KYC Periodic Review Checklist: When Is It Complete?
Define what closes a KYC periodic review, how to handle unresolved exceptions, and what evidence should support the final decision.

KYC Periodic Review Checklist: When Is It Complete?
The dashboard says the investor review is complete. The ownership chart says something else. A holding company has changed; the supporting register extract is still outstanding, and the analyst has moved the next review date forward. The queue is shorter. The firm’s understanding of the investor has not improved.
A useful KYC periodic review checklist should prevent that outcome. Its final test is whether the evidence supports a current decision about the relationship. Uploads, screening runs, and reminders are activities within the review. The completion decision needs to explain what those activities established.
This is a practical concern behind the FCA’s customer due diligence findings published in April 2026. The regulator found unclear review cycles and cases where firms did not conduct periodic reviews in accordance with their own procedures. Its review included asset managers. The closure framework below is an operational recommendation for addressing that problem, rather than an FCA-prescribed checklist.
A completion date is a conclusion
A review brings together facts established at different times. An investor may have confirmed its address yesterday, supplied an ownership chart last quarter and explained its investment purpose several years earlier. Each item needs to be assessed for the question it answers and whether it remains reliable.
That does not mean demanding fresh copies of everything. A document can still support a current fact; a newly uploaded document can still fail to answer the question. The analyst’s job is to identify which facts matter, establish what changed and explain why the evidence is sufficient.
Consider a fictional corporate investor in a private credit fund. During review, it supplies a new director list and confirms that its investment strategy is unchanged. However, the new list identifies a parent company absent from the previous structure chart. The investor calls this an administrative reorganisation.
The review now has a specific unresolved issue: whether the reorganisation changes the ownership or control assessment. Updating the director field does not settle that issue. The reviewer needs a coherent account of the new structure and evidence appropriate to the entities involved.
This is where the broader KYC periodic review process becomes a decision discipline. The schedule opens the work. An evidenced conclusion closes it.
A KYC periodic review checklist for closure
Before sign-off, the reviewer should be able to answer six questions in ordinary language. They can sit inside the firm’s existing workflow rather than becoming another form that repeats information held elsewhere.
Is the relationship correctly identified? Confirm which investor, account or fund relationship the assessment covers. Where information is shared across funds, identify which conclusions are reusable and which depend on the particular relationship.
Are material changes understood? Explain changes to ownership, control, authorised representatives, investment purpose and other relevant risk factors. Record the evidence behind a “no material change” conclusion too. A blank change log gives the next reviewer little to rely on.
Have relevant screening findings been resolved? Record the disposition and reasoning for findings that affect this investor. The distinction between a name match and a true match belongs in the assessment, alongside the supporting identifiers. Steward’s guide to reducing false positives in AML screening explains why context matters here.
Does the risk assessment reflect the current evidence? Where a rating changes, show what caused it and what that changes operationally. Where it stays the same despite new information, explain why the new information does not alter the conclusion.
Are required measures and approvals complete? A recommendation to obtain further evidence is still work to do. A request for approval is still waiting for a decision. The closure record should distinguish the analyst’s assessment from any required authorisation.
Can the next reviewer reconstruct the result? Retain the evidence references, unresolved matters, decision-maker, decision date and future actions. Someone unfamiliar with the file should understand the conclusion without rebuilding the entire history from email.
These questions are a practical closure test, not a universal document list. The applicable requirements and the firm’s risk-based policy determine the actual work needed.
What an open exception means for sign-off
An exception needs a name precise enough to support a decision. “Documents outstanding” could mean a missing duplicate, an unreadable scan or an inability to identify the beneficial owner. Those situations have very different implications.
In the fictional review, a missing duplicate certificate might be an administrative follow-up if adequate verification evidence is already available elsewhere. An unexplained new parent company could undermine the ownership conclusion itself. Putting both in the same miscellaneous queue hides the difference.
A workable status model distinguishes reviews awaiting information, reviews awaiting approval and reviews completed with separately tracked administrative follow-up. These labels are suggested workflow choices. An exception approval cannot waive a legal requirement or turn missing mandatory due diligence into completed work.
For any permitted follow-up, write down what remains outstanding, why the current evidence supports the decision, who accepted that position and when the follow-up is due. Define what happens if it is not resolved. A due date without an escalation owner is only a reminder.
The analyst should also distinguish a relationship decision from a payment decision. Completing a periodic review does not provide blanket clearance for every future transaction. Equally, a pending review should have a defined consequence under the applicable rules and policy, rather than leaving operations to invent one when a distribution becomes urgent.
Repeated exceptions deserve a process response. If the same missing ownership evidence appears every cycle, investigate the collection and verification approach. Carrying the exception forward can turn it into the kind of KYC remediation debt that grows harder to explain each year.
Measure the quality of the decision
Completion counts are useful for capacity planning. Pair them with measures that reveal whether the underlying work is sound: reopened reviews, overdue material exceptions, approval reversals and findings from independent quality checks. These are suggested management indicators, not regulatory thresholds.
Sample a completed file by asking a reviewer outside the original case to explain it. Which facts changed? Which evidence resolved the questions? Why was the relationship continued? What happens next? Difficulty answering is a signal to improve the record, even when every task has a green status.
Steward’s case management supports periodic-review work after onboarding, keeping operational tasks within the same platform as the investor record. The useful outcome is a clear connection between outstanding work and the assessment that depends on it, with human oversight of the resulting decisions.
The strongest closing note is often short: the material change, the evidence reviewed, the risk conclusion, the approval and any defined follow-up. A periodic review is finished when that note is supported by the file. The date on the dashboard should follow the decision.
Related Insights

What should trigger a fresh look at an approved investor?
When approved investors change: triggering fresh KYC reviews without waiting for scheduled updates. Detect ownership shifts, funding changes and screening alerts.

What actually closes an AML remediation finding?
AML remediation findings require proof the underlying control works, not just task completion. Learn what regulators expect from effective remediation.

Source of wealth and source of funds in investor onboarding
Distinguish source of wealth from source of funds in investor onboarding. Learn why identifying money origins matters for effective KYC compliance.