Enhanced due diligence is one of the most important obligations in your AML programme and one of the most operationally exposed.
For most regulated firms, EDD still looks like this: a skilled analyst spends half a day or more manually searching the web, verifying source of funds and wealth, cross-referencing screening databases, and pulling from whatever proprietary sources are available, before assembling a report that then enters a further review cycle.
It is time consuming, inconsistent and difficult to scale.
By the time a report reaches review, the quality of what's in it depends entirely on how much time the analyst had, which sources they could access and which languages they could search and understand. That variability is not just an operational problem, it is a compliance risk.
The Problem with Manual EDD
Ask any MLRO what keeps them up at night and EDD quality will feature on the list. Not because their analysts aren't competent, they almost certainly are, but because the manual research model is fundamentally incompatible with what regulators now expect.
The FCA, UKGC, MGA and equivalent bodies have raised the bar significantly on EDD documentation standards. They want to see consistent methodology, comprehensive source coverage, traceable evidence chains, and analyst accountability on every high-risk case. Manual EDD, by its nature, cannot guarantee any of these things at scale.
"The methodology, the sources consulted, and the conclusions drawn should be consistent regardless of which analyst handles the case. Manual research cannot deliver this. It never could."
Here is what manual EDD actually looks like in practice and why each element represents a regulatory and operational risk:
4–8 hours per report. A thorough EDD on a complex individual takes the better part of a working day. At volume, this is economically unsustainable.
English language blind spots. Adverse media in Russian, Mandarin, Arabic or Portuguese goes unread, precisely where material risk is hidden.
Inconsistent source coverage. Analyst A searches ten sources; Analyst B searches thirty. There is no audit trail of what was and wasn't consulted.
Backlogs accumulate fast. High risk queues and periodic review programmes arrive faster than teams can process them.
Documentation quality varies. When the regulator examines a sample of EDD files, inconsistency in narrative quality and evidence cited is immediately apparent.
False positives drain capacity. Qualified analysts can spend hours clearing name match alerts that should never have reached them.
What Regulators Now Expect
The regulatory direction of travel is clear. Regulators across the UK, EU and offshore jurisdictions are no longer satisfied with process documentation that describes what EDD should involve. They want evidence that it did happen; comprehensively, consistently, and with professional accountability.
FCA and JMLSG
The FCA's expectations, reinforced through JMLSG guidance, are explicit: firms must have proportionate, documented, and consistently applied EDD processes for high-risk customers. The FCA in 2023 and 2024 undertook supervisory reviews on how firms handle PEPs and identified EDD quality as a persistent weakness — particularly around PEP identification, source of wealth verification, and adverse media coverage. AI tools bridge the gap to save having to disproportionately ask customers for information to complete EDD.
UKGC and iGaming
The UKGC has escalated enforcement on EDD failures significantly. VIP player source of wealth and funds assessments are a primary focus of compliance assessments. The Commission expects operators to demonstrate that EDD was conducted, what sources were consulted, what was found, and how the risk conclusion was reached.
Crypto, MiCA and FATF
For virtual asset service providers, FATF Travel Rule requirements, MiCA obligations and the inherently higher risk nature of crypto counterparties creates a demanding EDD environment. Institutional onboarding, high value wallet screening and exchange to exchange due diligence all require the same depth of investigation.
How AI Transforms the Research Problem
The core issue with manual EDD is not analyst capability — it is the fundamental mismatch between the volume of information that needs to be read, understood and synthesised, and the time a human analyst has available to do it.
Xapien's AI research engine resolves this mismatch. When Xapien runs an EDD investigation, it simultaneously reads and synthesises information from over 200 sources — global news archives across 40+ languages, company registries in multiple jurisdictions, sanctions and PEP databases, court records, regulatory enforcement archives, and open-source material. It identifies connections between subjects, flags corroborating evidence, notes inconsistencies, and scores risk across multiple dimensions.
The output is not a list of links. It is a structured intelligence briefing with every finding and source cited, every risk dimension assessed, and the full evidence chain documented. An analyst who would previously have spent six hours producing that briefing manually now spends thirty minutes reviewing, validating, and applying their professional judgement to findings the AI has already assembled.
