What is Customer Due Diligence (CDD)?
The short answer
Customer Due Diligence is the work of establishing a customer’s identity, understanding the relationship and assessing its risks. For a corporate customer, the file often combines company identity, ownership, representatives and an explanation of the intended activity. The aim is an evidence-supported decision that can be reviewed later, rather than a collection of unchecked documents.
Customer Due Diligence (CDD): why it matters
A company can be validly registered while still presenting risks that matter to a particular service. Due diligence connects factual evidence to the decision to begin or continue a relationship. It also makes uncertainty visible: missing ownership information and conflicting details should remain explicit issues, not disappear into a generic completed status.
How to assess it in practice
Define the information needed for the customer and relationship. Gather identity and ownership evidence, understand the expected activity and check for material inconsistencies. Assess the risk using documented criteria, decide whether to approve or escalate, and retain the evidence used. Establish ongoing review triggers that reflect how the relationship can change.
Worked example
A distributor requests trade credit for a new overseas buyer. The analyst checks the legal entity, reviews ownership information and considers the intended transaction and financial evidence. A registry match answers who the business is; it does not answer whether the requested credit terms are appropriate. Both questions remain visible in the approval record.
An onboarding team has several certificates but no explanation of the expected transaction activity. Request the missing business context rather than another identity document.
Distinctions that matter
KYB supplies business identity and ownership evidence. CDD applies that evidence to a customer relationship. Enhanced due diligence refers to deeper checks in higher-risk circumstances; it is not simply a longer version of every onboarding form.
Evidence and review output
Review these
- Customer and relationship context
- Risk factors and evidence gaps
- Review depth and approval basis
The review should produce
A documented assessment explaining the review approach, evidence considered and conditions attached to any acceptance decision.
Across this family
The depth of review should follow the specific risk question and applicable framework. Document why additional or reduced checks are appropriate, which evidence can answer the question and what uncertainty remains. Escalation should resolve a defined issue rather than merely add another approval signature.
A note from practice
CDD should connect customer identity, ownership, relationship purpose and risk assessment into a reviewable decision. Collecting more documents adds little if none addresses the question preventing approval.
Limits and common mistakes
CDD should not collapse identity risk and payment risk into one unexplained score. Equally, a low-risk classification should not remove the need to resolve contradictory identity evidence. Where enhanced checks are required, document what additional questions they answer. The precise regulatory requirements depend on the applicable framework.
Related questions
- What information is collected during customer due diligence checks?
- When should you repeat customer due diligence?
Frequently asked questions
Is CDD only an onboarding task?
Does CDD include ownership?
What should a CDD file retain?
Continue learning
Related topics
- Business identity & verificationKnow Your Business (KYB)Know Your Business is the process of establishing the identity of a business, understanding who owns or controls it, and assessing whether a relationship presents unacceptable risk. A useful KYB record connects a legal entity to its registration evidence, ownership information and the decision made about it. Finding a company name is only the beginning: the record must belong to the business you intend to onboard.
- Business identity & verificationKnow Your Customer (KYC)Know Your Customer is the process of understanding who a customer is, why they are using a service and what risks the relationship creates. In a business relationship, that understanding can involve both a legal entity and the individuals acting for, owning or controlling it. Identity evidence is an input to the assessment, not a substitute for understanding the relationship.
- Beneficial ownership & controlUltimate Beneficial Owner (UBO)An ultimate beneficial owner is a natural person who ultimately owns or controls an entity. The immediate shareholder may be another company, so identifying a UBO can require following an ownership chain and examining control separately. A corporate owner should not be presented as the final answer to a question about the people behind a business.
See the registry record behind every answer.
Primary, government-sourced data on 600M+ companies in 200+ countries, with full source attribution.