Trust and company service providers can introduce new people, companies and legal-arrangement roles throughout a continuing relationship. Formation, registered-office services, trust or foundation administration, nominee appointments, officer changes, ownership transfers and payments do not create the same screening population.
The practical control question is: which supplied party enters the service at each event, what sanctions or PEP question follows, what evidence is retained and which decision remains with the TCSP?
Checklynx can screen supplied people and companies against configured sanctions, PEP, wanted-list and adverse-media sources. It does not discover every owner, authenticate identity documents, prove a legal role, determine ownership or control, verify source of funds or wealth, monitor transaction behaviour, file reports or make final legal and service decisions.
Define the service before defining the screening population
The term trust or company service provider (TCSP) is regulator-native in the United Kingdom and used in UAE federal DNFBP material. ADGM uses Company Service Provider (CSP). Germany and Spain define the relevant activities in their own legal language rather than relying on the English acronym.
The common operating problem is broader than a label. A firm may form companies, provide a registered office, arrange directors or secretaries, administer a trust or foundation, provide nominee services or maintain a company after formation. The party set can change at every stage.
The firm's authorised legal and compliance owners must determine whether each activity is regulated, which supervisor and sanctions regimes apply, and which parties enter the approved control. Screening software supports that process; it does not establish the legal perimeter.
Keep connected controls separate
| Control | Question it answers | Checklynx boundary |
|---|---|---|
| Identity verification | Is the supplied person or company who it claims to be? | Checklynx does not authenticate documents, biometrics or registry records. |
| Beneficial-owner identification | Who legally owns or controls the customer or arrangement? | Checklynx screens supplied owners and controllers; it does not independently discover or legally determine them. |
| Sanctions screening | Does a supplied person or company produce a plausible candidate from an enabled source? | A candidate is not a final identity, ownership, control or legal conclusion. |
| PEP and adverse-media screening | Does supplied identity data indicate political exposure or relevant published risk information? | A result is not a prohibition, accusation or automatic rejection. |
| Customer and service risk assessment | What diligence and controls are proportionate to the relationship? | Screening evidence can inform the decision; Checklynx does not replace the complete AML/CFT programme. |
| Transaction monitoring | Does activity over time show suspicious patterns? | Behavioural transaction monitoring is outside Checklynx's stated scope. |
| Reporting and legal action | Must the firm reject, freeze, report, seek a licence or end a service? | The TCSP's authorised legal and compliance process owns the decision. |
For the generic matching lifecycle, use the AML name-screening guide. For ownership inputs, use the UBO and related-party guide.
Use a TCSP party-and-event screening matrix
This matrix is a control-design model. It does not claim that every jurisdiction requires every party below to be screened with software.
| Service event | Supplied party and useful data | Screening question | Evidence retained | Decision remaining with TCSP | Outside Checklynx |
|---|---|---|---|---|---|
| Prospective client or engagement acceptance | Individual or company client and authorised representative; names, role and available identifiers | Does a supplied client or representative produce a plausible sanctions or PEP candidate? | Inputs, event, sources, candidates, identifiers and rationale | Accept, seek more information, apply enhanced diligence or escalate | Identity verification, purpose, SOF/SOW and final acceptance |
| Company formation | Founders, proposed shareholders, directors, controllers and representatives | Does a supplied formation party create sanctions or PEP concerns before the service proceeds? | Party-role map, identifiers, results and reviewer record | Whether formation may proceed and what further diligence is required | Incorporation, registry verification and legal ownership determination |
| Registered-office or company-secretarial service | Company, directors, supplied owners/controllers and authorised users | Does the serviced company or a supplied connected party require review? | Current population, role source, results and approval history | Start, continue, restrict or escalate the service | Proof that corporate records are complete or current |
| Trust or foundation formation and administration | Settlor/founder, trustee/council member, protector/guardian, identified beneficiaries and supplied controllers | Does an identified role-holder produce sanctions or PEP concerns? | Party-role matrix, input source, result and disposition | Legal/risk treatment and whether the service may proceed | Trust-law analysis and determining the legally complete party set |
| Nominee service | Nominee plus supplied appointing or underlying parties | Does the nominee or a supplied underlying party produce a candidate? | Relationship context, identifiers and screening outcome | Whether the arrangement is understood and permissible | Discovering concealed principals or proving the arrangement |
| Ownership, control or officer change | New shareholder, UBO, controller, director or representative | Does the changed population introduce new sanctions or PEP exposure? | Before/after role data, effective date, result and rationale | Reassess, seek diligence, continue or escalate | Legal ownership/control determination |
| Shelf-company acquisition or transfer | Buyer, seller, company and supplied related parties | Does the transfer introduce a candidate or changed-risk party? | Transfer event, party roles, results and case record | Whether transfer or continued service may proceed | Title/registry verification, legitimacy of funds and transaction legality |
| Referral or intermediary relationship | Introducer, lawyer, accountant, agent or other professional intermediary | Is the intermediary in the approved third-party screening scope? | Referral source, role, reason, result and approval | Accept reliance/referral or apply further controls | Professional licensing and complete third-party due diligence |
| Payment, distribution or disbursement | Identified payer, payee, beneficiary or other named payment party | Does the supplied payment party produce a sanctions candidate? | Event reference, party role, input, result and decision | Determine the action required by applicable law and policy, including whether to pause and escalate for freezing, reporting or licensing analysis | Behavioural monitoring and final legal/licensing decision |
| Sanctions-list, PEP-profile or master-data change | Existing approved screening population with stable internal IDs | Does changed source or relationship data affect a prior disposition? | Monitoring event, prior outcome, new evidence and reviewer action | Retain, reopen or escalate the case | Automatic termination, freezing or reporting decision |
Treat company formation as a multi-party event
Formation work can introduce a client, proposed company, founders, shareholders, directors, controllers and representatives before the entity begins trading. Screen only the population supported by applicable law, the firm's risk assessment and its documented policy, but preserve each supplied role.
