Winnow Consultant
Winnow
Consultant · UAE
Winscan · CDD Software

Customer due diligence software for Dubai & the UAE

Winscan automates the full CDD lifecycle — KYC onboarding, identity & UBO verification, sanctions, PEP & adverse-media screening, risk rating, enhanced due diligence and periodic review — in one UAE-hosted platform with a defensible audit trail.

  • KYC onboarding & identity checks
  • UBO verification & screening
  • Risk-based CDD & EDD
  • Ongoing monitoring & KYC refresh
A UAE compliance officer running customer due diligence in Winscan
100+Sanctions lists & watchlists (UN·OFAC·EU·HMT…)
1 dayTypical account setup
24/7Ongoing rescreening & alerts
100%Audit-trailed CDD decisions

Every CDD step, in one auditable workflow

UAE regulation requires regulated businesses to know their customers — verify who they are, who ultimately owns and controls them, whether they appear on a sanctions or PEP list, how risky they are, and whether that picture is still true months later. Done across spreadsheets, email and separate screening tools, customer due diligence is slow, inconsistent and hard to evidence.

Winscan replaces that with a single workflow. From one screen your team onboards a customer, verifies identity and beneficial ownership, screens against sanctions, PEP and adverse-media sources, assigns a risk rating, triggers enhanced due diligence where the rules require it, and schedules the next periodic review — with every decision logged into a defensible audit trail.

Winscan is built by Winnow Management and Tax Consultant LLC, a UAE AML and compliance consultancy — so the platform can stand alone, or operationalise a CDD framework our consultants design and tune for your sector. It is the due-diligence engine inside our wider AML software; explore the full Winscan platform for a deeper tour.

winscan.app/cases/CDD-2041
Case CDD-2041 · Hammad Salem Naser
Due-diligence workflow
In progress
  1. Onboarding & KYC
    Captured · 09:42
  2. Identity verified
    Emirates ID + OCR
  3. UBO verified
    2 owners screened
  4. Sanctions & PEP screening
    No true matches
  5. Customer risk rating
    Medium — in review
    Now
  6. Enhanced due diligence
    Pending trigger
  7. Periodic review
    Scheduled · 12 mo
18 actions logged to the audit trail✓ defensible
CDD capabilities

Everything customer due diligence demands, in one platform

From the first identity check to the next periodic review — the whole due-diligence lifecycle.

KYC & customer onboarding

Structured onboarding for individuals and entities with document capture, source-of-funds and source-of-wealth checks.

Identity verification

Capture and verify identity documents and Emirates ID with OCR, so every customer is who they claim to be before you onboard.

UBO & ownership verification

Map and verify ultimate beneficial owners and control structures for corporate customers, and screen each owner individually.

Sanctions, PEP & adverse media

Real-time and batch screening across OFAC, EU, UN, HMT and UAE lists with fuzzy, transliteration-aware matching.

Customer risk rating

Configurable risk scoring across customer, product, channel and geography, with automatic re-rating on triggers.

Enhanced due diligence (EDD)

Auto-flag higher-risk customers for EDD, capture extra evidence and route to senior-management sign-off.

Ongoing monitoring & KYC refresh

Nightly rescreening, delta alerts and risk-based periodic reviews keep every customer record current.

Simplified due diligence (SDD)

A streamlined SDD path for verified low-risk customers — lighter, risk-based checks where the rules allow, so effort focuses on higher-risk cases.

API & bulk upload

REST APIs and bulk CSV upload embed due diligence inside your onboarding flow and re-baseline an existing book in one pass.

winscan.app/customers/new
HN
Hammad Salem Naser
Individual · New customer
Pending CDD
Nationality
United Arab Emirates
ID type
Emirates ID
ID number
784-1990-••••••-•
Date of birth
14 Mar 1990
Source of funds
Salary / employment
Preliminary risk
Medium
Identity capturedUBO: n/a (individual)Screening ready
Proceed to CDDSave draft
One platform

Onboarding to ongoing review, without leaving the screen

No more re-keying customer data between an onboarding form, a screening tool and a spreadsheet of review dates. Winscan keeps every CDD step — and every decision — in one place, ready to show an auditor or regulator.
  • Verify identity & Emirates ID at onboarding
  • Capture & verify UBO and ownership chains
  • Screen sanctions, PEP & adverse media
  • Risk-rate every customer automatically
  • Trigger EDD on higher-risk customers
  • Schedule periodic KYC refresh by risk

Who uses Winscan for CDD

Trusted by regulated entities across the Emirates.

Gold & precious metals dealers (DPMS)
Real estate brokers & agents
Auditors & accounting firms
Law firms & corporate service providers
Exchange houses & money service businesses
Finance companies & lenders
Insurance companies & brokers
Fintechs, VASPs & payment providers
DIFC, ADGM & DMCC free-zone entities
How CDD works in Winscan

From new customer to ongoing review

A risk-based due-diligence flow that runs the same way every time.

