
GITNUXSOFTWARE ADVICE
Policy Government MattersTop 10 Best Customer Due Diligence Services of 2026
Ranking and comparison of top customer due diligence providers for compliance teams, including RSM, PwC, and EY, with key strengths and tradeoffs.
How we ranked these tools
Core product claims cross-referenced against official documentation, changelogs, and independent technical reviews.
Analyzed video reviews and hundreds of written evaluations to capture real-world user experiences with each tool.
AI persona simulations modeled how different user types would experience each tool across common use cases and workflows.
Final rankings reviewed and approved by our editorial team with authority to override AI-generated scores based on domain expertise.
Score: Features 40% · Ease 30% · Value 30%
Gitnux may earn a commission through links on this page — this does not influence rankings. Editorial policy
RSM is the best fit for compliance teams that need investigation-led CDD and ongoing monitoring documentation for governance review, whereas PwC is a stronger alternative if you’re an enterprise team redesigning CDD with governance-heavy, investigation-ready control narratives.
Editor’s top 3 picks
Three quick recommendations before you dive into the full comparison below — each one leads on a different dimension.
RSM
Trigger event review documentation tied to customer risk rating updates across onboarding and ongoing monitoring.
Built for fits when compliance teams need investigation-led CDD and ongoing monitoring documentation for governance review..
PwC
Editor pickPolicy-to-operations translation that ties customer risk rating, acceptance rules, and review triggers to case workflows.
Built for fits when enterprise teams need governance-heavy CDD redesign and investigation-ready control narratives..
EY
Editor pickEvidence-first case management that links screening findings to recorded policy decisions and audit trails.
Built for fits when regulated teams need documented CDD execution with governance-led investigations..
Comparison Table
RSM
specialistAudit, tax, and consulting firm providing AML and customer due diligence services.
Trigger event review documentation tied to customer risk rating updates across onboarding and ongoing monitoring.
RSM’s CDD service model centers on performing and documenting customer risk assessments for account-level decisions, including adverse media and sanctions screening review work needed for risk-based approach governance. Teams can support periodic review cadence by linking findings to a trackable customer information file and by documenting trigger event reviews that change the risk rating. The main distinction is operational continuity between onboarding checks and the follow-on reviews that occur after risk signals evolve. This continuity reduces the handoff gap that often appears between onboarding analysts and ongoing monitoring teams.
A tradeoff is that RSM is primarily a services-led delivery model rather than a software product with a self-serve case management interface. That means customers depend on RSM for workflow execution and reporting formats, which can slow turnaround when internal teams require tight, in-house SLA control. RSM is a strong fit when compliance functions need external investigators to produce governance-ready findings quickly and when internal systems already define the target customer acceptance policy and periodic review structure.
- +Audit trail built around risk assessment decisions and customer file updates
- +Investigation outputs align to acceptance and enhanced due diligence triggers
- +Periodic review support covers trigger-driven changes to risk rating
- +Governance evidence supports internal and regulator-facing reviews
- –Services-led delivery can limit self-serve automation inside the customer workflow
- –Turnaround depends on investigation complexity and provided input quality
- –Reporting templates may require mapping to existing internal case structures
- –Requires active governance ownership to define risk criteria and escalation
Financial crime compliance teams
Risk-based reviews for high-risk customers
Cleaner approvals with clear evidence
KYC operations analysts
Periodic review updates for managed portfolios
Faster review cycles
Show 2 more scenarios
Compliance program owners
Governance evidence for audits and regulators
Lower audit friction
An audit trail supports internal and regulator-facing documentation needs.
Entity onboarding leads
New account acceptance with investigation support
More consistent onboarding decisions
RSM supports customer acceptance policy decisions using research and document verification outputs.
Best for: Fits when compliance teams need investigation-led CDD and ongoing monitoring documentation for governance review.
PwC
enterprise_vendorProfessional services network delivering customer due diligence and financial crime compliance consulting.
Policy-to-operations translation that ties customer risk rating, acceptance rules, and review triggers to case workflows.
PwC’s strongest fit is CDD and KYC operating models where governance and documentation matter as much as screening outcomes. Engagements commonly cover customer risk assessment design, customer acceptance policy workflows, and review triggers that map business events to investigations and escalations.
