AWS marketplace documentation change
Summary
Expanded KYC documentation with detailed regional requirements (EMEA, South Korea, Japan), restructured verification process into 3 steps with templates/best practices, added organization chart examples, and clarified document formatting requirements.
Security assessment
The changes enhance documentation about KYC compliance processes required by financial regulations (anti-money laundering directives), but there's no evidence of addressing a specific disclosed vulnerability or security incident. The updates focus on clarifying existing security/compliance procedures rather than patching a weakness.
Diff
diff --git a/marketplace/latest/userguide/complete-kyc-process.md b/marketplace/latest/userguide/complete-kyc-process.md index 337ae6016..bde9b8a09 100644 --- a//marketplace/latest/userguide/complete-kyc-process.md +++ b//marketplace/latest/userguide/complete-kyc-process.md @@ -5 +5 @@ -KYC requirementsSteps to complete the KYC processBest practices for completing the KYC processNext steps +Regional KYC requirementsKYC requirementsSteps to complete Step 1 of the KYC process - Business VerificationTemplates and best practices for completing the KYC processNext steps @@ -9 +9,31 @@ KYC requirementsSteps to complete the KYC processBest practices for completing t -The Know Your Customer (KYC) process is a verification procedure that helps AWS comply with regulatory requirements including EU anti-money laundering directives and Korean financial transaction reporting requirements. AWS Marketplace transactions through Amazon Web Services EMEA SARL are processed through Amazon Payments Europe, S.C.A. (APE), a licensed electronic money institution in Luxembourg. This step is required for sellers who want to get paid for Republic of Korea transactions, transact using U.K.-based bank accounts, or sell to customers in Europe, the Middle East, and Africa (EMEA). +AWS Marketplace has established regional invoicing entities (also referred to as Marketplace Operators or MPOs) to facilitate transactions and support buyers' and sellers' localized business needs, such as tax, reporting, disbursements, and compliance. Invoicing entities are regional entities responsible for managing these localized aspects of AWS Marketplace for their respective regions. Each invoicing entity is subject to local laws and regulations. As AWS Marketplace sellers, you are required to complete verification steps to utilize certain invoicing entities in specific regions. + +As part of this framework, the Know Your Customer (KYC) process is a verification procedure that helps AWS comply with regulatory requirements including EU anti-money laundering directives and Korean financial transaction reporting requirements. KYC verification is mandatory for you to transact and/or receive disbursements through the AWS Marketplace invoicing entities in the following regions: + + 1. Europe, Middle East, and Africa (transaction and disbursements) + + 2. South Korea (disbursements) + + + + +## Regional KYC requirements + +EMEA + + +Sellers must complete the KYC process to use the AWS EMEA invoicing entity. AWS Marketplace transactions through the AWS EMEA invoicing entity are processed through Amazon Payments Europe, S.C.A. (APE), a licensed electronic money institution in Luxembourg. Until the KYC is completed, AWS Inc. will be used as the invoicing entity for the seller's transactions in this region. + +In a Channel Partner Private Offer (CPPO), both the Channel Partner and the ISV need to be KYC verified to use AWS EMEA as the invoicing entity. AWS Inc. will be the default invoicing entity if either party is not KYC verified. + +KYC verification is also required if either a channel partner or an ISV needs to utilize a UK bank account for disbursements. In that scenario, both parties require KYC verification to ensure the AWS EMEA invoicing entity can facilitate the transaction. + +South Korea + + +To receive disbursements from the AWS South Korea invoicing entity, sellers must undergo KYC verification. Completing the KYC process for the EMEA region can expedite the verification for South Korea, and vice versa. + +Japan (Japanese sellers only) + + +Sellers registered in Japan must provide business registration and legal representative details to the AWS Japan invoicing entity. This is a separate process from the KYC described on this page. @@ -14,0 +45,4 @@ This process doesn't apply to sellers in India as they can only sell to buyers i +## KYC requirements + +The KYC process requires you to provide additional information and documentation to verify your identity and business details. Before starting, ensure you can monitor your AWS account root email address, as the KYC team will send status updates and requests to that address. For more information about managing account communications, see [Managing account communications](./managing-account-communications.html) in [Managing your seller account](./seller-account-management.html). + @@ -17 +51 @@ This process doesn't apply to sellers in India as they can only sell to buyers i -Only verified users can process refunds, amend KYC information, and change financial information such as bank account details. Verified