Kyb Ubo Regulator Registers

---
tcaml_version: "1.8.1"
document_type: "skill"
skill_type: "source"
skill_id: "kyb-ubo-regulator-registers"
title: "Source Skill: KYB, UBO and Regulator Registers"
risk_area:
  - kyb
  - ubo
human_review_required: true
final_decision_allowed: false
paid_source_boundary: true
source_access_required: "client_valid_access"
private_configuration_required_for:
  - client-specific Implementation Profiles
  - private source configuration
  - evidence rules
  - MLRO escalation logic
---
# Source Skill: KYB, UBO and Regulator Registers


This source skill describes how an AML agent should work with the **KYB, UBO and regulator registers** source category inside a client-approved implementation profile.

It is a source workflow, not a bundled data subscription. It does not include credentials, paid database access, provider-specific bypass instructions or proprietary source content.

## Purpose

Guide company, ownership, legal entity identifier, regulator, insolvency, enforcement and debarment source workflows.

## Category options

- Company registries
- UBO and ownership intelligence
- LEI and legal entity identifiers
- Financial licence and regulator registers
- Insolvency, enforcement and debarment registers
- Other

## Used for

- KYB review
- UBO / ownership review
- bank counterparty screening
- supplier review
- counterparty screening
- client onboarding

## Required inputs

Collect the fields required by the operation workflow and the implementation profile. Depending on the subject, this may include:

- case ID;
- subject type;
- full legal name or entity name;
- aliases or trading names;
- date of birth or incorporation date where available;
- nationality, residence, incorporation jurisdiction or operating jurisdiction;
- registration number, licence number, LEI, SWIFT/BIC, domain, IP address, goods code, wallet address or other source-specific identifier;
- source list and evidence requirements defined by the implementation profile.

## Workflow

1. Load the applicable operation workflow and implementation profile.
2. Confirm the selected source is approved for this client, case type and jurisdiction.
3. Confirm the client has valid access where the source is commercial, licensed or subscription-based.
4. Run the source check using the permitted browser, API, registry, database, search or evidence workflow.
5. Capture both positive/potential-result and negative/no-material-result evidence where policy requires it.
6. Record query terms, filters, source URL/reference, access date/time, result summary and limitations.
7. Compare identifiers without relying on name similarity alone.
8. Label evidence quality: official source, licensed source, public search, client-provided, unverified public source or missing/inaccessible.
9. Route red flags, ambiguity, source conflicts or unavailable required sources to MLRO / compliance review.

## Evidence requirements

Record:

- source category;
- exact source used;
- access method if relevant;
- query terms and filters;
- source URL, record ID or source reference;
- screening date/time;
- result status: no material result, possible match, confirmed source hit, unclear, missing/inaccessible;
- identifiers compared;
- screenshot/PDF/export evidence reference;
- limitations and confidence notes;
- escalation reason if any.

## Important notes

- Separate official registry evidence from commercial ownership intelligence and client-provided documents.
- Record missing ownership layers and unresolved control links.
- Do not make final legal UBO determinations without human review.

## Red flag triggers

Route to MLRO / compliance review when any of the following appear:

- company status mismatch
- unclear or circular ownership
- missing UBO/control layer
- licence status mismatch
- insolvency, enforcement or debarment signal
- contradiction between client statement and source evidence

## Agent must not

- treat any source result as a final compliance decision;
- approve or reject a customer, counterparty, supplier, employee or transaction;
- hide uncertainty or omit missing source limitations;
- imply that a paid source is included when it is only a configurable client-approved source;
- bypass logins, licensing, MFA, access controls or source terms;
- disclose internal AML concerns to the checked subject.