Sign a KYC file / get in touch online
Customer knowledge and relationship (KYC) file between a taxable institution (bank, insurer, fintech, payment institution, broker) and its customer, electronically signed with strong identification.
- Legal framework
- The Commission shall be assisted by the Member States in the implementation of this Regulation.
- Signature level
- AES eIDAS recommended
- Legal archives
- 5 years after the relationship
What's the connection between the KYC and the KYC?
The entry into relationship is the process by which an institution subject to the LCB-FT (bank, insurer, fintech, payment institution, broker) establishes a business relationship with a new customer. Article L561-5 of the Monetary and Financial Code requires, before entering into any relationship, to identify the customer and verify his identity on presentation of a written document proving it. Article L561-6 then requires constant vigilance throughout the relationship, with collection and updating of information on the subject and nature of the business relationship. KYC (Know Your Customer) brings together these diligence: strong identity, actual beneficiary, origin of funds, risk profile. The advanced electronic signature + SMS allows the customer to accurately and accurately obtain consent from each customer, satisfying the requirements of the DSP2.
Why dematerialize the relationship?
Identification of the vehicle
Article L561-5 requires the verification of identity on documentary evidence. Certyneo combines the upload of the identity document, its verification, and a signature authenticated by OTP double-channel SMS compatible with strong customer authentication (SCA) of the DSP2.
Collection of time-stamped consent
Each piece of the KYC file (customer knowledge form, declaration of beneficial owner, consent to data processing) is signed with a qualified time stamp proving the exact date of the collection objectable in ACPR control or in support of a TRACFIN declaration.
Constant vigilance mapped
Article L561-6 requires constant vigilance and updating of the file.Certyneo keeps each signed version with its audit trail, which makes it possible to demonstrate the regular updating of customer knowledge throughout the business relationship.
The following information shall be provided in the report:
Each file is supplied with a PDF of evidence: identity verified by SMS OTP, qualified time stamping, SHA-256 hash, IP. Optional in case of a check by the ACPR on the LCB-FT device, and usable to support a statement of suspicion with TRACFIN.
The four-step procedure
From collection of parts to compliance filing in less than five minutes.
1. Compile the KYC file
Collect the customer information form, the customer's ID (or the manager and beneficial owner for a legal entity), proof of residence and the statement of origin of funds.
2. Add the client as a signatory
The customer (individual) or legal representative (legal entity) receives a secure, personalised link via email.
3. Choose the eIDAS level
Advanced signature (AES) recommended to satisfy strong authentication DSP2 and provide the presumption of reliability of Article 1367 of the Civil Code: single certificate per signatory, qualified time stamping in accordance with Article 26 of the eIDAS Regulation.
4. Sign and file
The client signs the contact file from his phone or computer. The completed file + the PDF of the proof are archived and remain accessible for any ACPR control or any constant vigilance update.
Frequently Asked Questions
- Can the contact file be signed electronically?
- Yes, without restriction. The LCB-FT vigilance obligations (Articles L561-5 and L561-6 of the Monetary and Financial Code) do not require any paper form. The advanced signature (AES) Certyneo, with strong identification by SMS OTP, satisfies both the identity verification requirement and the strong customer authentication (SCA) of the DSP2.
- What are the parts of a KYC file?
- Valid identity document, proof of domicile, customer information form (activity, subject of the relationship, origin of funds), and for a legal person: Kbis less than 3 months old, statutes, declaration of beneficial owner (UBO register).
- Does the electronic signature satisfy the identity verification requirement of Article L561-5?
- Article L561-5 requires that the identity of the customer be verified on presentation of a written document proving the identity of the customer. e-signature does not replace this documentary verification, but it complements it: it timestamps the collection of documents, authenticates the customer by OTP SMS and seals the file with an audit trail.
- What signature level to choose: SES, AES or QES?
- For a connection file, the advanced signature (AES) is recommended: it provides the presumption of reliability of Article 1367 of the Civil Code and satisfies the strong authentication of the DSP2 customer.
- How long do we keep the KYC file?
- 5 years from the end of the business relationship (Article L561-12 of the Monetary and Financial Code). Certyneo automatically archives the signed file + its eIDAS audit trail, accessible with one click for any ACPR check.
- Is remote connection allowed by the LCB-FT?
- Yes, distance contact is permitted if additional vigilance measures are implemented (Article L561-10 of the Monetary and Financial Code and related regulations): for example, additional supporting documentation, a first transaction made from an account opened in the name of the customer, or the use of an electronic identification means.
- How can we prove the constant vigilance required by Article L561-6?
- Article L561-6 requires that the customer's knowledge be kept up to date throughout the relationship.Certyneo keeps each signed version of the file with its audit trail, which allows the date and content of each vigilance update to be demonstrated to the ACPR.
- Is the electronically signed file open to challenge in ACPR?
- Yes. The Certyneo trail audit (OTP verified identity, qualified timestamp, SHA-256 hash) documents each LCB-FT diligence. It is exported as a certified PDF and can be challenged to the ACPR to demonstrate compliance of the connection entry device, as to courts in case of litigation.
See also
Dematerializing your next relationship
Permanent free plan (5 envelopes/month), no credit card. LCB-FT and eIDAS compliant. Strong identification, audit trail and archiving included.