Unsigned or stale deliveries are rejected before a run starts.
- SandboxLive
Sandbox before live
New versions run on test data first. Going live is a separate step.
Related use cases
-


KYB and beneficial ownershipMap owners and controllers above your threshold, screen each one and flag gaps for a reviewer.
-
Sanctions screeningScreen counterparties before the first payment and send each possible match to a person.
-

PEP and adverse media reviewCompare each PEP or adverse media hit with the customer file and put the evidence in front of a reviewer.
Run this procedure as an agent
Book a demo with your own version of this procedure, and we'll show it running with each step logged.
Book a demo