users are KYC verified users and secondary users who completed verification. +You will also receive KYC status updates to the custom email address that you provide during registration. It is highly recommended to add key KYC stakeholders to the custom email notification so that important messages are not missed. For more information, see [Adding or updating email addresses](./email-notifications.html#adding-updating-email-addresses). @@ -19 +53,3 @@ Only verified users can process refunds, amend KYC information, and change finan -## KYC requirements +KYC is a 3-step process: + +Step 1: Business Verification @@ -21 +56,0 @@ Only verified users can process refunds, amend KYC information, and change finan -The KYC process requires you to provide additional information and documentation to verify your identity and business details. Before starting, ensure you can monitor your AWS account root email address, as the KYC team will send status updates and requests to that address. For more information about managing account communications, see [Managing account communications](./managing-account-communications.html) in [Managing your seller account](./seller-account-management.html). @@ -23 +58 @@ The KYC process requires you to provide additional information and documentation -The specific requirements depend on your business type and location, but typically include: +During this step, you will be required to provide information about your business entity, related documents associated to the business, and the registration and verification of key individuals within your organization (primary contacts, business owners, and legal representatives). @@ -25 +60 @@ The specific requirements depend on your business type and location, but typical - * **Business verification** – Business registration certificates, articles of incorporation, or certificate of good standing (required for US companies if registration extract is older than 180 days). Your business name in these documents must exactly match the name used in your AWS Marketplace seller registration. +You will also need to provide identity verification documents and address verification documents for the nominated individuals. In some cases you might be asked to provide authorization documentation on a company letterhead, signed by a legal representative of the business, if a nominated individual is not legally authorized to represent the company. @@ -27 +62 @@ The specific requirements depend on your business type and location, but typical - * **Identity verification** – Government-issued photo identification for key individuals including directors, officers, or beneficial owners (individuals who own more than 25% of shares or voting rights). +Step 2: Bank Account Verification @@ -29 +63,0 @@ The specific requirements depend on your business type and location, but typical - * **Address verification** – Utility bills, bank statements, or official government correspondence issued within the last 3-6 months. @@ -31 +65 @@ The specific requirements depend on your business type and location, but typical - * **Authorization documentation** – Letter of authorization on company letterhead, signed by a legal representative, if the primary contact is not legally authorized to represent the company. +After the business verification step is completed, your seller account will be KYC verified, but you must provide a bank statement on the **Payment information** tab before you can receive disbursements through Amazon Payments Europe. For detailed information, see [Step 6: Complete bank account verification](./complete-bank-verification.html). @@ -32,0 +67 @@ The specific requirements depend on your business type and location, but typical +Step 3: Secondary User Verification @@ -34,0 +70 @@ The specific requirements depend on your business type and location, but typical +Only authorized users are allowed to manage your KYC and financial details after KYC verification. The secondary user verification is an optional step used if you need to nominate other users within your organization to manage your KYC and financial details on AWS Marketplace, for example, if your finance team needs access to manage disbursement settings. For detailed information, see [Managing secondary users for Know Your Customer (KYC)](./managing-secondary-users.html). @@ -38 +74 @@ The specific requirements depend on your business type and location, but typical -All documents must be clear, legible, and on official letterhead where applicable. Business documents should be signed by a legal representative and issued within 180 days unless otherwise specified. +All provided documents must be clear, legible, and on official letterhead where applicable. Business documents should be signed by a legal representative and issued within 180 days unless otherwise specified. @@ -40 +76 @@ All documents must be clear, legible, and on official letterhead where applicabl -## Steps to complete the KYC process +The document requirements listed in this guide are not exhaustive. During the verification process, compliance teams may request additional information or documentation based on their assessment. Requirements are evaluated on a case-by-case basis. @@ -42 +78,7 @@ All documents must be clear, legible, and on official letterhead where applicabl -Follow these steps to complete the KYC process in AWS Marketplace: +## Steps to complete Step 1 of the KYC process - Business Verification + +Follow these steps to complete Step 1 of the KYC process in AWS Marketplace: + +###### Note + +For accepted document types, templates, and formatting requirements referenced throughout these steps, see the Templates and best practices for completing the KYC process section at the end of this page. @@ -52 +94 @@ Choose the **Info** link to see how to change your country. - 3. Choose **Go to KYC information** or select the **Know your customer (KYC)** tab and then choose **Start KYC compliance**. You will be redirected to the KYC registration portal. + 3. In the same section, review your **KYC Verification** status to see where you are in the verification process. @@ -54 +96 @@ Choose the **Info** link to see how to change your country. -For more information about how information is used and shared by AWS Marketplace, see the [Amazon Payments Europe Privacy Notice](https://sellercentral-europe.amazon.com/gp/help/external/201190420?language=en_GB&ref=efph_201190420_cont_201200780). + 4. To start or review your KYC journey, select the **Know your customer (KYC)** tab. @@ -56 +98 @@ For more information about how information is used and shared by AWS Marketplace - 4. Choose **Go to KYC overview**. +###### Note @@ -58 +100,3 @@ For more information about how information is used and shared by AWS Marketplace - 5. On the **Know Your Customer (KYC) Overview** , read through the list of required information and documentation and gather the required documentation (if you haven't yet done so). Then choose **Continue to KYC compliance**. +In the main KYC tab, you can see a table with customer regions, invoicing entity, transaction status, and disbursement status. Use this table to understand which AWS invoicing entity your customer will get their invoices from. If your transaction or disbursement status is 'Blocked' for an invoicing entity, use the Next Steps column to understand what is required from you. + + 5. To start or review your business verification, choose **Update Business Verification**. You will be directed to the KYC Registration Portal. @@ -61,0 +106,10 @@ For more information about how information is used and shared by AWS Marketplace +###### Important + + * If the registered seller account name is not publicly listed on a stock exchange, please select 'privately-owned business'. + + * Ensure the business name you enter matches your AWS Marketplace seller account name, as this is the company being verified. + + * Input your business details exactly as shown in official registration documents (country of incorporation, entity type, name, registration number, etc.). + + * Any discrepancies or mismatched information may delay the verification process. + @@ -70 +124,7 @@ If you have questions, see **Frequently Asked Questions (FAQ)** located on the r -Your information is saved every time you choose **Next** to go to the next step. + * Registration Extract is your Company Registration or Incorporation Document. + + * For US companies, if the Registration Extract or Incorporation Document is older than 180 days, please additionally provide a certificate of good standing, certificate of (account) status, or valid (not expired) business license. + + * For accepted Proof of Address documents, see the templates section below. + + * Your information is saved every time you choose **Next** to go to the next step. @@ -74 +134 @@ Your information is saved every time you choose **Next** to go to the next step. - 9. Choose whether the **Beneficial owner** is the same as the point of contact, add beneficial owners (up to four) if necessary, confirm your additions, and then choose **Next**. +###### Note @@ -76 +136,3 @@ Your information is saved every time you choose **Next** to go to the next step. - 10. Choose whether the **Legal representative** is the same as the point of contact or beneficial owner. If the legal representative is a different entity, provide the required information, save your entry, and then choose **Next**. + * The Primary Contact person is the person who manages the AWS Marketplace account on behalf of the company, and where possible the root user for the seller account. This person must have legal capacity to represent the company; otherwise, a Letter of Authorization (LOA) is required to be uploaded in the 'Additional documents' section. See the templates section below for an LOA template. + + * Provide an accepted Identity document and Proof of Address. See the templates section below. @@ -78 +140 @@ Your information is saved every time you choose **Next** to go to the next step. - 11. For **Additional documents** , upload your business license, identity document, and letter of authorization (if applicable). + 9. Choose whether the **Beneficial owner** is the same as the point of contact, add beneficial owners (up to four) if necessary, confirm your additions, and then choose **Next**. @@ -82 +144 @@ Your information is saved every time you choose **Next** to go to the next step. -If you need a letter of authorization, you