Due diligence: definition and process

In short: Due diligence refers to all the checks carried out before entering into a relationship with a customer, partner or supplier, or before completing a transaction. Its purpose is to know who you are dealing with, assess the associated risks and document the decision. Under anti-money laundering and counter-terrorist financing (AML/CFT) rules, it is a legal requirement built on a risk-based approach: scrutiny intensifies in sensitive situations. Done well, due diligence protects the business on the legal, financial and reputational fronts. Automated, it becomes a fast, traceable reflex rather than an administrative burden.

‍

What is due diligence?

‍

Due diligence is the level of care and attention a prudent person exercises before making a commitment. In practice, it means collecting and verifying the information needed to make an informed decision: opening an account, granting credit, signing a contract, acquiring a company or onboarding a supplier.

‍

The aim is twofold. First, to truly know who you are dealing with: their identity, situation, activities and beneficial owners. Second, to identify and measure the risks they represent, whether financial, legal, regulatory or reputational.

‍

Due diligence is not a one-off check. It is a structured process, proportionate to the level of risk, and above all documented. In the event of an inspection or a dispute, the business must be able to demonstrate that it carried out the expected checks. Traceability is an integral part of due diligence: an undocumented decision is, in practice, an unjustified one.

‍

The types of due diligence (KYC/KYB, financial, legal, reputational)

‍

Due diligence takes different forms depending on the nature of the counterparty and the purpose of the relationship.

‍

• Identity due diligence (KYC / KYB). KYC (Know Your Customer) verifies the identity of an individual customer. KYB (Know Your Business) applies to companies: legal existence, registration, directors, ownership structure and beneficial owners. It is the foundation of any professional relationship. To go further, read our complete KYB guide.
• Financial due diligence. This assesses the counterparty's economic health: accounts, turnover, debt, solvency, payment incidents. It is decisive when deciding whether to grant credit or a payment term.
• Legal due diligence. This covers contractual and regulatory matters: ongoing litigation, insolvency proceedings, compliance of the activity, licences and authorisations.
• Reputational due diligence. This looks for negative signals associated with a person or a company: presence on sanctions lists, political exposure, adverse media coverage, convictions.

‍

These dimensions are complementary. A company may be perfectly identified (compliant KYB) yet present a high financial risk, or show strong ratios while having a director under sanctions. Complete due diligence brings these angles together. Scrutiny also extends across the whole value chain, including suppliers: this is the purpose of Know Your Supplier (KYS).

‍

Due diligence and AML/CFT (risk-based approach, enhanced due diligence / EDD)

‍

For financial services and many regulated professions, due diligence is not optional: it is imposed by the framework for anti-money laundering and counter-terrorist financing (AML/CFT). In the United Kingdom, these obligations are set out mainly in the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (the Money Laundering Regulations 2017, or MLR 2017).

‍

The framework rests on a risk-based approach. The business adjusts the intensity of its checks according to the estimated risk level of the business relationship. Three levels are distinguished:

‍

• Simplified due diligence, for low-risk situations.
• Standard due diligence (customer due diligence), the default regime applicable to most relationships.
• Enhanced due diligence (EDD), for high-risk situations.

‍

Enhanced due diligence applies in particular when the customer is a politically exposed person (PEP), when the transaction involves a high-risk country, or in the case of a complex transaction or an unusually large amount with no apparent economic justification. It calls for additional measures: gathering further information on the source of funds and wealth, sign-off at an appropriate level of seniority and enhanced ongoing monitoring of the relationship.

‍

Firms that also operate in the European Union should note that the EU framework is tightening with the 2024 AML package (often referred to as AML6), which creates a European supervisory authority (AMLA) and harmonises the rules through a directly applicable regulation. This is an EU reform: it applies to activities carried out within the EU and does not replace the UK regime. In the United Kingdom, firms remain governed by the Money Laundering Regulations 2017 and the supervision of their sector regulator.

‍

The step-by-step process

‍

Effective due diligence follows a clear, repeatable sequence.

