AML
Anti-Money Laundering. The set of regulations and processes used to detect and report suspicious financial activity. AML programs sit on top of KYC and include sanctions and PEP screening, transaction monitoring, and SAR filing.
For identity teams the practical link is that AML obligations set the evidence bar for onboarding: how strong the proofing has to be, how long records are retained, and what has to be re-verified when risk changes. That makes AML a design constraint on the signup flow rather than a back-office concern, and it is why regulated CIAM builds cannot simply optimize for conversion.
See also: KYC, identity verification, PSD2, identity verification vendors
Related on Start with Identity
- BlogHow to vet a national digital ID before you build KYC on it
Not every national ID is equally trustworthy or equally easy to verify. A practical seven-point checklist for evaluating a country's digital ID before you wire
- GuideCustomer Identity Verification Guide: KYC, Document Verification, and Fraud Prevention
Implement customer identity verification with KYC processes, document verification, liveness detection, progressive profiling, and fraud prevention strategies.
- GlossaryFedRAMP
Federal Risk and Authorization Management Program. The US government cloud services authorization framework. Levels: Low, Moderate, High. Required for SaaS used
- GlossaryGDPR
General Data Protection Regulation. EU privacy law in force since 2018. Establishes user rights (access, rectification, erasure, portability) and obligations on
- GuideGDPR for identity systems: what the regulation actually requires
GDPR confers user rights (access, rectification, erasure, portability, object). Identity systems are usually where those requests are routed because they hold t
- GlossaryHIPAA
Health Insurance Portability and Accountability Act. US law governing the privacy and security of protected health information. Identity vendors serving healthc