The 14-Stage CDD Workflow Explained: Tracing Onboarding to Permanent Record Lock
Published 2026-06-25 · Technical Whitepaper
Manual onboarding represents the single largest operational bottleneck and audit vulnerability in the agency. This whitepaper details how Indium OS's 14-stage Customer Due Diligence (CDD) engine automatically guides transactions from listing triggers to permanent Glacier record vaulting.
Stage 01 to 04: The Digital Intake & DVS Gateway
The workflow begins the second a listing is created in your CRM. Indium OS auto-triggers an onboarding matter, dispatching a secure identity request to the vendor. The client uploads their identity vectors (passport, drivers license) through a white-glove web interface. Indium OS queries the federal Document Verification Service (DVS) registry, authenticating the records in under 400 milliseconds.
Stage 05 to 10: PEP Screening, Risk Scoring, & EDD Escalation
Once identity is validated, the system queries global databases to scan for Politically Exposed Persons (PEPs) and DFAT sanctions registries. A dynamic risk scoring engine calculates the customer's risk profile (Low, Medium, High). If a company structure has multiple layers of offshore holdings, the matter triggers an Enhanced Due Diligence (EDD) alert, locking the CRM pipeline and escalating the file to the compliance officer for review.
Stage 11 to 14: CRM Clearance Tokens & 7-Year Ledger Locks
When the compliance officer reviews the exception logs and clears the matter, the system issues a cryptographically signed clearance token. This token releases the transaction lock in the property CRM, permitting listing finalization. Finally, the complete KYC record, verification logs, and officer decision notes are hashed (SHA-256) and archived into immutable S3 glacier storage (Object Lock) for the mandatory 7-year regulatory retention period.
Secure your agency before the deadline.
Talk with a compliance strategist to assess your pipeline and secure your written AML program today.
Download Brief PDF
Download a secure, audit-vetted PDF copy of this compliance asset for offline review.