Ongoing Monitoring

Introduction

Signicat's Ongoing Monitoring service enables continuous tracking of entities (persons or organisations) for any changes in their demographic, financial or screening profiles. It ensures your system remains compliant with regulations by performing Enhanced Due Diligence (EDD) whenever a change is detected.

Ongoing Monitoring allows you to automate monitoring, minimise regulatory risk and stay updated with the latest verified entity information from trusted data sources.

Perpetual KYC

Ongoing monitoring is also referred to as perpetual KYC, as it replaces periodic static data checks with continuous tracking of customer demographics, events, behaviors and risk profiles. This approach allows you to automatically trigger Enhanced Due Diligence (EDD) based on real-time events such as:

Address updates
Changes in industry or ownership
Sanctions matches
PEP status changes
Adverse media alerts

By constantly updating risk profiles as changes occur, you can ensure that Customer Due Diligence (CDD) and EDD are performed exactly when needed, keeping your information accurate throughout the entire customer lifecycle.

Perpetual KYC consists of five main steps:

Identifying entities
Implementing monitoring
Gathering insights
Performing Enhanced Due Diligence (EDD)
Protecting reputation

This process of perpetual KYC is illustrated in the following diagram.

Perpetual KYC process

Why use Ongoing Monitoring?

Know Your Customer/Business (KYC/B) processes often rely on snapshots in time, which can quickly become obsolete. To address this, the AMLR 2027 framework requires continuous due diligence through ongoing monitoring.
Traditional KYC is calendar-driven (means performed at fixed time intervals, usually once a year), often leaving risk gaps and requiring heavy manual effort. Perpetual KYC is proactive, with real-time alerts, automated workflows and a focus on relevant changes for quicker threat detection.
One-time KYC/B) checks do not account for later changes to customer profiles, such as new sanctions or changes in ownership or financial status for both persons or organisations. Ongoing Monitoring solves this by continuously tracking customer profiles for specific changes. When an update is identified, it generates an alert, allowing you to maintain an accurate and compliant view of your customers.

Features

Key features of our Ongoing Monitoring product include:

Automated data orchestration and daily checks: Our system performs daily change checks against global registries and third-party providers. This eliminates the "snapshot" limitation of traditional KYC, making sure you stay up to date on ownership, legal status, roles, sanctions and financials without manual intervention.
Intelligent delta detection and normalisation: Using automated delta detection, the platform pinpoints discrepancies between historical and current data states. Regardless of the source's underlying format, our normalised schema mapping translates data into a single view, providing clarity across your entire entity ecosystem.
Real-time event alerting: By alerting on events, you receive notifications the moment a change is verified. Your downstream systems can listen to webhooks for these change detections, allowing for automated responses and seamless integration into your existing tech stack.
Targeted EDD and risk mitigation: By triggering Enhanced Due Diligence (EDD) at the right time, the system ensures resources are focused on actionable risk events. This helps reduce exposure to regulatory and reputational threats.
Regulatory integrity and audit-ready logs: Our Ongoing Monitoring solution keeps customer and partner data compliant with global regulations (AML, KYC, KYB). Every change, notification and subsequent action is captured in audit-ready logs, which provide a timestamped trail for regulatory reporting and internal governance.

Use cases

Here are some use case examples to better understand how you can use Ongoing Monitoring for both persons and organisations:

For persons

Individual profiles require sensitivity and precision. We monitor:

Vital statistics: Changes in name (marriage/legal change) or date of death notifications to prevent identity fraud.
Locality: Current residential address updates and changes in residency status.
Risk and protection: Changes in protected status (e.g., PEP designation, sanctions list additions or specific legal protections).

For organisations

Monitoring corporate structures is vital for uncovering hidden risks or "shell" shifts. We track:

Identity and status: Changes in legal name, legal status (e.g., active to insolvent) and industry/SIC codes.
Ownership and control: Shifts in Ultimate Beneficial Ownership (UBO), significant shareholding changes and board/role transitions.
Risk indicators: Updates to registered addresses and fluctuations in credit ratings that may signal financial instability or fraud risk. Sanction list additions can also be detected as a result of this change.

Process flow

The following steps outline the complete lifecycle of customer due diligence.

The process begins when you onboard a new customer and perform the initial KYC/KYB checks. Based on the assessed risk level, the system then applies either standard or enhanced monitoring. From that point on, our service continuously tracks the customer's profile for any significant changes, triggering an alert for your team to investigate if a potential risk is detected.

Profile creation: The customer initiates a new monitoring profile.
Entity addition: Persons or organisations are added to the profile.
Data distribution: The system sends these entities to multiple data sources for updates.
Data collection: Data sources provide updated information on the entities (depending on the source).
Change detection: The system's change detection logic identifies changes in the collected data.
Database update: The database is updated with the new information.
Events: The system triggers events for the changes created.
Latest snapshot: The API retrieves the latest snapshot with an up-to-date view of the organisation's data.