When KYC policy and the onboarding UI disagree
Policy binders often describe a clean KYC ladder. Onboarding platforms rarely behave that cleanly once an applicant fails a document check or abandons mid-flow.
In recent audits we sample both the happy path and the fail path. The gaps that matter most are usually silent: a screening step skipped after a retry, a manual review queue that never receives stalled cases, or a vendor timeout that auto-approves without a second control.
If your next diligence pack needs more than a policy PDF, start by listing every exit from the onboarding flow and asking which KYC control owns it.