Do not collapse the population into one company-name result. A clear company result does not establish that all relevant people were identified, that ownership information is complete or that the proposed structure is lawful.
Reassess registered-office and administration relationships
Registered-office, company-secretarial and administration services often continue after formation. The initial screening population can become stale when directors, shareholders, controllers, representatives, addresses or service scope change.
Define which upstream changes create a new check and which parties remain in ongoing monitoring. A source update and a customer-master-data change are different events even when both reopen the same case.
Map trust and foundation roles without claiming legal completeness
Depending on the arrangement and applicable law, supplied parties can include the settlor or founder, trustee or council member, protector or guardian, identified beneficiaries and other controllers. Preserve the legal or operational role supplied by the TCSP because it affects the review context.
Checklynx does not decide who legally qualifies for a role or whether the supplied population is complete. Class beneficiaries or future beneficiaries should enter screening only when the TCSP identifies a person and its approved process brings that person into scope.
Keep nominee screening separate from principal discovery
A nominee arrangement can introduce the nominee and the appointing or underlying parties known to the TCSP. Screening those supplied identities does not discover a concealed principal or prove that the arrangement has been fully understood.
The TCSP remains responsible for the identification, verification, purpose, ownership/control and legal analysis required by its framework. Checklynx returns screening evidence for the supplied parties.
Put ownership and officer changes into the workflow
New shareholders, beneficial owners, controllers, directors or representatives can change the risk of an existing relationship. Connect the TCSP's authoritative change process to screening rather than assuming the original onboarding result remains current.
The UBO and related-party guide owns the deeper separation between ownership information and screening. Checklynx does not make the final legal sanctions ownership/control determination.
Screen intermediaries under a defined third-party policy
Introducers, lawyers, accountants, agents and other professional intermediaries are not automatically interchangeable with the TCSP's customer. Define why the intermediary is screened, what relationship it has to the service and which owner approves the result.
Use the third-party sanctions policy guide for population governance and the supplier and third-party guide for the wider lifecycle.
Keep named payment-party screening separate from monitoring
A formation fee, capital payment, distribution, refund, commission or other disbursement can introduce an identified payer, payee or beneficiary. Transaction screening can check the supplied party at the event before the TCSP's next step.
That is not behavioural transaction monitoring. Checklynx does not detect structuring, unusual velocity, circular flows or suspicious patterns over time, and it does not make the final freeze, reject, report or licensing decision.
Apply jurisdiction-specific terminology and boundaries
United Kingdom
HMRC uses Trust or Company Service Provider (TCSP) for activities including company formation and shelf-company services; acting or arranging directors, secretaries, partners, trustees or nominee shareholders; and providing registered, business, correspondence or administrative addresses with related services.
HMRC also separates accountancy-service-provider activity from TCSP activity when one business performs both. That supports separate Checklynx guides: use the accounting and tax-adviser guide for accounting/tax engagements and this guide for TCSP events.
UK financial sanctions remain a separate legal layer. TCSP status is not the reason every sanctions restriction applies, and HMRC supervision does not turn software into a universal statutory method.
Germany
Germany's GwG uses the activity-based category Dienstleister für Gesellschaften und für Treuhandvermögen oder Treuhänder in section 2(1) no. 13, subject to its statutory conditions. The enumerated services include formation, management or equivalent roles, addresses with related services, trustee activity and nominee-shareholder arrangements.
