KYC & Compliance Requirements

Understand which KYC or KYB model applies to your Verto integration, what sub-account data is required, and how compliance state affects operational access.

KYC & Compliance Requirements

Use this page to understand which KYC or KYB model applies to your integration, what data Verto requires for sub-accounts, and when compliance state blocks operational actions like wallet creation, account issuance, or payouts.

[!IMPORTANT] General Prerequisite: Parent Entity Onboarding Regardless of model, the Parent Entity (you) must complete full Verto compliance clearance, pass standard onboarding requirements, and complete platform registration before any Atlas sub-accounts can be activated.


✅ Before you review KYC requirements

Answer these questions first:

  1. Are you integrating as Atlas for Fintech or Atlas for Platform?
  2. Who owns the end-customer compliance process: your business or Verto?
  3. Do you need downstream customers to receive funds, hold balances, or send payouts?
  4. Are you ready to store and track compliance state for each sub-account in your own system?

⚖️ Model Comparison

🏦 Atlas for Fintech🏢 Atlas for Platform
FrameworkReliance ModelNon-Reliance Model
Designed forRegulated Financial InstitutionsNon-financial businesses (SaaS, E-commerce, Payroll) & White-Label Brokers
Who does KYC?The FI (you) — Verto relies on your controlsVerto — Absorbs full regulatory liability
Sub-accounts classified asUnder your umbrellaDirect "Referred Clients" of Verto
KYC TiersLevel 0, 1, or 2 (based on assessment)Level 3 (always)

This model decision affects onboarding, operational approvals, and which downstream flows you can activate in production.


🏦 Atlas for Fintech — The Reliance Model

Verto places regulatory reliance on your internal compliance controls. Before activation, all Fintech partners must complete a Downstream Service Assessment to determine which KYC tier applies.

If you operate in this model, the quality of your own compliance program determines how much sub-account documentation Verto still requires.

🔍 The Downstream Service Assessment

Verto evaluates your compliance infrastructure across:

  • AML/FinCrime programme maturity
  • Quality and independence of MLRO function
  • Presence of automated transaction monitoring
  • External audit history (Tier 1 consulting firm)

Based on the outcome, you are assigned one of three KYC tiers:

🟢 Level 0 KYC — Highest Reliance

Eligibility: Highly regulated Financial Institutions that have passed Verto's rigorous Nested Assessment AND possess a mandatory FinCrime/AML Audit from a reputable Tier 1 consulting/audit firm.

Requirements (per sub-account):

  • Company Name
  • Registered Address
  • Industry / Business Type

Monitoring: Quarterly reviews by Verto Compliance.


🟡 Level 1 KYC — Standard Reliance

Eligibility: Highly regulated MSBs, PSPs, and Brokers with a strong, dedicated compliance function (independent MLRO, automated transaction monitoring), but lacking a Tier 1 audit report.

Requirements (per sub-account):

  • All Level 0 information, plus:
  • Certificate of Incorporation (CoI)
  • Ultimate Beneficial Owner (UBO) IDs
  • Power of Attorney (PoA) where applicable

Monitoring: Ad-hoc checks by Verto Compliance.


🔴 Level 2 KYC — Limited Reliance

Eligibility: Regulated MSBs, PSPs, and Brokers with developing compliance processes.

Requirements (per sub-account):

  • All Level 1 requirements, plus:
  • Random sample of sub-accounts reviewed by Verto Compliance for ongoing monitoring.

Monitoring: Ongoing random sampling.


[!CAUTION] Downstream Assessment Failure If your institution fails the Downstream Service Assessment (e.g., lacks an AML audit, inadequate compliance infrastructure, or no independent MLRO), you are restricted from the Reliance Model. You will be routed to the Atlas for Platform model (Level 3 KYC) instead.


🏢 Atlas for Platform — The Non-Reliance Model

All Platform sub-accounts are subject to KYC Level 3. Verto absorbs the full regulatory liability and treats every sub-account as a direct "Referred Client."

In this model, a sub-account should not be treated as operationally ready until Verto has completed the required review and approval steps.

📋 Level 3 KYC — Full Direct KYC

Applies to: All Atlas for Platform sub-accounts without exception.

Requirements (per sub-account):

RequirementDetail
Full KYC DocumentationComplete KYC details and documents for every sub-account, exactly as if Verto were onboarding the end-user directly.
Compliance ReviewEvery sub-account must be fully reviewed and approved by the Verto Compliance team before activation.
T&C AcceptanceA company director from the end-client must formally accept Verto's Terms & Conditions and the Partner Access Agreement via electronic signature.

📊 KYC Tier Matrix

LevelModelEligibilityData CollectedMonitoring
Level 0FintechTier 1 AML Audit + Nested Assessment passCompany Name, Address, IndustryQuarterly
Level 1FintechStrong MLRO + TM, no Tier 1 auditLevel 0 + CoI, UBO IDs, PoAsAd-hoc
Level 2FintechDeveloping complianceLevel 1 + Verto samplingOngoing random
Level 3PlatformAll Platform partnersFull KYC docs + T&C signatureContinuous

🔄 Platform Sub-Account Onboarding Workflow

For Atlas for Platform partners, the activation flow follows a strict 4-stage pipeline:

sequenceDiagram
    participant P as Parent Account (You)
    participant V as Verto Compliance
    participant D as End-Client Director

    P->>V: 1. Submit sub-account KYC info + documents (via API or Dashboard)
    V-->>P: Status: KYC Pending
    V->>V: 2. Verto Compliance reviews documents
    V-->>P: Status: T&C Pending (KYC Approved)
    P->>D: 3. Trigger T&C email (select Director from dropdown)
    D->>V: 4. Director signs Partner Access Agreement + T&Cs
    V-->>P: Status: Approved — sub-account is now ACTIVE
StageActionStatus
1. Document SubmissionParent submits KYC via API or Verto dashboardkyc_pending
2. Compliance ReviewVerto Compliance reviews all documentsIn Review
3. T&C TriggerParent selects Director; automated email senttc_pending
4. Director Sign-offDirector accepts T&Cs via electronic signatureapproved / ACTIVE

[!NOTE] API vs. Manual Submission: For high-volume platforms, Verto recommends API-based document submission for scale. Manual submission via the Verto dashboard is available for lower-volume onboarding.

Operational impact of compliance state

Use compliance state as a hard operational control in your application:

Compliance stateWhat it means for your app
Pending / In reviewDo not allow wallet creation, account issuance, or payout execution for that customer.
T&C pendingKeep the customer in onboarding until the required sign-off is complete.
Approved / ActiveCustomer can proceed into wallet, receive, FX, and payout flows that your account is approved to use.
Rejected / SuspendedBlock operational actions and surface a remediation path to your internal ops or compliance team.

Troubleshooting

IssueWhat to check
Sub-account never becomes activeConfirm all required documents were submitted and any T&C acceptance step has been completed by the correct party.
Wallet or account creation is blockedCheck whether the sub-account is still pending review or has not reached an approved operational state.
Platform onboarding does not scaleUse API-based document submission and store compliance status changes in your own system for automated follow-up.

🎯 Next Steps

Sub-Accounts Guide →
Create and manage downstream customer contexts.
Go-Live Requirements →
Review parent-account compliance prerequisites and production approvals.