Your KYC, automated end to end.
AI handles it. You decide.
The KYC and AML software that brings together onboarding, beneficial owners, PEP and sanctions screening, risk scoring, reviews and identity document renewal. Tailor-made, plugged into your software and run by Luxgap AI, the sovereign Luxembourg AI, which does the checking work in place of your teams.
Fictitious demonstration data
- EU sanctions
- UN sanctions
- OFAC (United States)
- United Kingdom
- SECO (Switzerland)
- Politically exposed persons
- Adverse media
- Luxembourg RCS and RBE
- GLEIF (LEI)
- European business registers
- Companies House
- ICIJ Offshore Leaks
- World-Check, Dow Jones, LexisNexis on your subscription
- AML/CFT Law of 12 November 2004
- CSSF Regulation 12-02
- RBE Law of 13 January 2019
- AMLR (EU) 2024/1624
- GDPR
- AI Act
- eIDAS
KYC is not complicated. It is tedious.
Copying a register extract, chasing a client for a proof of address, sorting through a hundred alerts for a namesake, tracing a chain of holdings back to a Jersey trust, preparing periodic reviews by hand: that is the daily life of your compliance teams. It is slow, repetitive, and that is where mistakes creep in.
Luxapps KYC hands that work to the machine. The tool collects, reads, checks, cross-checks and prepares. Your analysts focus on what takes human judgement: deciding.
All your KYC, in one tool.
Seven screens among many, on fictitious data. Click a screenshot to enlarge it.
An online journey your clients actually finish.
Individuals and companies build their file from their phone, in your colours, in French, English or German. The tool asks for the right documents for each profile, and nothing more.
- Identity verified with itsme, LuxTrust or a passport chip reading with a video selfie
- For a company, directors and articles from the RCS, beneficial owners from the RBE, from the company number alone
- Source of funds and qualified electronic signature in the same journey
- Automatic reminders as long as a document is missing
The ownership chain, traced back to people.
Holdings, funds, fiducies, trusts, nominees: the tool follows every branch, calculates direct and indirect holdings and identifies the beneficial owners, including those who control by other means and every party to a trust.
- SOPARFI, SCSp, SCA, RAIF, SICAV, foundations, non-profits, foreign trusts
- Automatic comparison with the RBE filing, mismatches flagged
- Ownership chart exported as is into the file
- Every link is sourced: register, deed, articles
Alerts already analysed, not namesakes to sort out.
Clients and beneficial owners are continuously checked against sanctions lists, politically exposed persons and the press. When a list changes, your whole portfolio is screened again. Luxgap AI pre-analyses every match and explains why it is, or is not, the right person.
- Phonetic matching and transliteration of names
- Reasoned, sourced proposal, human decision required
- Your analysts' past decisions are reused
- Immediate freeze and escalation when a match is confirmed
Every document read, checked and cross-checked.
Register extracts, articles, identity documents, proofs of address, statements: Luxgap AI reads them, extracts the data and cross-checks them with each other and with the registers. It then drafts the KYC memo, which you review and approve.
- Expiry date read from every identity document
- Inconsistencies flagged: address, signatory, capital, dates
- Expired or missing document: request sent to the client
- KYC memo drafted, ready to approve
Identity documents renew without you.
Luxapps KYC tracks the expiry date of every identity document: those of your clients, their directors, their beneficial owners and their proxies. Before the deadline, it asks the client to renew it from their mobile app: the chip read or a photo, a selfie, and it is done. Luxgap AI checks the new document and updates the file. Where a typical tool merely flags an expired document, Luxapps KYC gets it replaced.
- Request sent to the client at the notice you set, then automatic reminders
- New document checked by Luxgap AI: chip, MRZ, photo, consistency with the file
- File, CRM and review date updated without re-keying
- Your teams are only involved if something is wrong or the client does not reply
A score you can explain to your supervisor.
The score applies your acceptance policy, not a black box. Every factor shows its contribution, and Luxgap AI sums it up in two sentences. Enhanced due diligence triggers by itself when it is required.
- Country, structure, sector, channel, PEP, sanctions, media, behaviour
- Grid and weightings set to your rules, versioned
- Enhanced due diligence measures listed and tracked
- Review frequency calculated from the risk
Reviews prepared, a file always ready for the audit.
Thirty days before the due date, the tool prepares the periodic review: it reruns the screening, asks the client for the documents to renew and shows you what has changed. Every action is logged, timestamped and exportable.