Why Technology Alone Is Not the Answer
A Xapien report is powerful intelligence. But it is not, by itself, an EDD conclusion. The regulatory obligation requires a qualified professional to review the findings, apply sector-specific risk frameworks, make a defensible risk judgement, document their reasoning, and sign off on the conclusion. That is not an AI function. It is an AML function.
"The regulator doesn't want to see an AI output. They want to see an analyst conclusion, backed by documented evidence. The AI generates the evidence. The analyst provides the conclusion."
This is why Endida wraps Xapien in a fully managed EDD service. We take responsibility for the complete process. From research through to a finished, analyst signed report, so that what lands in your compliance file is a professional EDD conclusion your MLRO can stand behind.
How Endida's Managed EDD Service Works
The service operates as a seamless five-stage workflow. You submit a subject. We return a finished report.
Case Submission [Client + Endida] You submit the subject via our secure portal — name, entity type, sector context, and any known intelligence. Our SLA starts immediately.
Xapien AI Research [Xapien AI] Xapien runs its full research engine across 200+ sources in 40+ languages — adverse media, sanctions, PEP lists, corporate registries, court records and open-source intelligence — simultaneously.
Analyst Review & Enrichment [Endida Analyst] A qualified compliance analyst reviews the AI output — validating findings, resolving ambiguities, applying sector risk context, and conducting supplementary research where needed.
Senior AML Sign-Off [Senior AML Lead] A senior AML specialist reviews the completed report, approves the risk rating, writes the risk conclusion and counter-signs. Every report carries professional accountability.
Delivery to Your Compliance File [Endida + Client] The finished report is delivered to your case management system (or via encrypted email). Formatted to your template, aligned with your risk scoring, sources cited throughout, and ready for your MLRO and senior management to approve continuation or perhaps termination of a business relationship.
The analyst team includes ICA / CAMS -qualified specialists, former MLRO practitioners, and sector-specific experts across Financial Services, iGaming and Crypto.
Three Ways to Engage
We offer three engagement models designed around your capability, volume and risk appetite:
Tier 01 — Platform Access: Xapien deployed and configured for your in-house team. Your analysts run the investigations, Endida manages the technology and configures your risk scoring and framework. Ideal for teams with strong existing EDD capability and capacity wanting AI augmentation.
Tier 02 — Fully Managed EDD (Most Popular): End-to-end outsourcing. You submit subjects, we return analyst signed, regulator ready reports within 4 to 24 hours. No platform to manage, no analysts to recruit.
Tier 03 — Embedded Function: Named Endida analysts integrated within your compliance team and governance structure. Operates as an extension of your MLRO/KYC function, with Xapien and our wider compliance stack as the underlying intelligence engine.
Built for Your Sector
Financial Services
Banks, wealth managers and payment firms face the deepest EDD obligations. Our analysts understand FCA Handbook: SYSC 6.3 and FCG, JMLSG guidance, and the evidentiary standard expected on examination and for many other regulators in jurisdictions such as Guernsey, Jersey, Malta and Dubai
Legal & Professional Services
Law firms, accountants and trust companies face greater regulatory burdens as they transition over to FCA supervision for AML. The UK Government deemed the previous supervisory arrangements ineffectual to combat financial crime. We deliver EDD depth and documentation for high-value transactions, real estate and litigation counterparties.
iGaming
VIP player source of wealth and funds assessments, high-risk deposit triggers and periodic review backlogs. Purpose-built for UKGC, MGA and GCC licence environments, that scales with your player volumes.
Crypto & VASP
Institutional investor EDD, exchange counterparty due diligence, high value wallet investigation and crypto project team screening; applied to subjects where public footprints are fragmented and risk is elevated. Here Xapien is supported by our wider compliance stack and blockchain intelligence tools.
The Opportunity
Regulated firms don't need more tools. They need a better outcome: faster, more consistent, more defensible EDD that satisfies their regulator, protects the business, and doesn't consume their best analysts in a research function a machine can now perform better.
If your EDD programme is struggling with quality, consistency, capacity or cost — we should talk.
For more information visit: https://endida.com/endida-xapien.html
Photo by ThisisEngineering on Unsplash - thank you!