can use the following sample: + * At least one Beneficial Owner or a Senior Management Official needs to be registered on the account if the Beneficial Owner is not the Point of Contact. @@ -84 +146 @@ If you need a letter of authorization, you can use the following sample: - *Letterhead of the company* + * If privately owned company (beneficial owner required): An individual who directly or indirectly owns more than 25% of the shares or voting rights in your business must be registered on the account. If this is not applicable, please register an individual (senior managing official) who controls the company through other means (chief executive officer, chief financial officer, managing or executive director, or president). @@ -86,6 +148 @@ If you need a letter of authorization, you can use the following sample: - POWER TO ACT ON BEHALF OF THE COMPANY - The undersigned **name of Company here** (herein after, the "Company"), duly represented by - (name, date of birth, and function) **add full name, date of birth, and function of the signatory here**, - confirms that **add full name of the Person of Contact here** is authorized to open an Amazon Web - Services account with Amazon Payments, accept the User Agreement and other Policies, have access - to the Amazon Web Services account, and initiate transactions in the name and on behalf of the Company. + * If publicly listed company (senior manager always required): Any individual who holds the position of senior managing official, such as a chief executive officer, chief financial officer, managing or executive director, or president. (Please enter Senior Manager Official details and document uploads in the beneficial owner section.) @@ -93 +150 @@ If you need a letter of authorization, you can use the following sample: - Dated this: + * Provide an accepted Identity document and Proof of Address. See the templates section below. @@ -95 +152,11 @@ If you need a letter of authorization, you can use the following sample: - Signed by: + 10. Choose whether the **Legal representative** is the same as the point of contact or beneficial owner. If the legal representative is a different entity, provide the required information, save your entry, and then choose **Next**. + + 11. In the **Additional documents** section, upload your letter of authorization (if applicable) and statute documents. + +###### Note + + * Letter of Authority (LOA): This is required to confirm the primary contact is authorized to act on behalf of the company. Provide this letter using the recommended template. See the templates section below. + + * Statute Document: This document should contain Articles of Association, bylaws, and/or a most recent share allotment document (statement of capital/annual return/share register). It is the governing document of a company. For privately owned companies, the statute document should include the full names of each beneficial owner who directly or indirectly owns more than 25% shareholding. If the above data point is missing, you would be required to provide an organization chart showing the entire structure of the registered business (see the templates section below). The exact requirements for statute documents vary by country and legal entity type; therefore, please provide a document that most closely aligns with the descriptions. + +Ensure all submitted documents are signed by a legal representative, are on letterhead or stamped, and dated within 180 days. If further documents are required, the KYC verification team will contact you via the main/root email address and where possible they will provide an example template. @@ -106 +173 @@ You can select **Edit** to return to any previous section if necessary. -The status of your KYC compliance will be reviewed (typically within 24 hours). You will be notified through an email message after the review is complete. The entire KYC process typically takes approximately 2 weeks. +The status of your KYC compliance will be reviewed (typically within 24 hours). You will be notified through an email message after the review is complete. @@ -116 +183,101 @@ If you need to add secondary users who can manage KYC information and financial -## Best practices for completing the KYC process +## Templates and best practices for completing the KYC process + +### Accepted identity documents + +If you need to provide an identity document for an individual, the following documents are accepted: + + * Passport + + * National identity card + + * US passport card + + * Driving license + + * Residence permit + + + + +Requirements for identity documents: + + * Document copy/image must be high quality, in color, unobstructed, and legible. + + * Document size should be less than 10MB. + + * Accepted formats include: .png, .tiff, .tif, .jpg, .jpeg, and .pdf. + + * The document must be a copy of a government-issued ID document containing a photo and personal information. + + * The document must contain full name, date of birth, place of birth, and country of citizenship. If a standalone ID document does not contain all the data points, please provide two ID documents in combination (for example, driving license and birth certificate). + + * The document must not be expired.