- Complete audit trail: who, when, what, why
- File exported as a signed PDF for the auditor or the CSSF
- goAML suspicious activity report pre-filled for the FIU
- Retention five years after the end of the relationship, extendable, then logged deletion
Everything a KYC tool must do. No extra module to buy.
Individuals and legal entities
Individuals, companies, funds, foundations, trusts: one file, one tool.
Identity verification
itsme, LuxTrust, passport chip, video selfie and liveness check.
Know your business
RCS, RBE and foreign registers queried from a single number.
Sanctions and PEP
EU, UN, OFAC, UK and Swiss lists, exposed persons and their relatives.
Adverse media
Luxembourg and international press, summarised by AI, sources cited.
Enhanced due diligence
Required measures listed, senior approval tracked.
Periodic reviews
Frequency based on risk, automatic preparation, client reminders.
Ongoing monitoring
Portfolio rechecked at every list update.
Reports to the FIU
goAML suspicious activity report pre-filled, approved by you.
Approval workflow
Front office, compliance officer (RC), responsible manager (RR), management: the CSSF 12-02 workflow.
Audit trail and exports
Everything is timestamped, signed and exportable for the auditor.
Dashboards
Indicators for management and annual report prepared.
GDPR
Retention, deletion and data subject rights handled by the tool.
API and webhooks
Everything the tool does is available to your software.
Documents always valid
Expiry dates tracked, document renewed by the client on their phone.
Multilingual
Interface and client journey in French, English and German.
AI runs your KYC in place of your teams. They keep the decision.
Luxapps KYC is connected to Luxgap AI, the sovereign Luxembourg AI: open-source models hosted and operated by Luxgap, on its own servers in Luxembourg. It takes on the checking work end to end, like an analyst who never tires, and only brings you what needs a decision, with its sources.
What the AI does
- Read every document and extract its data
- Cross-check documents with each other and with the registers
- Pre-analyse screening alerts and rule out namesakes
- Trace ownership chains from the deeds
- Run a deep investigation when the usual sources are not enough
- Draft the KYC memo and prepare periodic reviews
- Chase clients for missing documents
- Get identity documents renewed before they expire and check the new ones
- Pre-fill the goAML suspicious activity report
What you keep
- The decision: accept, reject, escalate.
- Control: every AI proposal cites its sources and waits for your approval.
- The rules: acceptance policy, thresholds, approval workflow.
No adverse decision is ever taken by the AI alone, in line with Article 22 of the GDPR.
Your most sensitive files, protected accordingly.
Identity documents, wealth, beneficial owners: a leaking KYC file is a serious failure. Luxapps KYC is secured by Luxgap, the Luxembourg cybersecurity and compliance expert, and monitored day and night.
Data in Luxembourg
Files hosted by LuxOps, AI on Luxgap servers, both in Luxembourg. No US provider: out of reach of the CLOUD Act.
Encryption throughout
TLS 1.3 between your computers, the mobile app and the platform; documents and files encrypted at rest.
Controlled access
Mandatory two-factor authentication, Microsoft Entra ID sign-in, role-based rights: everyone only sees their own files.
Monitored 24/7
LuxGap SOC, the sovereign Luxgap security operations centre, detects and handles incidents day and night.
Code under control
Every change to the software is reviewed and analysed before it goes live, then monitored continuously.
Everything is logged
Every action, every AI proposal and every decision is logged and timestamped, ready for the audit.
Plugged into your tools, not the other way round.
Your KYC does not live on its own. We plug it into the software you already use, both ways: your teams re-key nothing and every tool stays up to date. The connection is built and tested during the project, and included in the price.
Your tools
KYC
Open API, webhooks, imports and exports, custom automations.
- REST API
- Webhooks
- SSO
Sources and authorities
Files, statuses, scores and documents, through a documented API (OpenAPI).
File approved, alert, expired document, review due: every event is sent in real time.
Scheduled imports and exports in CSV, Excel or XML, dropped over SFTP.
Documents filed in SharePoint, alerts in Teams, requests sent from Outlook.
New client in your CRM → KYC file opened, onboarding link sent to the client.
Identity card expiring in 60 days → request on the client's phone, new document checked, file and CRM updated.
Match confirmed → Teams message to the compliance officer, account frozen in your core banking system.
Review due in 30 days → review prepared, email to the relationship manager, documents requested from the client.
Built around your procedure.
Luxapps KYC is not an off-the-shelf product you bend with workarounds. We start from your procedure and your acceptance policy, and we build the tool around them, on the proven foundation of our platforms.
