Anti-Money Laundering (AML) & Know Your Customer (KYC) Policy
Last updated: May, 31,2025
1. Introduction
1.1. Purpose of the Policy
This Anti-Money Laundering (AML) and Know Your Customer (KYC) Policy ("Policy") outlines the
principles, procedures, and controls implemented by Boursia AI
(hereinafter referred to as "the Company," "we," "us," or "our") to prevent and detect money
laundering (ML) and terrorist financing (TF) activities. This Policy demonstrates our
unwavering commitment to complying with all applicable anti-money laundering and
counter-terrorist financing laws, regulations, and best practices in the jurisdictions where
we operate.
1.2. Scope of Application
This Policy applies to all employees, contractors, agents, and third-party service providers
of the Company, as well as to all products, services, and operations offered by the Company.
It covers all customer relationships, transactions, and interactions, regardless of the
channel (online, mobile, etc.).
1.3. Commitment to Compliance
The Company is committed to maintaining the highest standards of ethical conduct and
regulatory compliance. We recognize the critical role we play in combating financial crime
and are dedicated to implementing a robust AML/KYC framework that is proportionate to the
risks identified.
2. Definitions
To ensure clarity, the following key terms are defined:
- Anti-Money Laundering (AML): A set of procedures, laws, and regulations
designed to stop the practice of generating income through illegal actions.
- Know Your Customer (KYC): The process of identifying and verifying the
identity of clients. It involves understanding the nature of the client's activities and
assessing the risks associated with them.
- Money Laundering (ML): The process of disguising the origins of
illegally obtained money so that it appears to have come from a legitimate source.
Typically involves three stages: Placement, Layering, and Integration.
- Terrorist Financing (TF): The provision or collection of funds, by any
means, directly or indirectly, with the intention that they be used, or in the knowledge
that they are to be used, in whole or in part, to carry out any terrorist act.
- Politically Exposed Person (PEP): An individual who is or has been
entrusted with a prominent public function, or a family member or close associate of
such a person. This includes heads of state/government, senior politicians, judicial or
military officials, senior executives of state-owned corporations, and important party
officials.
- Ultimate Beneficial Owner (UBO): The natural person(s) who ultimately
owns or controls a customer and/or the natural person on whose behalf a transaction is
being conducted.
- Customer Due Diligence (CDD): The process of identifying and verifying
the identity of a customer and understanding the nature of their business.
- Enhanced Due Diligence (EDD): Additional measures taken for higher-risk
customers to mitigate the increased risk of money laundering or terrorist financing.
- Simplified Due Diligence (SDD): Reduced CDD measures applied to
lower-risk customers.
- Suspicious Transaction Report (STR): A report filed with the financial
intelligence unit (FIU) or relevant regulatory authority when a financial institution
suspects that a transaction may involve money laundering or terrorist financing.
3. Legal and Regulatory Framework
The Company adheres to the following key international and national AML/KYC laws and
regulations:
- Financial Action Task Force (FATF) Recommendations: We align our
policies and procedures with the globally recognized standards set by the FATF,
including its 40 Recommendations on AML and TF.
- Sanctions Lists: Compliance with sanctions imposed by international
bodies (UN, OFAC, EU) and national authorities.
The Company's AML/KYC framework will be regularly reviewed and updated to reflect any changes
in these laws and regulations.
4. AML Policy Principles
The Company's AML Policy is built upon the following core principles:
4.1. Risk-Based Approach (RBA)
We adopt a risk-based approach to AML/KYC, which means that the intensity of our customer due
diligence and ongoing monitoring efforts is proportionate to the money laundering and
terrorist financing risks identified. This approach allows us to allocate resources
effectively to areas of higher risk. Our RBA considers factors such as:
- Customer type (e.g., individual, corporate, trust)
- Geographic risk (e.g., high-risk jurisdictions)
- Product/service risk (e.g., high-value transactions, complex products)
- Delivery channel risk (e.g., non-face-to-face relationships)
4.2. Internal Controls
Robust internal controls are in place to ensure compliance with this Policy and relevant
regulations. These include:
- Clear roles and responsibilities for AML/KYC compliance.
- Segregation of duties to prevent conflicts of interest.
- Regular internal audits and independent reviews of the AML/KYC program.
- A dedicated Compliance Officer (see Section 9.1).
4.3. Record Keeping
All records related to customer identification, transactions, and suspicious activity reports
are maintained for a period of at least [e.g., five (5) years] after the
business relationship ends or the transaction is completed, as required by applicable laws.
4.4. Reporting Obligations
The Company is committed to reporting suspicious activities to the relevant financial
intelligence unit (FIU) or regulatory authority in accordance with legal requirements.
5. Know Your Customer (KYC) Policy
The KYC process is fundamental to our AML framework and involves several stages to identify
and verify the identity of our customers and understand their financial activities.
5.1. Customer Due Diligence (CDD)
All new customers undergo a comprehensive CDD process before establishing a business
relationship. This involves:
5.1.1. Identification and Verification of Individuals
- Collection of Information: Full legal name, date of birth, nationality,
residential address, unique identification number (Passport, national ID, Driver's licence), contact
details.
- Verification: Verification of identity using reliable, independent
source documents, data, or information (Government-issued photo ID, proof of
address like utility bills). For non-face-to-face relationships, additional measures are
taken to mitigate the higher risk.
5.1.2. Identification and Verification of Legal Entities (Companies, Trusts, Partnerships)
- Collection of Information: Legal name, registered address, principal
place of business, tax identification number, legal form, governing law, names of
directors/partners/trustees, and identification of the Ultimate Beneficial Owner (UBO).
