Join our Newsletter — 33% off our NHI Course

Video KYC in Spain: what it means for IAM and compliance teams

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 21735
Topic starter  

TL;DR: SEPBLAC-aligned Video KYC in Spain now requires real-time recording, auditable evidence, and human review in the onboarding flow, according to Sumsub. For identity teams, the shift is not the video itself but the governance burden around proof, oversight, and regulator-ready records.

Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub Launches SEPBLAC-aligned Video KYC to Support Regulated Onboarding in Spain”.

Key questions

Q: How should teams govern recorded video KYC in regulated onboarding flows?

A: Teams should govern recorded video KYC as a regulated evidence process, not just an identity check.

Q: What should security and compliance teams do first when onboarding evidence is not defensible?

A: First, identify which onboarding steps create the legal record and which only support the user journey.

Q: What are the signs that human review in video KYC is too shallow?

A: Warning signs include approvals that cannot be tied to specific recorded evidence, reviewer decisions that are not logged, and exception handling that bypasses the normal verification path.

Practitioner guidance

  • Define the evidence standard for onboarding Specify which artefacts must be captured, retained, and retrievable for each approved identity verification session.
  • Separate capture from approval Make the human review step mandatory before account activation for regulated Spanish onboarding flows.
  • Map jurisdiction-specific requirements Compare Spain’s recorded verification expectations with your global onboarding policy so local evidence rules do not get diluted into a single generic workflow.

Bottom line: Spain’s Video KYC story is really about evidence quality, not just digital onboarding.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 2 days ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21568
 

Spain’s video KYC requirement is an auditability problem first and an identity problem second. The real change is that onboarding now has to produce defensible evidence, not just a pass or fail outcome. That pushes identity verification into the same governance conversation as AML recordkeeping, operator oversight, and retention control. Practitioners should treat recorded verification as a regulated control surface, not an optional compliance enhancement.

A few things that frame the scale:

  • The average estimated time to remediate a leaked secret is 27 days, despite 75% of organisations expressing strong confidence in their secrets management capabilities, according to The State of Secrets in AppSec.
  • Only 44% of developers are reported to follow security best practices for secrets management, exposing a significant developer behaviour gap.

A question worth separating out:

Q: What should compliance teams check before scaling video KYC?

A: Compliance teams should check whether the verification record is complete, retained correctly, and restricted to authorised reviewers. They should also confirm that the workflow matches the regulatory model in each market, because a reusable onboarding journey can still fail local evidence requirements if the governance rules do not travel with it.

👉 Read our full editorial: Spain video KYC raises the bar for auditable onboarding controls



   
ReplyQuote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21568
 

Recorded onboarding is becoming an evidentiary control, not a convenience layer. The core change in Spain is that identity verification must now produce artefacts that survive review, challenge, and regulatory scrutiny. That shifts video KYC from a user-experience feature into part of the control stack for IAM and compliance. Practitioners should treat recording, review, and retention as a single governed workflow.

A question worth separating out:

Q: How do Spain’s video KYC rules change AML onboarding accountability?

A: They make accountability traceable across the session, the reviewer, and the retained evidence set. That means compliance teams must be able to show who approved the applicant, what they reviewed, and how the result aligns with recorded identity verification expectations.

👉 Read our full editorial: Spain video KYC raises the bar for auditable onboarding controls


This post was modified 2 days ago by NHI Mgmt Group

   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.