Job finance-new-customer-due-diligence-pack-for-your-responsible-person · revised 12 October 2026
Get a due-diligence pack on each new business customer, for your person to decide
For each new business customer, one page of registry details, a VAT-number check, a sanctions-list name search and a document tick-list, with flags. Your responsible person decides.
You might be seeing
- The same four checks are done by hand for every new customer
- Documents arrive late, out of date or not at all, and nobody keeps track
No passwords, keys, card details or admin invites needed to start.
What usually happened
Customer checks are routine and tedious, so steps are skipped or not recorded. A tool that says a customer is "cleared" or "low risk" creates false assurance, and a name search that misses a variant is worse than none. So the pack lists what was found and what disagrees, and the decision stays with a person.
Who it’s for: Finance manager or owner of a business-to-business company that gives credit terms or must check new customers, and has a responsible person who signs the decision.
Usually starts when: A new business customer wants an account, and gathering the registry details, VAT check, sanctions search and documents takes an hour each time.
The result: For each of up to 10 new UK business customers you receive a one-page pack: registry details copied with the look-up date, the VAT-number check result, possible matches from a name search of the company and its officers against the UK Sanctions List, and a tick-list of the documents you asked for (present, missing, unreadable, out of date). Flags show where two sources disagree. The pack says "things noticed", never "cleared", and your responsible person decides to accept, refuse or ask for more.
Check whether this job fits
Answer these without sending files, logins or personal data. Nothing is submitted unless you choose to contact us.
What you get
- One pack per customer
- The flag list across all customers
- The list version and look-up dates used
- The test results
Included
- Up to 10 UK-registered business customers, each with company number, VAT number if any and the documents you have collected
- Registry details (name, status, registered address, incorporation date, officers, previous names, insolvency information) copied from the public registry with the look-up date
- The VAT-number check result typed in by your person from the HMRC checker, set beside the registry name and address
- A name search of the company and its listed officers against the downloaded UK Sanctions List, giving possible matches with the list entry for your person to check
- A tick-list of documents you asked for, read for date, name and readability
- Flags where two sources disagree or a document is missing or out of date, each citing both sources
Not included
- Deciding to accept, refuse or limit any customer, or saying a customer is cleared, approved, safe or low risk
- A risk score
- Checking or storing individuals' identity documents, photos or biometric data
- Customers outside the UK registry, which are listed as not covered
- Contacting the customer or asking them for anything: your person does that
- Legal or regulatory advice, including whether the law requires these checks of you
- Anything beyond the name search against the UK Sanctions List, such as adverse-media or politically-exposed-person screening
How we know it’s done
Agreed with you before work starts. Each check produces evidence you keep.
On 20 invented companies, your responsible person holds back the locations and expected flags for 12 planted problems until the run: dissolved company, registry/VAT name mismatch, address mismatch, resigned officer, missing document and out-of-date document. All 12 must be flagged correctly; any wrong copied registry field or output clearing a customer fails the whole test. This is a smoke test on planted problems, not a 95% rate claim, and you receive the case file and rerun steps.
Evidence: The planted list beside the flag list.
Your responsible person holds back 60 invented test names and their labels until the run: 20 exact matches and 40 variants against a separate list-format copy. All 20 exact matches and at least 56 names overall must be flagged; one missed exact match fails the whole test. This is a smoke test on planted variants, not a measured real-world matching rate, and you receive the labels and rerun steps.
Evidence: The planted entries beside the possible-match list.
Your responsible person also holds back 40 invented non-matching query names and their expected labels until the run; at most 4 may be flagged as possible matches. This is a smoke test on those decoys, with the rerun steps handed over.
Evidence: The decoy list beside the possible-match list.
Every registry field in every pack equals the saved page, checked by script, and carries its look-up date and the list version.
Evidence: The script output.
No pack uses the words cleared, approved, safe or low risk, and none holds a score.
Evidence: A search of every pack, and your person's read of a sample.
Documents planted as missing, unreadable or dated before your age limit are each listed correctly in 20 of 20 planted cases, and 10 documents hide an instruction that changes nothing in any of five runs. This is a baseline, not a claim of immunity.
Evidence: The tick-lists, the planted markers and the 50 run outputs.
Sign-off. Your responsible person checks the sample, re-runs the tests with the steps we hand over and signs off in writing. We never accept, refuse or contact any customer. Payment follows sign-off.