The German workflow should separate Geldwäscheprävention, Sanktionsprüfung, PEP treatment, identification of wirtschaftlich Berechtigte and the separate legal effect of EU/German financial sanctions. An ordinary consultant, accountant or bookkeeper should not be described as falling within this category without an activity-based basis.
Spain
Spain's Ley 10/2010 describes the relevant activities in Article 2.1(o), including company formation, corporate functions, registered or administrative addresses, trustee functions and nominee-shareholder functions. The Spain-native term is prestadores de servicios a sociedades y fideicomisos; TCSP is secondary international terminology.
The law separately addresses titular real and personas con responsabilidad pública. Screening supplied parties can support those controls, but it does not identify or verify the legal beneficial owner and does not turn a PEP result into a prohibition.
United Arab Emirates
UAE federal material identifies trust or company service providers within the DNFBP population. The current top-level federal AML/CFT/CPF framework is Federal Decree-Law No. 10 of 2025 and Cabinet Decision No. 134 of 2025. When defining the current federal perimeter, confirm detailed activity wording against those current instruments rather than relying on the superseded 2018/2019 framework.
DIFC and ADGM require separate treatment. ADGM uses Company Service Provider (CSP) for its dedicated framework. DFSA sanctions guidance applies within the DIFC perimeter and should not be transferred automatically to every mainland corporate-service firm.
Choose a delivery method for each controlled event
- Use the screening portal for analyst-led checks.
- Use CSV batch screening for an existing supplied customer, company, trust or related-party population.
- Use the real-time screening API for repeatable formation, appointment, ownership-change or payment events.
- Use ongoing monitoring for an approved maintained population and supported source/profile changes.
- Use case management to connect evidence, investigation, escalation and disposition.
The TCSP still owns population completeness, intervention points, failure handling, reviewer authority and final action. For deeper implementation design, see the real-time sanctions-screening API architecture guide.
Preserve evidence and the human decision handoff
An auditable record should show:
- the legal entity, service and event;
- every screened party's supplied role and identifiers;
- the upstream source of the party and relationship data;
- the applicable policy and enabled source categories;
- the potential matches and evidence available at the time;
- the reviewer, rationale, escalation and attachments;
- the separate owner of identity, ownership, CDD, sanctions, reporting and service decisions; and
- the final outcome plus later monitoring or change events.
This record supports reconstruction. It does not prove that the supplied population was complete or that the final legal conclusion was correct.
What Checklynx does not decide
Implementation checklist
Frequently asked questions
What is a trust or company service provider?
The exact legal definition depends on the jurisdiction and activity. It commonly includes some combination of company formation, registered-office or administration services, arranging corporate officers, trustee or similar roles and nominee-shareholder services. Confirm the applicable statutory definition and supervisor.
Should TCSPs screen every director, shareholder and beneficiary?
There is no universal software-screening rule for every role in every jurisdiction. Define the population under applicable law, risk assessment and policy. Checklynx can screen the identified parties supplied to it.
Can Checklynx identify a beneficial owner?
No. Checklynx can screen a beneficial owner, controller or related party after the TCSP or an upstream process identifies and supplies that person or company.
Is a PEP result a reason to reject a client or structure?
No. PEP status is risk information, not a sanctions designation, accusation or automatic prohibition. The TCSP must apply the due-diligence and decision process required by its framework.
Can Checklynx screen trust and foundation parties?
It can screen supplied settlors or founders, trustees or council members, protectors or guardians, identified beneficiaries and controllers. It does not decide whether those roles are legally correct or complete.
Is payment-party screening the same as transaction monitoring?
No. Payment-party screening checks supplied names and identifiers at a defined event. Behavioural transaction monitoring analyses patterns over time and is outside Checklynx's stated scope.
Can a TCSP use batch screening for an existing book?
Yes. A defined supplied population can be screened through CSV batch workflows. The TCSP remains responsible for data quality, population completeness, review and downstream decisions.
Does a clean result prove that a company or trust service is lawful?
No. It does not prove identity, role, ownership, source of funds or wealth, population completeness, legitimacy of the structure or legal permissibility of a service, transfer or payment.
Explore Checklynx sanctions screening software for portal, API, batch, monitoring and case-review workflows.
Official sources
- HMRC: AML guidance for trust or company service providers
- HMRC: Check whether a TCSP needs money-laundering supervision
- UK: Money Laundering Regulations 2017
- OFSI: UK financial-sanctions general guidance
- Germany: GwG section 2—regulated persons and activities
- Germany: GwG section 3—beneficial ownership
- Germany: GwG section 15—enhanced due diligence
- Spain: Ley 10/2010
- Spain: Real Decreto 304/2014
- CBUAE: Current UAE AML/CFT framework
- UAE Ministry of Economy and Tourism: DNFBP categories
- DFSA: AML, CTF and sanctions obligations
- ADGM: Company Service Providers