‍

1. Identification. Collect the identity data of the person or company: personal details or registration number, address, legal form, directors.
2. Verification. Check the authenticity of the information against reliable sources: official registers, supporting documents, solvency data.
3. Identifying beneficial owners. Trace the ownership chain to identify the individuals who genuinely control the company, beyond shell structures. In the United Kingdom, this includes checking the register of Persons with Significant Control (PSC) held at Companies House.
4. Screening. Run the counterparty against sanctions lists, asset freezes and PEP databases, and search for negative reputational signals.
5. Risk assessment. Assign a risk level to the relationship and determine the applicable due diligence regime (simplified, standard or enhanced).
6. Decision and documentation. Formalise the decision (accept, decline, request further information) and retain all supporting evidence.
7. Ongoing monitoring. Keep scrutiny up to date over time: situations change, a director moves on, a sanction appears. Due diligence is a living process, not a one-off act.

‍

How to industrialise due diligence

‍

Carried out manually, due diligence is slow, costly and exposed to human error. Industrialising it means automating the repeatable steps while reserving human expertise for complex cases.

‍

KYB automation queries official registers in real time to verify a company's legal existence, situation and directors. Beneficial ownership mapping automatically reconstructs the ownership chain and reveals opaque structures. Screening continuously compares counterparties against sanctions lists and PEP databases, with permanent updates.

‍

The point is not only speed, but consistency and proof. An onboarding platform applies the same rules to every file, records every check and generates a complete audit trail. This is exactly what Meelo offers: a decision in 2 to 5 seconds, documented and auditable, combining identity verification, solvency analysis, fraud detection and screening. The company and manager trust score (KYB) distils these signals into an assessment that teams can act on immediately.

‍

In conclusion

‍

Due diligence is far more than a compliance formality: it is the foundation of a healthy, controlled business relationship. It protects the business against fraud, money laundering, insolvency and reputational harm. In an increasingly demanding AML/CFT environment, with a risk-based approach and enhanced due diligence for sensitive situations, rigour and traceability become essential. Automation turns this obligation into an operational advantage: reliable, fast and documented checks, applied consistently to every file.

‍

FAQ

‍

What does due diligence mean?

‍

Due diligence means reasonable care. The term refers to all the checks a business carries out before committing to a customer, partner or supplier, in order to know who it is dealing with, assess the risks and document its decision.

‍

What is the difference between due diligence and supply chain due diligence?

‍

Due diligence is the general process of prior verification. Under AML/CFT rules, it is a legal obligation requiring regulated firms to verify the identity and source of funds of their customers, and to adjust these checks according to risk. Supply chain due diligence is a separate concept: in the United Kingdom, the Modern Slavery Act 2015 requires larger businesses to report on the steps they take to prevent modern slavery and human trafficking in their operations and supply chains. At EU level, the Corporate Sustainability Due Diligence Directive (CSDDD) sets comparable duties on human rights and environmental harm across the value chain.

‍

What is enhanced due diligence (EDD)?

‍

Enhanced due diligence is a higher level of control applied to high-risk situations: politically exposed persons (PEPs), high-risk countries, complex transactions or unusual amounts. It requires additional measures, such as verifying the source of funds and obtaining sign-off at a senior level.

‍

How can you automate company due diligence?

‍

By relying on a platform that queries official registers in real time (KYB), maps beneficial owners, runs sanctions and PEP screening, then distils everything into a risk score. Meelo returns a decision in 2 to 5 seconds, documented and auditable, with a complete audit trail.

‍

Sources

‍

• Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (UK): customer due diligence obligations, risk-based approach and enhanced due diligence.
• Companies House register of Persons with Significant Control (PSC), UK.
• European Union anti-money laundering package (2024 AML package, including AML6): regulation, directive and creation of the Anti-Money Laundering Authority (AMLA), as an EU reference for firms operating in the EU.
• Modern Slavery Act 2015 (UK) and, as an EU reference, the Corporate Sustainability Due Diligence Directive (CSDDD).