GOVERNANCE AND CONTROL
A rigorous framework protecting clients, partners and the integrity of operations.
Public version · Updated: 25 September 2026
The risk and compliance function has access to management and coordinates the framework with operational and technology teams. Responsibilities are defined, controls are documented and action plans are tracked. Sensitive decisions are reviewed at the appropriate level to protect transaction integrity.
Risk assessment considers the customer, business activity, beneficial owners, countries, products, channels and transaction characteristics. It determines due diligence, supporting documentation and approval requirements. Assessments are reconsidered during periodic reviews and following events that may change the risk profile.
Individual identity, corporate existence, declared activities, ownership structures and controlling persons are verified using appropriate information and sources. Representatives’ authority is reviewed. The file establishes who BBS is dealing with and on whose behalf transactions are conducted.
The purpose of the relationship, economic rationale of transactions and source of funds are assessed according to risk. Additional documents are collected where transaction characteristics or amounts warrant them. Inconsistencies, opaque structures and unusual behaviour are reviewed and escalated to compliance.
Relationship and transaction parties are screened against applicable sanctions lists, including UN lists and, as relevant to the activity, Canadian, OFAC, European Union and UK lists. Potential matches are reviewed. Politically exposed person status triggers appropriate assessment and due diligence and is not treated as evidence of wrongdoing.
Higher-risk situations receive additional scrutiny of business activity, funds, ownership and involved parties. Approvals and any restrictions are recorded. Where risk cannot be managed or information remains insufficient, the relationship or transaction is declined, deferred or restricted under the applicable framework.
Flows are reviewed against known activity, expected volumes and available information. Unusual, structured or inconsistent transactions and those linked to prohibited activities are analyzed. Alerts and their handling are recorded; transactions may be suspended while checks are completed, subject to applicable conditions.
Initial and periodic due diligence assesses partners’ identity, authorizations, governance, controls and risks. Agreements define each party’s responsibilities. Incidents, business changes or regulatory developments may lead to additional review, corrective actions or changes to the collaboration scope.
Customer knowledge is maintained throughout the relationship. Documents and information are reviewed according to risk and significant events, including changes in management, beneficial ownership, activities or operating countries. Customers and partners are contacted when information requires clarification or renewal.
Situations subject to reporting obligations are assessed and reported to the competent authority under the relevant jurisdiction’s rules. BBS responds to lawful requests and preserves relevant records. Confidentiality requirements attached to certain reports may limit the information disclosed to customers about checks or decisions.
Identification files, supporting documents, analyses, decisions and audit records are securely retained for applicable periods. Access is limited to authorized people according to their roles. Disclosure is governed by legal obligations, service needs and data protection rules.
Teams receive awareness guidance suited to their roles and encountered risks. Controls, framework reviews, incidents and regulatory changes inform procedure updates. Identified issues lead to actions tracked through closure, with attention to the practical effectiveness of the measures taken.
BBS INVEST GROUP LTD is registered as a Money Services Business with FINTRAC in Canada. Services are provided subject to applicable authorizations in each jurisdiction.
Required reports are made where an obligation applies. Certain restrictions or checks cannot be explained when statutory confidentiality rules prohibit disclosure.
This public framework works alongside internal procedures, local obligations and service-specific contractual terms. It does not replace individual checks.
LET’S MOVE YOUR PROJECT FORWARD
Tell us about your business, the countries involved and your needs. Our teams will help assess your project.