# Compliance Policies ### Compliance Policies Overview Policies let you apply **regulatory rules**, **industry frameworks**, and **internal controls** inside a [workflow](/documentation/product-guides/compliance-studio/workflows.md). Each policy is a **rule set** evaluated during the verification journey. This helps you enforce consistent **KYC/AML decisioning** across every workflow session. #### Supported regulatory and industry frameworks ComplyCube supports **hundreds of policies** across major jurisdictions and industry frameworks. Examples include: * **UK Home Office Right to Rent** checks to validate a tenant’s eligibility to rent property. * **Financial Action Task Force (FATF) AML and CFT guidelines** for combating money laundering and terrorist financing worldwide. * **U.S. Financial Crimes Enforcement Network (FinCEN)** rules for identifying and monitoring beneficial owners. * **Monetary Authority of Singapore (MAS) AML/KYC requirements** for financial institutions operating in Singapore. * **European Securities and Markets Authority (ESMA) MiFID II** suitability assessments for investment and financial advice. * **Dubai Financial Services Authority (DFSA) AML/CFT** rules for regulated entities in the UAE. * **Australian Transaction Reports and Analysis Centre (AUSTRAC)** KYC and AML obligations for reporting entities in Australia. * **Hong Kong Monetary Authority (HKMA)** customer due diligence standards for banks and financial institutions in Hong Kong. #### Custom policies and policy assurance You can also create **custom policies** to reflect your own compliance framework, internal rules, and risk controls. This gives you **policy assurance** across each verification journey. Every session is evaluated against defined requirements, which strengthens your audit trail and supporting evidence for regulators, auditors, and internal review teams. Results are available in the **Portal**, through the **API**, and through **webhooks** for real-time decisioning. {% hint style="info" %} Contact your **Account Manager** to confirm support for specific policies in your jurisdiction, or to request implementation of bespoke internal policies. {% endhint %} ### Policy evaluation in workflows Policies are attached to [workflow templates](/documentation/product-guides/compliance-studio/workflows.md#creating-workflows). Not all templates will include them. When a customer completes a workflow session, captured data and checks undergo **policy evaluation**. Evaluation runs against the policies assigned to the template. Results are generated in real time. They show whether the session meets requirements or requires further review. In the Portal, outcomes appear under **Policy Assurance**. This is your compliance policy engine’s evidence for each decision. This delivers consistent, repeatable policy enforcement across verification journeys. It reduces manual interpretation by compliance teams. It also improves auditability for KYC and AML programs.
ComplyCube workflow template showing assigned compliance policies for KYC/AML decision rules

Workflow Template with Compliance Policies

***
Workflow session policy assurance results showing real-time policy evaluation outcomes

Workflow Session with Policy Evaluation Results

### KYC and AML policy use cases Use policies when you need consistent rule-based outcomes across customer journeys: * **KYC onboarding**: Apply jurisdiction-specific rules without rebuilding workflows. * **AML compliance**: Align decisions to frameworks like **FATF** and local AML regulations. * **CDD / EDD**: Trigger stricter evidence requirements for higher-risk customers. * **Industry requirements**: Enforce suitability checks (for example **MiFID II**). * **Tenancy and employment**: Run eligibility checks like **Right to Rent**. ### Frequently asked questions
How are compliance policies applied in a workflow? Compliance policies are attached to a [workflow template](/documentation/product-guides/compliance-studio/workflows.md). When a customer completes a workflow session, ComplyCube evaluates the captured data and check results against those assigned policies in real time.
What does a policy evaluation result mean? A policy evaluation result shows whether the workflow session meets the defined compliance requirements or needs further review. These outcomes appear under **Policy Assurance** and give teams clear, auditable evidence for each decision.
Can I use my own internal compliance rules? Yes. You can implement **custom policies** alongside supported regulatory and industry policies to reflect your internal compliance framework, risk rules, and review requirements.
Do compliance policies replace AML screening or identity checks? No. Compliance policies evaluate the outputs of a verification journey. They do not replace the underlying checks used to collect evidence. You typically use them with services like [AML Screening Check](/documentation/product-guides/watchlist-pep-and-adverse-media/aml-screening-check.md), [Document Check](/documentation/product-guides/identity-verification/document-check.md), and [Smart Forms](/documentation/product-guides/compliance-studio/smart-forms.md).
Can compliance policies support jurisdiction-specific KYC and AML requirements? Yes. Policies can be aligned to local regulations and industry frameworks, which helps you apply jurisdiction-specific KYC and AML rules without rebuilding each workflow from scratch.
Where can compliance teams review policy decisions? Teams can review policy outcomes in the **Portal**, retrieve them through the **API**, or receive them through **webhooks** for downstream decisioning and audit workflows.
### Related topics * [Workflows](/documentation/product-guides/compliance-studio/workflows.md) to attach policies to workflow templates. * [Smart Forms](/documentation/product-guides/compliance-studio/smart-forms.md) to capture declarations and supporting documents. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.complycube.com/documentation/product-guides/compliance-studio/policies.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.