Needs assessment
Your procedures, your acceptance policy, your client types and your tools. You receive a mock-up and a price.
Configuration and integrations
Risk grid, approval workflow, client journey in your colours, connection to your software.
Migration
Your current files and their documents are migrated, read by AI and brought up to date.
Go-live
Training for your teams, support in the first weeks, then changes as your needs evolve.
Always up to date. Sanctions lists synchronised continuously, regulatory changes built in by our teams, from the next CSSF circular to the 2027 AMLR.
A price that follows your files. Not your users, not your checks.
Charging per user, per name checked or per screening makes the most diligent firm pay the most. Luxapps KYC is priced on the number of client files you follow, in tiers: within your tier, everything else is unlimited.
- Per user
- Per name checked
- Per screening
- Per file followed, in tiers
- A company and its five beneficial owners: one file, not six names
- A closed file no longer counts
Fixed within your tier. Unlimited users, screenings and checks.
- Unlimited users, every feature
- Unlimited PEP, sanctions and media screenings, lists always up to date
- Luxgap AI built in, with no meter
- Identity documents renewed by your clients on mobile
- Integration with your tools
- Hosting in Luxembourg, security and 24/7 monitoring by Luxgap
- Regulatory updates, platform enhancements and support
A base price for the needs assessment, then the monthly subscription of the tier that matches your portfolio. You move up a tier when your portfolio grows, never because you check more. Annual commitment, but you can stop whenever you want and you get your data back. Commercial databases (World-Check, Dow Jones, LexisNexis) stay on your own subscription if you have one.
For every obliged entity under anti-money laundering law.
Luxapps develops the tool; Luxgap, the Luxembourg compliance expert, secures it and makes sure it stays compliant; LuxOps hosts it in Luxembourg. Three teams from the same group, all in Luxembourg.
Frequently asked questions.
Many off-the-shelf tools stop at checking an identity document and querying lists. They know little about the Luxembourg Register of Beneficial Owners and Luxembourg structures, ignore your procedure and are priced per user, per name checked or per screening. Luxapps KYC starts from your procedure, covers the whole KYC cycle, plugs into your software and is priced on the number of files you follow.
The tool knows the expiry date of every document. Before the deadline, at the notice you set, the client receives a request in their mobile app, with automatic reminders. They read the chip of their new document or take a photo of it, take a selfie, and Luxgap AI checks the document before updating the file. Your teams are only involved if something is wrong or the client does not reply.
Through a documented REST API and webhooks for software that supports them, through scheduled file exchanges (CSV, Excel, XML) over SFTP for the rest, and through Microsoft 365 for SharePoint, Teams and Outlook. Data flows both ways: client record, KYC status, risk level, review date, documents. We build and test the connection during the project, and it is included in the price.
The sanctions lists of the EU, the UN, the United States (OFAC), the United Kingdom and Switzerland, politically exposed persons, the press, the Luxembourg RCS and RBE, the global LEI register, European business registers and Companies House. If you have a World-Check, Dow Jones or LexisNexis subscription, the tool uses it too.
Lists are synchronised continuously and every update reruns the screening of your whole portfolio. Regulatory changes, such as the EU AMLR applying from 10 July 2027, are built in by our teams and included in the subscription.
No. Luxgap AI proposes, with its sources, and a person in your team decides. No adverse decision is automated, in line with Article 22 of the GDPR. Proposals and decisions are recorded in the audit trail.
Your files are hosted in Luxembourg by LuxOps, and Luxgap AI runs on Luxgap servers in Luxembourg: nothing is handed to OpenAI or to any US provider, out of reach of the CLOUD Act. LuxGap SOC monitors the platform around the clock. Only the queries to the services you enable (commercial databases, foreign registers, identity verification) send them the data they need. For firms bound by professional secrecy, the tool and the model can be installed on your own infrastructure.
A base price for the needs assessment, then a fixed monthly fee based on the number of active client files you follow, in tiers. Users, screenings, AI checks and document renewals are unlimited within your tier, and a closed file no longer counts. Annual commitment, but you can stop whenever you want and you get your data back.
It depends on your integrations and on the number of files to migrate. The needs assessment sets the timeline, step by step, before the subscription.
Yes. Your files and documents are imported and read by Luxgap AI. Every incomplete or outdated file is flagged, with the list of documents to request.
See Luxapps KYC on your own cases.
Thirty minutes to show you the tool on files like yours, and give you a ballpark of your price. Reply within one business day.
- Demo online or at your offices
- Price based on your number of files, given after the needs assessment
- No commitment