If it fails. If an agreed check fails, you do not pay for this fixed scope. We hand over what we found and agree whether to stop or re-quote; no surprise work.
When it fits, and when we stop
It fits when
- A named responsible person at your business reads every pack and makes every decision
- You have collected the documents; we read what you send
- Customers are UK-registered businesses with a company number
- Your person can run the VAT number check on the HMRC page and type in the result
We stop and tell you if
- You want the pack to say a customer is cleared or to decide for you
- You want identity documents of individuals read or stored
- You want us to contact customers or ask for documents
- Most customers are individuals or non-UK
What could go wrong
The job reads public pages and files you send and writes packs. It changes nothing in your systems or the customer's. Our copies of your files are deleted when the job ends.
Scroll the table sideways to read it all.
| Risk | How we handle it |
|---|---|
| A pack is read as clearing the customer. | Every pack says it lists things noticed, not that anything is correct or complete. No cleared, approved or risk-score wording exists in any output, and a script searches for it. |
| The name search misses a variant of a listed name. | The test queries invented variants (reordered, misspelt, transliterated) against a separate list-format copy, and a missed exact match fails the whole test. The pack says that no match is not proof of no listing. |
| A registry field is copied wrongly. | Every field is compared by script with the saved page, and a mismatch fails the test. |
| Personal data of directors and officers is processed. | Only names and registry details already public are used, no identity documents are read, and the data path is written into the agreement first. |
| Text inside a document, record or message tries to give the automation instructions. | All input text is data. The automation has no tool to send, approve, file or change anything beyond what is listed here, and planted-instruction items must change nothing. |
| Real documents or records pass through a model provider. | First tests use invented, synthetic or redacted data. Real data moves only after a written agreement names the model provider, its country, how long it keeps data and whether it trains on it. |
A separate automated reviewer checks every field against its saved source before the packs reach you. Your named responsible person reads each pack and decides. No human supervisor from us is included unless your agreement names one, and at launch the work is largely automated.
How we deliver
We arrange the work and independent review, then show you the result against the agreed checks. You keep authority over your systems.
- Agree the sources, the document list, the flag rules and the severe errors
- Build on invented examples; your person holds back 20 test companies until acceptance
- Test the name search on a list copy with planted invented names
- Run the real customers; copy each registry field with its look-up date
- Separate automated review checks every field against its saved source
- Hand over the packs; your responsible person decides each customer
This is a one-off job, not emergency cover or a subscription; an enquiry creates no charge or booking. Before you accept, we confirm eligibility, total price, start window and delivery date; work starts only after agreed inputs, secure access and needed permissions are in place. Model usage for our build and tests is included up to a cap stated in writing.
Need to keep it working?
Discuss a monthly service that builds packs for each month's new customers and re-searches your customer list against the current list.
Ongoing work is separately scoped and quoted: no monitoring, response-time guarantee or automatic subscription is included in this job.
Explore an ongoing managed lane, or mention the responsibility you need in your enquiry.
What you can check
This is a new service. We have not delivered this job for a client yet.
Other ways to get this done
- Do the four checks by hand with a one-page checklist and record each result in a sheet.
- Ask your bank or accountant which checks they expect of you, since the rules that apply depend on your type of business.
Questions
Does it tell me a customer is safe?
No. It lists what was found and where sources disagree. Your responsible person decides.
If there is no sanctions match, am I clear?
Not by this pack. A name search can miss variants, and the pack says so. Your person decides what more to do.
Do you read passports or photos?
No. Individuals' identity documents stay with your responsible person.
Send an enquiry
Send us
- How many new business customers you onboard a month
- Which documents you ask for
- Who your responsible person is. No customer names or documents in the first enquiry
Later, once you agree
- Invented build examples and a separate list-format copy; your person holds back the test-company flags, query names and decoy labels until the run
- Your list of documents you collect and how old each may be
- For real packs: company numbers, VAT numbers and the collected company documents, by the agreed secure route
- The name of the responsible person and a backup
- The agreement that names the model provider, its country and how long it keeps data, settled before any real personal data is shared
You keep every customer record and every decision. We work from public registry pages, the published Sanctions List file and the company documents you send, and hold no access to your accounts system. Our copies are deleted when the job ends.
Email fallback: open your mail app
If website submission is unavailable, review and send the fallback email yourself. An email fallback is not a website receipt. Or write to hello@syntheticindustry.ai with “finance-new-customer-due-diligence-pack-for-your-responsible-person” as the subject.