Customer due diligence (CDD) risk assessment per MiCA Art. 74
Implemented: Art. 74 — Customer due diligence (CDD) with automated risk scoring and CDD level assignment (simplified/standard/enhanced)
Implemented: Art. 75 — Record retention tracking (5 years from submission per Art. 75(1))
Implemented: High-risk jurisdiction detection (EU high-risk list) and PEP/sanctions check automation
Out of scope: Art. 49 (EMT notification) — not applicable to CASP onboarding
Out of scope: Live sanctions database integration — uses simplified example list; production requires OFAC/UN API
Out of scope: Real identity verification (KYC provider integration) — UI demo only