Establishing secure connection…Loading editor…Preparing document…

Compliance Information for Patriot Act

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

COMPLIANCE INFORMATION FOR PATRIOT ACT

This Compliance Information and General Business Agreement (the Agreement) is made effective as of Effective Date: by and between Client Name: (the "Client") and Service Provider Name: (the "Provider").

WHEREAS

WHEREAS, the Provider provides products and services as set forth in the Scope of Work and the Client seeks to engage the Provider to perform such services in accordance with the terms of this Agreement; and

WHEREAS, in connection with the engagement, the Provider and Client must comply with anti-money laundering and counter-terrorist financing requirements, including those derived from the USA PATRIOT Act, and must collect and retain sufficient compliance information to verify identity and beneficial ownership and to substantiate due diligence measures.

WHEREAS, the parties agree to the terms and certifications below to permit Provider to perform onboarding, due diligence and ongoing compliance monitoring required by applicable law and internal controls.

SCOPE OF WORK

PAYMENT TERMS

TERM AND TERMINATION

The term of this Agreement commences on Start Date: and continues until End Date: unless earlier terminated in accordance with this section.

Either party may terminate this Agreement for material breach by the other party if such breach remains uncured thirty (30) days after written notice. Termination for cause shall not relieve the breaching party of liability for obligations accrued prior to termination.

PATRIOT ACT COMPLIANCE INFORMATION

The parties acknowledge that Provider is required to collect information to verify identity and to identify beneficial owners in accordance with applicable anti-money laundering laws. The Client must supply accurate information and supporting documentation as indicated below.






BENEFICIAL OWNERS / CONTROLLING PERSONS

Provide information for each individual who, directly or indirectly, owns 25% or more of the entity or otherwise controls the entity. If more space is required, attach an additional page with the same fields.

IDENTIFICATION DOCUMENTS AND DUE DILIGENCE

The Client certifies that the following documents are provided to the Provider for identity and beneficial ownership verification (check all that apply):






ANTI-MONEY LAUNDERING (AML) VERIFICATION

Provider will conduct reasonable AML screening and identity verification. Indicate whether initial verification has been completed:


CONFIDENTIALITY

All information provided by the Client to the Provider pursuant to this Agreement, including identity documents, beneficial ownership data and due diligence materials, shall be treated as Confidential Information. The Provider shall not disclose such information except to comply with legal or regulatory obligations, as required by a competent authority, or as otherwise permitted in writing by the Client. The Provider shall implement and maintain appropriate safeguards to protect Confidential Information against unauthorized access or disclosure.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction specified by the parties below. The parties consent to the exclusive jurisdiction of the courts in that jurisdiction for the resolution of disputes arising under this Agreement.

ENTIRE AGREEMENT

This Agreement, including all attachments and schedules executed contemporaneously, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, negotiations, representations and understandings, whether written or oral. No modification of this Agreement shall be effective unless in writing and signed by both parties.

CERTIFICATION

The undersigned certifies, under penalty of perjury and to the best of their knowledge, that the information provided in this form is true, correct and complete; that the Client will promptly notify the Provider of any material change to the information provided; and that the Client understands that the Provider may retain copies of identity documents and may conduct periodic updates and screening in order to satisfy legal and regulatory requirements.

Client — Print Name:

By:

Date:

Provider — Print Name:

By:

Date:

Enter text✕

What the Compliance Information for Patriot Act Is

The Compliance Information for Patriot Act is documentation that explains an organization’s customer identification and anti-money-laundering (AML) procedures required under the USA PATRIOT Act (Pub. L. 107-56) and related Bank Secrecy Act obligations (e.g., 31 U.S.C. §5318). It typically describes a firm’s Customer Identification Program (CIP), recordkeeping practices, beneficial ownership verification, and escalation paths for suspicious activity to satisfy federal AML/FinCEN expectations. The document is used by financial institutions, money services businesses, and covered entities to demonstrate policies, controls, and roles for PATRIOT Act compliance.

Why Accurate Patriot Act Compliance Information Matters

Clear compliance information reduces regulatory risk, supports consistent customer onboarding, and documents how your CIP and AML controls meet federal expectations. Accurate records also help when responding to examiners or audits and when demonstrating due diligence for high-risk customers.

Why Accurate Patriot Act Compliance Information Matters

Who Prepares and Relies on This Compliance Information

Regulators, auditors, and third-party risk reviewers rely on this material to assess whether an entity’s controls meet statutory and regulatory standards.

