Enhanced due diligence (EDD) is a more detailed, risk-based review used when standard checks do not answer important questions about a person or organization. It helps an organization understand who it is dealing with and whether the facts support the stated purpose of a relationship or transaction. The review may examine ownership and control, business activities, financial information, and relevant legal or financial-crime concerns. It can also lead to closer monitoring after a relationship begins. A risk indicator is a reason to investigate further, not proof of misconduct. EDD is not a universal checklist: its scope depends on the specific concern, the organization’s risk assessment, and any applicable legal or regulatory requirements.
Table of Contents
- When Is Enhanced Due Diligence Warranted?
- How Does Edd Differ from Standard Due Diligence?
- What Information Can an Edd Review Examine?
- What Steps Make an Edd Process Useful?
- How Can Edd Support Contingent Workforce Management?
When Is Enhanced Due Diligence Warranted?
EDD is warranted when an initial review identifies a concern that requires more evidence or analysis. Possible indicators include complicated or opaque ownership, an unclear business purpose, unusual payment activity, cross-border operations, or credible concerns about sanctions or financial crime. An indicator alone does not establish that a person or organization is high risk. Its significance depends on the circumstances and the organization’s assessment of the relationship as a whole.
Risk can also change after a relationship starts. A change in ownership may prompt a closer review. New information about a representative can do so as well. A pattern of activity that differs from what was expected may also warrant attention. The organization should consider whether the new information changes its understanding of the relationship and what controls are appropriate.
In the United States, specific EDD obligations depend on the sector and activity involved. FinCEN’s guidance discusses EDD in the context of certain financial institutions’ Bank Secrecy Act responsibilities. It does not establish one checklist for every business. FinCEN’s guidance on obtaining and retaining beneficial ownership information explains how heightened-risk reviews may examine ownership and the source and use of funds.
How Does Edd Differ from Standard Due Diligence?
Standard due diligence establishes a baseline understanding of who an organization is dealing with and why the relationship exists. It may verify identity and registration. It may also confirm that the person acting for the organization has authority to do so. Enhanced due diligence adds depth when that baseline does not resolve a specific concern. The difference is generally the scope and intensity of the review rather than a completely separate process.
For example, a basic review may identify a company’s direct owner. An enhanced review may trace ownership through parent companies or other entities to establish who ultimately owns or controls it. Depending on the concern, the review may also seek evidence about the origin of funds or wealth, expected activity, and relevant licensing or regulatory history. Each step should answer a specific question rather than expand simply because more information could be collected.
Requirements that apply to a regulated financial institution should not be assumed to apply to every organization. FinCEN explains that its Customer Due Diligence Rule applies to covered financial institutions and describes their responsibilities in that context. Its Customer Due Diligence Rule FAQs address risk-based monitoring and beneficial-ownership information. Other organizations may use EDD as a risk-management practice, with an approach shaped by applicable rules and business needs.
What Information Can an Edd Review Examine?
The review should begin with the concern that triggered it. If ownership is unclear, the reviewer may seek corporate records and trace the ownership chain. If the stated business purpose is uncertain, the reviewer may compare the organization’s explanation with its operations and the expected activity of the relationship. The aim is to verify material facts through reliable evidence and resolve inconsistencies.
Relevant records depend on the situation. They may include corporate registration and licensing documents. They may also include ownership records, financial information, and evidence of representatives’ authority. A review may consider relevant sanctions, enforcement, or litigation records. A database alert or news report should be checked for accuracy and context. A possible match is a lead to investigate, not a finding on its own.
Information gathering should be proportionate to the risk and handled with care. Access to sensitive records should be limited to people with a legitimate role in the review. Organizations may set out handling practices in a Data Protection Policy. When a review concerns a third-party contractor, the reviewer should distinguish facts about the business from assumptions about individuals associated with it.
What Steps Make an Edd Process Useful?
A useful process records why the baseline review was insufficient and identifies the questions the additional work must answer. The reviewer gathers relevant documents or explanations and checks important claims against reliable sources. If sources conflict, the reviewer should document the discrepancy and seek clarification where appropriate. The work should remain focused on the risk rather than become an open-ended request for personal or business information.
After considering the evidence, an authorized decision-maker can determine whether to proceed, request further information, add safeguards, restrict activity, or decline the relationship. The record should explain what was reviewed and why the decision follows from the findings. A compliance report may help preserve that reasoning when the organization’s process or applicable requirements call for formal documentation.
EDD may continue after approval. Monitoring can identify material changes or activity that no longer fits the relationship’s stated purpose. The FFIEC guidance on customer due diligence describes risk-based monitoring and updating customer information in the context of banks’ BSA/AML programs. EDD cannot guarantee that misconduct will be detected. Its value depends on the quality of the evidence and whether findings lead to appropriate decisions and follow-up.
How Can Edd Support Contingent Workforce Management?
In contingent workforce management, EDD can help an organization examine a workforce supplier or business partner when the relationship presents specific legal, financial, security, or reputational concerns. The review focuses on the organization supporting the work and the business arrangement. It is distinct from a background check, which typically concerns an individual and does not by itself establish a supplier’s ownership, financial condition, or business practices.
The scope depends on the work and the risks identified. An organization may need to understand who owns a supplier and whether it has relevant authorization. It may also need to know how the supplier uses subcontractors. For a cross-border arrangement, the parties may need to examine how the arrangement interacts with local requirements and contractual responsibilities. Findings can inform approval decisions and the controls used to manage the supplier relationship.
For organizations using a contingent workforce, EDD can connect supplier review with ongoing program oversight rather than treating verification as a one-time paperwork exercise. TCWGlobal’s contingent workforce management work may be relevant when an organization needs support coordinating review and compliance responsibilities. Appropriate roles and scope depend on the services involved and the parties’ agreements. EDD remains a risk-management process; it does not replace legal advice or establish that every workforce relationship is compliant.
