Industries · Banking

Banking: KYC/AML onboarding and credit approval.

In a bank the control steps are the process: identification, sanctions screening, risk classification, the four-eyes principle, the credit decision by competence level. They have to be visible, agreed and documented before anything is changed or automated. Customer onboarding and credit approval are the processes typically captured first; this page shows them as diagrams and explains how a first process is captured with the people who perform the checks.

01 — Process landscape

Where the first processes sit

A bank's landscape has the same three bands as any organisation, but the management band is heavier: risk management, compliance and anti-money-laundering, regulatory reporting and internal audit shape almost every core process from above. The core is the customer relationship: an account is opened, a loan is applied for and decided, payments run, a complaint is answered.

Two core processes are typically captured first: customer onboarding with its KYC and AML checks, and credit approval. Both are dense with controls, both are described in organisational guidelines, and in both the gap between the written guideline and the daily routine is largest. A diagram drawn with the people who perform the checks shows that gap and gives compliance, audit and the front office one picture to agree on.

Management
Risk managementCompliance and AMLRegulatory reportingInternal audit
Core
KYC/AML onboardingCredit approvalAccount servicingPaymentsComplaints
Support
HRProcurementIT and accessFinance

HIGHLIGHTED: TYPICALLY CAPTURED FIRST

02 — Example processes

Two processes to start with

Both diagrams are fictional example models, drawn the way patchley draws them: one lane per role, systems and documents at the step that uses them, every check a marked control step. The .bpmn file of each example is available on request.

CustomerClient advisorComplianceBack officeyesnoyesnoAccount requestedProvide IDdocumentsVerify identityID CHECKCONTROLSanctionsscreeningSCREENING TOOL×Hit found?Clarify hit×Cleared?Open accountCORE BANKINGReject requestAccount openedRejection sent
Fictional example model: opening an account for a new customer, from the identity check through sanctions screening to the account in the core banking system. BPMN 2.0, four lanes, two gateways, one control step.

KYC/AML customer onboarding

A new customer applies for an account. The front office collects the identification documents, the customer is identified, the documents are checked, the name is screened against sanctions and politically exposed persons lists, a risk classification is assigned, and compliance approves or declines. Each check leaves evidence; the file is complete only when every piece is in place.

What to look at
  • Every check is a marked control step with its evidence: identification, document check, screening, classification.
  • Which lane owns the approval and where the decision gateway sits; the front office prepares, compliance decides.
  • Where the process waits for the customer to provide a missing document, and how long cases sit there.
CustomerClient advisorCreditanalysisApproveryesnoyesnoLoan requestedCheck documentsCRMAssesscreditworthinessRATING TOOL×Large loan?CONTROLSecond vote×Approve?Prepare contractCORE BANKINGDecline withreasonsSign contractDecline sentLoan disbursed
Fictional example model: a loan request from the first document to disbursement, with a second vote for larger loans and a contract the customer signs. BPMN 2.0, four lanes, two gateways, one control step.

Credit approval

A customer applies for a loan. The relationship manager records the application and collects the documents, the back office checks creditworthiness and values the collateral, and the decision is taken at the competence level the amount requires. Then the contract is prepared and signed and the loan is paid out.

What to look at
  • The functional separation between front office and back office: which steps belong to which lane, and the second vote.
  • The decision gateway and its competence levels: who may decide which case.
  • Where cases wait for documents or for the collateral valuation, and where the file leaves the core system.

03 — What matters here

Control steps, roles and documents

In banking the diagram has to show the checks as steps with an owner and evidence, the separation of functions as lanes, and the document trail from application to decision. This is general orientation on what to capture, not legal advice.

1

Control steps with evidence

Identification and document check, sanctions and PEP screening, risk classification, creditworthiness check, collateral valuation, the four-eyes principle, the second vote on risk-relevant credit decisions. Each is a marked step that names the checker, the input and the evidence that stays in the file.

2

Roles and functional separation

Customer, front office, back office, compliance and AML officer, credit risk, internal audit, process owner. The separation of front office and back office is the reason the diagram has two lanes where a flowchart would have one.

3

Documents and systems

Identification documents, account and loan applications, financial statements, collateral documents, credit decision, contract; the core banking system, the screening tool and the credit system behind them. Each document is attached to the step that creates or needs it.

4

Exceptions and escalations

A hit in the screening, an incomplete file, a case above the competence level, a customer who does not respond. The exceptions are where the written guideline is thin and the routine is rich; capturing them is most of the value of the first diagram.

04 — How a first process is captured

From the onboarding team's own words to a diagram, analyses and a deck

A first process in a bank is captured with the people who perform the checks: a front-office colleague and a compliance officer walk through a real case in a workshop, patchley listens live or joins the Microsoft Teams call, or it reads the organisational guideline as a PDF or DOCX. They correct the draft diagram on the screen in their own words.

1Interview or workshopFront office and compliance describe a real case; live audio, a recording, the guideline or a Teams meeting as the source.
2DiagramBPMN 2.0 with lanes for customer, front office, back office and compliance, systems, documents and every check as a control step.
3AnalysesPer step: SOP, pain points, compliance, figures, or your own template. The analyst proposes, you decide.
4DeckA PowerPoint deck for the head of operations, compliance and audit, built from the diagram and the analyses.
PilotYour first processSet-up, the first process with your team, hand-over to your process owner, a decision date. Price on request.

EXPORTS: BPMN 2.0 XML, SVG, PNG, XLSX, POWERPOINT · APP HOSTED IN GERMANY · AI MODELS FROM A EUROPEAN PROVIDER, HOSTED IN THE EU

05 — The industry report

Process capture in banking, as a document

The report describes the typical core processes, where process knowledge gets lost, the regulatory context in general terms (MaRisk, GwG and AML, KYC, DORA), where AI agents can help and which guardrails they need, and how to start. Fictional examples, no client data.

Industry report: process capture in bankingPDF · sent by email on request.
Request by email

Bring one real process to a 30-minute call. Leave with the diagram.

We model it live with you, in your language. Pick a time and the Microsoft Teams invitation is in your calendar straight away.

info@patchley.com

Book a 30-minute demo

We model it live with you, in your language. Pick a time and the Microsoft Teams invitation is in your calendar straight away.

Download request

Request a document

Enter your email address and we send you the document by email.

Requested document

Fields marked * are required.

See patchley in 19 clicks