  • Banks and credit unions responsible for CIP, KYC, and SAR reporting.
  • Money services businesses and fintechs with AML program obligations.
  • Legal, risk, and operations teams that handle audits and regulator inquiries.

Stepwise Process to Complete the Compliance Information

Follow these steps in order to assemble and validate the Patriot Act compliance disclosure.

  • 01
    Gather Documents: Collect formation, ownership, and ID documents.
  • 02
    Populate Fields: Enter required data exactly per field guide.
  • 03
    Verify Identities: Run CIP checks and document outcomes.
  • 04
    Approve and Record: Sign, date, and store with audit trail.

How to Configure an Online Completion Workflow

Set up a digital workflow that enforces required fields, identity checks, and audit logging for each submission.

Field Configuration
Required Fields Make legal name, TIN, and beneficial owner fields mandatory
Identity Verification Integrate KBA or third-party ID verification services
Signer Authentication Use multi-factor or SMS code for authorised signers
Audit Trail Enable timestamps, IP logging, and downloadable certificates

Where the Completed Compliance Information Goes

Routing and storage decisions determine who reviews the form and where the record is retained for audit.

  • Internal Compliance Review: Compliance team reviews and signs off
  • Case File Attachment: Attach to customer KYC records
  • Regulatory Response: Provide copies for examiner requests
  • Long-Term Storage: Retain per record retention schedule

Digital Signing and Platform Requirements

Ensure the chosen platform can produce a tamper-evident signed record and retain metadata needed for audits and examinations.

  • Integrations: Salesforce, NetSuite, Microsoft 365, Google Workspace
  • File Formats: PDF, DOCX, HTML
  • Security: TLS in transit; AES-256 at rest

eSignature Vendors and Pricing Overview

Comparison of common eSignature vendors and key pricing or feature differences relevant to compliance workflows.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies by promotion Varies by promotion Varies by promotion Varies by promotion
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No

Key Security and Compliance Capabilities to Look For

Encryption: TLS 1.2/1.3 in transit; AES-256 at rest
Certifications: SOC 2 Type II and ISO 27001
Regulatory Support: ESIGN and UETA compliance
Healthcare: HIPAA support (BAA required)
FDA Records: 21 CFR Part 11 compliance available
Accessibility: WCAG 2.0 Level AA support

Primary Penalties and Legal Risks for Noncompliance

Civil Penalties: Fines under 31 U.S.C. §5318
SAR Failures: Regulatory fines and reputational harm
Recordkeeping Violations: BSA enforcement actions
Criminal Liability: Willful violations may trigger prosecution
Operational Impact: Account freezes or loss of correspondent relationships
Civil Litigation: Customer or third-party suits possible

Common Preparation Errors to Avoid

  • Incomplete beneficial ownership details: omitting natural persons or recording only corporate owners can cause regulator follow-up and penalties.
  • Incorrect or inconsistent TIN/EIN entries: mismatched tax identifiers often trigger backup withholding and compliance escalations.
  • Insufficient identity evidence: using only P.O. boxes or expired IDs weakens CIP and can delay onboarding or lead to SARs.
  • Poor audit trail retention: losing timestamps or signer metadata undermines your ability to demonstrate adequate controls during an examination.

Practical Best Practices for Accurate Completion

Adopt clear policies, keep evidence linked to records, and use systems that enforce required data and logging.

Enforce Mandatory Fields
Configure digital forms so legal name, TIN/EIN, beneficial owner data, and signer attestations cannot be bypassed. This reduces manual follow-up and ensures consistent intake for CIP and suspicious-activity monitoring.
Use Strong Identity Verification
Apply multi-factor or credential analysis for high-risk customers and keep verification results attached to the record, including the method and timestamp, so examiners can validate the process.
Maintain Tamper-Evident Records
Store signed records with cryptographic or audit-trail evidence showing actions, timestamps, and IP addresses. Retain the full trail so changes and access are reconstructible for audits.
Review Periodically
Schedule periodic reviews of CIP procedures, beneficial owner lists, and access logs. Update policies after regulatory changes or significant program findings to demonstrate continual compliance improvement.

FAQs and Troubleshooting for Patriot Act Compliance Information

Answers to common questions about preparing, signing, and storing Patriot Act compliance documentation.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users