Under Tranche 2, monitoring risk continuously isn't optional — it's the standard legal, accounting, and real estate professionals are now held to, once a customer relationship extends past the point of onboarding.
Why doesn't due diligence end at onboarding?
Because customer risk isn't fixed at the moment a relationship starts. A client's risk profile can shift after onboarding through a change in ownership, location, or behaviour, or simply because sanctions and PEP lists themselves get updated — none of which requires the customer to do anything differently. Ongoing due diligence means monitoring transactions for suspicious activity, checking for those changes, screening against updated lists, and regularly refreshing the original risk assessment rather than treating it as permanent.
Why does manual ongoing monitoring specifically struggle here?
Because it has to repeat for every client, indefinitely, not just once at the start of the relationship. A manual process that was merely slow at onboarding becomes genuinely unsustainable applied continuously across a growing client base — the article's own framing put it plainly: this work is "resource-heavy and prone to errors" when done by hand at any real scale.
What does automation actually change here?
It makes ongoing monitoring continuous rather than periodic — real-time alerts for red flags rather than a scheduled quarterly review that misses everything in between. It improves accuracy, reducing both false positives and the human error that creeps into repetitive manual review. It scales regardless of client volume, so growth doesn't force a choice between hiring proportionally more compliance staff or letting monitoring quality slip. And it's more efficient overall, freeing compliance teams to spend their time on actual risk judgement instead of repetitive checking.
What does this deliver for a business in practice?
Meeting Tranche 2's continuing-obligation standard, lower operational cost than scaling a manual team indefinitely, and a genuinely defensible answer when a client — or a regulator — asks how the business knows a relationship is still low-risk months or years into it. Tranche 2 isn't a one-off compliance project to complete and move past; it's a shift toward monitoring that has to hold up for as long as the relationship lasts. See why ongoing monitoring matters for your business for how this same principle applies well beyond Tranche 2-specific obligations.