01

Onboard & verify

Collect customer and UBO details, verify identity and documents, and capture source of funds — all in a structured flow.

02

Screen & rate

Screen against sanctions, PEP and adverse-media lists, then assign a risk-based rating that sets the depth of due diligence.

03

Apply EDD

Where risk is high, Winscan triggers enhanced due diligence — extra evidence, closer scrutiny and senior sign-off.

04

Monitor & review

Rescreen nightly, alert on changes and schedule periodic KYC refresh by risk so the customer picture never goes stale.

Why Winscan as your CDD software in Dubai

The whole CDD lifecycle

Onboarding, identity, UBO, screening, risk rating, EDD and review in one place — no disconnected tools or spreadsheets.

Built for the UAE

UAE local lists, Arabic/English, Emirates ID capture and UAE-resident hosting — not a foreign tool retrofitted to local rules.

Due diligence that stays current

Nightly rescreening and risk-based periodic review mean a customer turning high-risk doesn't slip past your team.

Evidence on demand

Every CDD decision is logged into an audit trail you can hand straight to a regulator or auditor.

Fits your onboarding stack

REST APIs and bulk upload embed CDD into core banking, LOS, ERP and the KYC tooling you already run.

Software + expertise

Backed by the AML consultants at Winnow Management and Tax Consultant LLC, so your CDD tooling and your compliance programme actually match.

Frequently asked

Customer due diligence software — your questions

What compliance teams ask before choosing a CDD platform.

What is customer due diligence (CDD) software?

Customer due diligence software automates the checks a regulated business must perform before and during a customer relationship — verifying identity and beneficial ownership, screening against sanctions, PEP and adverse-media lists, scoring customer risk and keeping that picture current over time. Winscan brings all of these CDD steps into one UAE-hosted platform with a complete, defensible audit trail, so your team is not stitching together spreadsheets, email and disconnected tools.

What is the difference between CDD and enhanced due diligence (EDD)?

Standard CDD is the baseline you apply to every customer — identity verification, beneficial-ownership checks, screening and a risk rating. Enhanced due diligence (EDD) is the deeper layer you apply when a customer is higher risk — for example a PEP, a high-risk jurisdiction, a complex ownership structure or unusual source of funds. Winscan automatically flags when EDD is required based on your risk model and captures the extra evidence — source of funds, senior-management sign-off and closer ongoing monitoring — against the customer record.

Does the CDD software screen against sanctions and PEP lists?

Yes. Winscan screens every customer and beneficial owner against global sanctions lists (UN, OFAC, EU, HMT), UAE local lists, a comprehensive PEP database and adverse-media sources, using fuzzy and transliteration-aware matching. Screening runs at onboarding, in bulk across your existing book, and continuously thereafter so a customer who becomes sanctioned or PEP-listed is flagged automatically.

Can it verify beneficial ownership (UBO) and entity structures?

Yes. Winscan captures and verifies ultimate beneficial owners for corporate customers, records the ownership and control structure, and screens each beneficial owner individually — so you meet UAE UBO obligations and never onboard an entity whose true owners you have not checked.

How does the software handle customer risk rating?

Winscan applies a configurable, risk-based scoring model across customer, product, channel and geography factors, and assigns each customer a risk rating that drives the level of due diligence and the monitoring frequency. Ratings re-calculate automatically when something changes — a new screening hit, a jurisdiction change or a periodic review — so risk classifications never go stale.

Does it support ongoing monitoring and periodic review?

Yes. CDD is not a one-time check. Winscan runs nightly rescreening with delta alerts and schedules periodic reviews (KYC refresh) based on each customer's risk rating — high-risk customers more often than low-risk — so records stay current and you can evidence ongoing due diligence to a regulator or auditor.

Is the customer due diligence software hosted in the UAE?

Yes. Winscan runs on UAE-resident infrastructure with role-based access control, two-factor authentication and full audit logging — aligned with UAE data-protection and regulatory expectations.

Can the CDD software integrate with our onboarding systems?

Yes. Winscan exposes REST APIs for onboarding, screening and case events, and supports bulk CSV upload to re-baseline an existing customer book. We routinely connect it to core banking, loan-origination, ERP and existing KYC/CDD tooling so due diligence happens inside your current onboarding flow.

Who needs customer due diligence software in the UAE?

Any UAE entity subject to AML/CFT obligations — DNFBPs such as gold and precious-metals dealers, real-estate brokers, auditors, law firms and corporate service providers, as well as other regulated sectors. If you must perform KYC and CDD on your customers and evidence it to a regulator, Winscan operationalises that obligation.

Do you offer the software with compliance consulting?

Yes. Winscan is built by Winnow Management and Tax Consultant LLC, a UAE AML and compliance consultancy. You can take the CDD software on its own, or combine it with our advisory so the platform operationalises a customer due diligence framework our consultants design and tune for your sector.

See CDD run end-to-end in Winscan

Book a demo and we'll walk through onboarding, identity & UBO verification, screening, risk rating and periodic review on your own data — then scope a rollout for your team.