Where the review applies
This standard covers prospective investors, acquisition counterparties, material suppliers and other direct corporate relationships with IO Limited. An operating company may conduct a separate customer review under its own policy and applicable law.
The depth of a review should follow the nature, value, geography and risk of the engagement. A first conversation does not require the same information as signing an agreement or moving funds.
Establish identity and authority
For an organisation, the starting point is its registered name, registration details, business address, operating activity and authorised representatives.
- Check the entity against an appropriate registry or reliable independent source.
- Understand the ownership chain and identify the individuals who ultimately own or control it. Do not treat one ownership percentage as a universal rule.
- Confirm the signatory’s authority and verify an individual’s identity when needed for the engagement.
- Resolve differences between the proposed contracting party, account holder and source of payment.
Look beyond the documents
Consider the commercial purpose, countries involved, ownership complexity, politically exposed persons, relevant adverse information and sanctions exposure. A possible name match or public allegation calls for assessment; it is not a finding of wrongdoing.
Higher risk may require additional evidence, clarification of the source of funds or wealth, and a recorded approval by the person responsible for the engagement. Unresolved material concerns should pause the commitment.
Request only what is needed
Explain the purpose of additional information and use an agreed secure exchange for sensitive documents. Do not send passports, identity scans or banking records through this website’s general forms.
Limit access to people handling the review. Keep a record of the evidence considered, the decision, any conditions and the next review trigger. Retention for due-diligence records is determined for the relevant entity, purpose and legal requirements.
Keep the assessment current
A change in control, authorised representatives, payment arrangements, geography or activity can justify a fresh review. The relationship owner should record such changes and escalate material discrepancies before proceeding.
To discuss a verification request you have received, use your established corporate contact or contact the corporate team. Verify unfamiliar requests through a previously trusted channel.