From periodic to perpetual KYC (pKYC): why traditional models no longer work
04 September 2026For years, most institutions followed a well-established ritual: periodically refreshing KYC records. Every 1, 3, or 5 years, depending on risk level, teams would launch large-scale projects to update information often already known, request unchanged documents again, and reassess situations identical to the previous cycle.
This approach made sense in a more stable environment, where risks evolved slowly and volumes were manageable. But today, reality has changed.
However, customer profiles evolve faster, risk patterns are increasingly complex, regulatory requirements are tightening, and compliance team, already stretched thin, can no longer shoulder refresh campaigns that can span months. Perpetual KYC or pKYC addresses these challenges by focusing only on records that truly need updating.
💡 Key Takeaways
- Traditional KYC cycles are rigid, time-consuming, and often update unchanged records.
- pKYC with continuous monitoring focuses only on customers whose risk profile evolves.
- Intelligent platforms like Harmoney automate detection, prioritization, and updates, allowing compliance teams to focus on real risk.
- The result: more efficient workflows, reduced administrative burden, and a sustainable compliance framework.
What is pKYC?
Perpetual KYC (pKYC) is an approach to customer due diligence that replaces fixed review cycles with continuous, event-driven monitoring. Instead of reopening every customer file on a preset schedule, a pKYC system watches for specific triggers, such as a change in beneficial ownership, a new adverse media hit, or a transaction pattern that falls outside a customer’s expected profile, and updates only the records those triggers affect. This operationalises FATF's Recommendation 10 on Customer Due Diligence, which already requires institutions to conduct ongoing due diligence and scrutinise transactions throughout the business relationship, not only at onboarding.
The limits of periodic KYC
Periodic KYC follows a calendar logic: updates happen because the calendar dictates, not because risk demands it. This creates a mismatch between the KYC cycle and real risk dynamics. This system leads to several well-known inefficiencies:
- massive campaigns consuming nearly all team resources,
- many unchanged records processed unnecessarily,
- the risk of missing significant events between cycles,
- unnecessary friction with customers asked to provide documents identical to previous submissions,
- recurring operational pressure that exhausts teams.
Many institutions feel like they are “doing the same task on repeat,” with diminishing returns and growing frustration.
The paradigm shift to perpetual KYC (pKYC): continuous monitoring instead of bulk refresh
Continuous monitoring changes the approach fundamentally.
Instead of periodic updates, it relies on systematic detection of events that could impact a customer’s risk profile, such as changes in beneficial ownership, negative media exposure, business activity shifts, or unusual transaction patterns.
This approach breaks free from the heavy cycles of the traditional model. The process becomes more agile, precise, and, above all, relevant: updates happen only when necessary. pKYC is not about “refreshing more often,” it’s about “acting only when risk changes.”
How AI transforms the approach: from raw data to intelligent vigilance
Perpetual or pKYC depends on a key technological capability: automatically identifying events that impact customer risk. Without automation, continuous monitoring would remain an attractive concept but impractical at scale.
AI makes this ambition operational by enabling:
- automatic monitoring of internal and external sources,
- intelligent interpretation of detected signals,
- prioritization of impacted customers,
- targeted record updates,
- automatic documentation of actions taken.
With this intelligence, teams no longer need to review the entire portfolio uniformly. They focus only on cases where a triggering event requires revisiting the customer’s profile. This is also why pKYC increasingly depends on orchestrating these signals into a coherent system rather than treating them as a series of disconnected alerts.
The structuring role of a platform like Harmoney
pKYC cannot exist without a platform capable of absorbing, orchestrating, and documenting continuous vigilance, whether the entity under review is a customer or a third-party counterparty. A platform like Harmoney plays a central role in this transformation.
It unifies monitoring, analysis, and action. It detects significant events, implements the appropriate controls, assists analysts in risk assessment, and maintains a complete audit trail, essential for inspections. The platform also ensures seamless integration between data, workflows, and teams, preventing information loss or process breaks. With Harmoney, continuous monitoring is no longer a theoretical or experimental task. It becomes an operational, sustainable, and compliant way of working.
The benefits quickly become clear:
- drastic reduction of unnecessary refreshes,
- teams refocused on records that truly evolve,
- faster response to risk changes,
- reduced administrative workload,
- a more reliable and transparent compliance framework for audits.
Harmoney does not replace human work: it creates the conditions for that work to be relevant, efficient, and sustainable.
Frequently asked questions
What is pKYC (perpetual KYC)?
pKYC is continuous, event-driven monitoring that updates a customer’s KYC file only when a change in risk is detected, rather than on a fixed periodic schedule.
How is pKYC different from periodic KYC?
Periodic KYC refreshes every customer file on a calendar-based cycle, regardless of whether anything has actually changed. pKYC instead watches for specific risk-relevant events and updates only the records those events affect.
What events typically trigger a pKYC review?
Common triggers include a change in beneficial ownership, negative media coverage, a shift in business activity, or transaction patterns that fall outside a customer’s expected profile.
Harmoney orchestrates the whole counterparty lifecycle, from onboarding to continuous monitoring, in one auditable flow. Human-in-the-loop, audit-ready, always in control. Want to see how that works for your AML and risk assessment processes? Talk to us or explore the Harmoney platform, or stay in touch via our newsletter ⬇️.