- Verification: Verification using official documents (e.g., certificate
of incorporation, articles of association, partnership agreements, trust deeds), public
registers, and reliable independent sources. Identification and verification of UBOs and
individuals exercising control over the entity.
5.1.3. Purpose and Nature of Business Relationship
We will collect information on the purpose and intended nature of the business relationship
to ensure it is consistent with the customer's profile and expected activity.
5.2. Enhanced Due Diligence (EDD)
EDD measures are applied to customers identified as high-risk, including but not limited to:
- Politically Exposed Persons (PEPs): Comprehensive background checks,
source of wealth/funds verification, and senior management approval for establishing and
continuing the business relationship.
- Customers from High-Risk Jurisdictions: As identified by FATF or other
credible sources.
- Customers involved in High-Risk Activities: Such as cash-intensive
businesses, certain charities, or sectors prone to ML/TF.
- Complex or Opaque Structures: Entities with complex ownership
structures that obscure the UBO.
- Unusual or Large Transactions: Transactions that appear inconsistent
with the customer's known legitimate activities.
EDD measures may include:
- Obtaining additional identification information.
- Verifying the source of funds and source of wealth.
- Obtaining senior management approval for the business relationship.
- Increased ongoing monitoring of the business relationship.
5.3. Simplified Due Diligence (SDD)
SDD measures may be applied to customers identified as low-risk, where the risk of money
laundering or terrorist financing is minimal. This is determined based on a thorough risk
assessment. Examples may include:
- Publicly listed companies subject to regulatory disclosure requirements.
- Government agencies or public bodies.
SDD does not mean no due diligence; it means the extent of CDD is reduced based on the
assessed low risk.
5.4. Ongoing Monitoring
The Company conducts ongoing monitoring of business relationships to ensure that transactions
are consistent with our knowledge of the customer, their business, and risk profile. This
includes:
- Transaction Monitoring: Monitoring transactions for unusual patterns,
amounts, or types that deviate from expected activity.
- Periodic Reviews: Regularly reviewing customer information and
documentation to ensure it remains current and relevant, especially for higher-risk
customers.
- Ad-hoc Reviews: Reviewing customer profiles and activities when
significant changes occur (e.g., changes in ownership, significant increase in
transaction volume, negative media reports).
6. Reporting Obligations
6.1. Suspicious Transaction Reports (STRs)
Any employee who suspects that a transaction or activity may be related to money laundering
or terrorist financing must immediately report their suspicions to the Company's Compliance
Officer. The Compliance Officer will investigate the suspicion and, if warranted, file an
STR with the Regulatory Authority in accordance with legal requirements.
6.2. Prohibition of Tipping-Off
Employees are strictly prohibited from "tipping-off" customers or third parties that an STR
has been, or may be, filed. This is a criminal offense in many jurisdictions.
7. Training
All relevant employees receive regular and comprehensive training on AML/KYC policies and
procedures. This training covers:
- The latest ML/TF trends and typologies.
- The Company's internal AML/KYC policies and procedures.
- Legal and regulatory requirements.
- How to identify and report suspicious activities.
- The importance of data protection and privacy in AML/KYC.
Training is provided upon hiring and periodically thereafter, at least annually, or whenever
there are significant changes to laws, regulations, or the Company's policies.
8. Record Keeping
The Company maintains comprehensive records of all AML/KYC-related activities, including:
- Customer identification and verification documents.
- Records of all transactions.
- Records of risk assessments and due diligence performed.
- Internal suspicious activity reports and STRs filed.
- Training records.
- Audit reports.
These records are stored securely and are accessible to authorized personnel for a minimum
period of ten (10) years after the termination of the business
relationship or the completion of the transaction, as mandated by applicable laws.
9. Internal Controls and Audit
9.1. Compliance Officer
The Company has appointed a designated Compliance Officer responsible for overseeing the
implementation and effectiveness of the AML/KYC program. The Compliance Officer's
responsibilities include:
- Developing and updating the AML/KYC Policy and procedures.
- Monitoring compliance with AML/KYC laws and regulations.
- Receiving and investigating internal suspicious activity reports.
- Filing STRs with the relevant authorities.
- Providing AML/KYC training to employees.
- Acting as the primary point of contact for regulatory bodies concerning AML/KYC matters.
9.2. Internal Audit
The AML/KYC program is subject to regular independent internal audits to assess its
effectiveness, identify deficiencies, and recommend improvements. The audit findings and
recommendations are reported to senior management and the Board of Directors.
10. Sanctions Compliance
The Company is committed to complying with all applicable financial sanctions regimes imposed
by international bodies (UN, OFAC, EU) and national authorities. This includes:
- Screening customers and transactions against relevant sanctions lists (OFAC
Specially Designated Nationals and Blocked Persons List).
- Prohibiting business relationships and transactions with sanctioned individuals,
entities, or jurisdictions.
- Freezing assets and reporting blocked property as required by law.
11. Policy Review and Updates
This AML/KYC Policy will be reviewed and updated at least annually, or more frequently if
there are significant changes in:
- Applicable laws and regulations.
- The Company's business activities or products.
- Identified ML/TF risks.
- Technological advancements relevant to AML/KYC.
Any amendments to this Policy will be approved by senior management and communicated to all
relevant personnel.
Contact
For any questions regarding this Complaints Policy or to file a complaint, you can contact us
via:
📧 Email: support@boursiacapital.com