Home / Standards & methodology
The standards behind our work, and how we hold ourselves to them.
Our reviews reference internationally recognized frameworks. Our own quality controls make sure every report is accurate, sourced and fair.
Frameworks we reference
We use these standards to shape scope and assess what we find. Referencing a standard doesn’t mean D2RD is certified against it.
| Framework | Issued by | How we use it |
|---|---|---|
| FATF Recommendations | Financial Action Task Force | The international benchmark for risk-based AML and counter-terrorist-financing controls, including customer due diligence. |
| OFAC sanctions programs | US Department of the Treasury | Screening against the Specially Designated Nationals list and sectoral and country programs, including the 50 percent rule. |
| UN Security Council Consolidated List | United Nations | Screening against UN-mandated sanctions designations. |
| EU Consolidated Financial Sanctions List | European Union | Screening for EU asset freezes and restrictive measures. |
| UK Sanctions List | UK Government (FCDO / OFSI) | Screening against UK designations and financial sanctions. |
| Bank Secrecy Act & FinCEN CDD Rule | US FinCEN | Customer identification, beneficial ownership and ongoing monitoring expectations for US institutions. |
| FCPA & UK Bribery Act 2010 | US DOJ / SEC; UK | Anti-bribery due diligence on third parties, agents and transaction counterparties. |
| ISO 37001 | International Organization for Standardization | Anti-bribery management systems. Used as a reference when reviewing anti-bribery programs. |
| ISO 37301 | International Organization for Standardization | Compliance management systems. Used to structure program gap assessments. |
| Wolfsberg Principles | The Wolfsberg Group | Industry guidance on KYC, correspondent banking and financial crime risk. |
| IIA Global Internal Audit Standards & COSO | Institute of Internal Auditors; COSO | The basis for how we plan, perform and report internal audit work. |
| GDPR & UK GDPR | EU; UK | How we lawfully collect, use, store and delete personal data during research. |
Our quality controls
How we make sure a report can be relied on.
- Written scope agreed before work begins
- Every finding cited with source and retrieval date
- Source reliability graded on a consistent scale
- Potential matches confirmed with at least two identifiers
- Second-analyst review of every report before release
- Version-controlled reports with a clear audit trail
Data protection
We collect only the personal data needed for the agreed purpose, and handle it in line with applicable privacy laws, including GDPR and UK GDPR where they apply.
Engagement data is encrypted in storage and transit, access is limited to the engagement team, and records are deleted at the end of the agreed retention period. Read our privacy policy.
Tell us what you need to verify.
Share the name, the jurisdictions involved and the decision in front of you. We’ll come back with a proposed scope, timeline and fee.
Call+1 954 372 0334
Email[email protected]