An investor folder contains a passport, company extract, ownership chart and signed questionnaire. Every expected document appears to be there. Yet the chart names a different parent from the questionnaire, the verification note refers to an older company name, and nobody can explain which version the assessment relied on.

That is a useful starting point for assessing AMLR customer due diligence requirements. The question is whether the file supports the required understanding of the investor. Counting documents will not reveal the contradictions between them.

The EU Anti-Money Laundering Regulation, Regulation (EU) 2024/1624, generally applies from 10 July 2027. The CSSF’s annual report confirms that timetable. AMLA’s 2026 work on customer due diligence adds an immediate preparation task: understand the requirements and test how existing files support them.

Map AMLR customer due diligence requirements to the file

Start with three distinct layers. The regulation establishes obligations. Technical standards provide further detail through the relevant adoption process. The firm then translates the applicable requirements into procedures, evidence requests and records.

AMLA’s CDD consultation ran from 9 February to 8 May 2026. At the time of this article’s source check, its page marked the consultation closed and said results would follow. The consultation text should therefore be identified as a proposal, rather than cited as an adopted requirement. A consultation deadline does not establish an adoption date.

AMLA explains that its draft standards under Article 28(1) address information for standard, simplified and enhanced due diligence, as well as verification sources and electronic identification. That makes the work relevant to both the fields a firm collects and how it supports them.

For the broader institutional background, see what Europe’s new AML regime means for funds. Here, the focus is narrower: a practical file assessment for an EU obliged entity reviewing a corporate investor. Scope and evidence requirements must be mapped to the actual relationship and applicable rules.

Read the investor file as a connected account

Consider a fictional holding company investing in a private equity fund. Its questionnaire describes it as a family investment vehicle. The registration evidence uses its former name, the bank account uses the new name, and the ownership chart contains an intermediate company missing from the earlier review.

The first task is to establish a coherent identity. Article 22 of the AMLR specifies legal-entity identification information, including legal form and name, address information, legal representatives and certain identifiers where available. It also addresses nominee shareholders and directors. These are identity requirements; they do not make a document containing a company name sufficient verification by itself.

In the example, connect the former and current names to the same legal entity using appropriate evidence. Avoid creating two investor profiles simply because documents use different names. Equally, do not merge two companies because the names look similar.

Then explain the structure. The intermediate company may be an ordinary part of the family's arrangements. Its role still needs to be understood. Identify the relationship between each relevant entity and the people behind the investment, rather than leaving the reviewer to infer it from a diagram.

This is why company verification differs from individual KYC. Establishing that a company exists is one part of understanding the investor. It does not, by itself, explain who acts for it or how the structure connects to the investment.

Finally, read the questionnaire as an account to be tested. Does its description agree with the documents and the proposed funding route? If the investor says it invests family wealth, what does that mean for this vehicle and this subscription? Those questions turn a folder into an assessment.

Map the evidence before requesting more documents

Create a requirement-to-evidence map for the sample. The legal mapping should come from the firm's applicable-rule assessment. The following layout is a suggested working method, not a complete AMLR schedule.

Separate missing information from information that exists but is unreliable or inconsistent. A missing identifier may need a collection task. An unresolved contradiction needs analysis. An old file reference may need a record correction after confirming which evidence the reviewer actually used.

This distinction prevents unnecessary investor outreach. If the answer is already supported elsewhere in the file, connect it to the assessment. If a source is insufficient, explain the specific gap in the request. “Please refresh your KYC” is a poor description of a question about one intermediate holding company.

Keep provenance visible: where a fact came from, when it was checked, and what conclusion it supports. Preserve enough history to understand changes without treating every historic version as current. The reviewer should be able to distinguish a customer assertion from independently checked information.

Turn the sample into a readiness programme

Test a deliberately varied set of files: a straightforward company, a layered structure, an investor with changed circumstances and a file that has not been substantively revisited for some time. The purpose is to discover different failure patterns, rather than calculate a reassuring average from easy cases.

For each finding, assign the right type of response. A field missing across the book suggests a collection or configuration change. Repeated ownership contradictions suggest a verification problem. Assessments that cannot be reconstructed suggest a recordkeeping and review problem. Each needs an owner and a clear definition of resolution.

Connect that work to the ongoing KYC periodic review process. Readiness should improve the way future changes are handled, as well as repair the sample files. Otherwise, the same gaps will begin accumulating again while remediation is still under way.

Steward is an AI-first platform for investment services, bringing investor information, document review and screening into one onboarding and review environment. The useful operating principle is that evidence stays connected to the investor assessment and outstanding work remains visible to the people responsible for resolving it.

An AMLR readiness programme becomes concrete when a reviewer can open a file and explain the investor from the evidence it contains. The strongest preparation starts there: identify the requirement, locate its support, resolve the contradictions and make the resulting decision understandable.