Where enhanced due diligence is not required, the nature and purpose of the business relationship or occasional transaction is established if the entity took reasonable steps to confirm an individual customer is who they claim to be, identified the customer's ML/TF risk from the KYC information reasonably available before service, and collected nature-and-purpose information proportionate to that risk. An individual who cannot obtain or access identity evidence for reasons beyond their control may be accepted if the entity took reasonable steps to confirm identity, identified the risk, collected and reasonably verified proportionate KYC information, and has policies to manage the extra risk from the missing evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.