This repository has been archived on 2026-07-08. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
identity-canon/research/commercial-identity/kyc-aml-commercial-identity-binding.md
tegwick d4a85ec04c Add commercial identity research corpus and binding concepts
Record deep research on commercial identity coupling across theory, law,
regulation, and software (KYC, LEI, DUNS, eIDAS, CRM). Introduce Commercial
Commitment, Legal Person, and Beneficial Owner to the canon model and document
the fluid-to-bound identity gradient in the conceptual model.
2026-06-21 20:53:18 +02:00

4.7 KiB

KYC AML and Commercial Identity Binding

Source Type

Regulatory framework synthesis. USA PATRIOT Act CIP, FinCEN KYC/AML, FATF digital identity guidance.

Domain

Financial regulation, customer identification, beneficial ownership, and ongoing commercial relationship monitoring.

Why This Source Matters

KYC/AML is where governments mandate commercial identity binding: institutions must verify who they transact with, retain evidence, and monitor behavior. This is the strongest practical force turning fluid identities into regulated, high-stakes counterparty records.

Key Concepts

  • KYC (Know Your Customer): policies ensuring institutions know customers and risks.
  • AML (Anti-Money Laundering): broader program preventing illicit finance.
  • CIP (Customer Identification Program): US mandate to verify identity before account opening.
  • CDD (Customer Due Diligence): risk assessment of customer relationship.
  • EDD (Enhanced Due Diligence): heightened review for high-risk customers.
  • Beneficial owner (BO): natural persons owning/controlling legal entity customers (historically 25% threshold; may be lowered for high risk).
  • Ongoing monitoring: transaction surveillance after onboarding.
  • Record retention: CIP records kept years after relationship ends.
  • Sanctions / PEP screening: compare identities against government lists.
  • Digital identity (FATF): guidance on digital ID assurance for KYC.

Relevant Terminology

Term Source meaning
KYC Know-your-customer compliance program.
CIP Customer identification at onboarding.
Beneficial owner Natural person behind legal entity customer.
PEP Politically exposed person (elevated risk).
Due diligence Risk-based identity and activity review.
Ongoing monitoring Continued scrutiny of customer activity.
Risk profile Customer risk classification.
FinCEN US Financial Crimes Enforcement Network.

Modeling Assumptions

  • Commercial relationship triggers identity rigor proportional to risk.
  • Legal entity customers require beneficial owner identification — natural persons bound to organization customers.
  • Identity verification is not one-time; monitoring continues across lifecycle.
  • Evidence must be retained even after account closure.
  • False identity has regulatory and criminal consequences — binding is external, not user preference.
  • Friction is accepted where commercial stakes require it.

Identity-Canon Implications

  • KYC onboarding creates Commercial Record + Commercial Commitment (regulated relationship) bound to Natural Person and/or Organization/Legal Entity.
  • Beneficial owner maps to Natural Person linked via Ownership or Representation to Organization customer.
  • CIP evidence maps to Evidence Source with Assurance Level.
  • Ongoing monitoring produces Evidence Source events affecting Lifecycle State and Trust Relationship.
  • Supports fluid-to-bound transition: anonymous lead → verified customer with retained proof.
  • Account (bank/login) is insufficient alone; KYC binds the counterparty.

Terminology Conflicts

  • Customer (KYC) vs. Customer (Stripe) vs. Customer (role): regulated counterparty vs. billing object vs. commercial role.
  • CIP customer vs. Account holder: verified party vs. access credential.
  • Digital identity vs. login identity: assurance-ranked ID vs. session user.

Candidate Canonical Mappings

KYC/AML concept Candidate canonical concept
Verified customer Commercial Record + Actor binding
CIP evidence Evidence Source
Beneficial owner Natural Person + Ownership Relationship
Risk profile Assurance Level + metadata on Commercial Relationship
EDD review Evidence Source (enhanced)
Sanctions hit Lifecycle State / Trust Relationship revocation
Transaction alert Evidence Source event
Record retention Lifecycle/archival policy on Commercial Record

Open Questions

  • Should Beneficial Owner be a canonical relationship role or Ownership subtype?
  • How to model BOI registry volatility in lifecycle without canon becoming legal advice?

References