A key tradeoff is that PwC’s approach is typically services-led rather than a self-serve product console, so teams need internal stakeholders for process sign-off and case handling integration. PwC works well when a buyer already has onboarding systems in place and needs risk model calibration, control narratives, and handoff criteria between screening, investigations, and ongoing monitoring.
- +Governance-led CDD workflow design for audit-ready onboarding decisions
- +Risk assessment and acceptance policy mapping tied to operational case handling
- +Detailed documentation that supports regulatory inspection and internal QA
- +Cross-border implementation support for jurisdiction-specific control requirements
- –Services-led delivery means heavier internal ownership for process changes
- –Automations depend on integration decisions between screening and case systems
- –Limited self-serve tooling depth compared with vendors focused on software delivery
- –Turnaround for refinements can depend on stakeholder availability and sign-off cycles
Compliance program owners
Redesigning onboarding risk rating
More consistent, reviewable decisions
Financial crime operations
Building ongoing monitoring triggers
Fewer missed trigger reviews
Show 2 more scenarios
Regulatory reporting teams
Strengthening audit trail documentation
Cleaner inspection readiness
PwC produces control documentation that ties screening outcomes to decision rationale and evidence.
Procurement and partner risk
CDD governance for new channels
Reduced channel onboarding exceptions
PwC helps define acceptance and enhanced due diligence rules for higher-risk customer segments and channels.
Best for: Fits when enterprise teams need governance-heavy CDD redesign and investigation-ready control narratives.
EY
enterprise_vendorBig Four firm offering customer due diligence, KYC remediation, and AML compliance services.
Evidence-first case management that links screening findings to recorded policy decisions and audit trails.
EY’s customer due diligence work typically centers on defined risk assessment outputs, documented review decisions, and evidence collection designed for regulatory scrutiny. EY also supports investigations around adverse media and screening outcomes, with analysts producing case narratives tied to acceptance or escalation criteria. Governance is reinforced through review workflows that map customer acceptance policy decisions to recorded rationale and supporting documents.
A tradeoff is that EY execution capacity depends on engagement staffing and defined client inputs, which can slow response when requirements change mid-stream. EY fits situations like a bank integrating a new customer risk rating logic where analysts must interpret edge cases, document exceptions, and produce consistent audit-ready records.
- +Case documentation tied to governance decisions and review rationale
- +Method-led workflows that standardize onboarding and periodic review evidence
- +Analyst investigations with structured escalation from screening outcomes
- +Alignment of customer risk assessment outputs to policy and documentation
- –Delivery speed depends on engagement staffing and defined client inputs
- –Less suited for teams seeking self-serve automation without consulting effort
- –Requires disciplined handoffs for data quality and investigation scope
Bank operations teams
Periodic reviews with case evidence
Consistent audit trail for reviews
Compliance program owners
Customer risk assessment rollout
Risk-based reviews at scale
Show 2 more scenarios
KYC investigators
Adverse media and escalation handling
Reduced inconsistent case decisions
EY investigators review screening triggers and document investigative conclusions tied to next actions.
Financial crime leads
Ongoing monitoring exception cases
Clear documentation for outcomes
EY structures investigations for exceptions, linking findings to policy decisions and evidence capture.
Best for: Fits when regulated teams need documented CDD execution with governance-led investigations.
KPMG
enterprise_vendorGlobal professional services firm offering customer due diligence, KYC, and AML compliance services.
Customer risk assessment and review-workflow orchestration tied to governance artifacts and case documentation standards.
KPMG delivers customer due diligence support with a consulting-led workflow that combines AML program design with delivery for customer risk assessment and customer acceptance policy decisions. Engagement teams typically map client data and regulatory requirements into a structured risk-based approach covering identity verification, sanctions screening, and periodic review execution.
Delivery models fit organizations needing governance, documentation, and audit trail discipline across onboarding and ongoing monitoring cases. KPMG is often selected when internal teams require reference architectures, process control, and managed execution for complex onboarding and case management.
- +Governance-first delivery aligned to customer acceptance policy decisions
- +Structured customer risk assessment workflows tied to periodic and trigger reviews
- +Case documentation support for audit trail expectations in regulated programs
- +Consulting-led integration guidance for onboarding and ongoing monitoring operations
- –Requires strong client data readiness to avoid rework in onboarding cases
- –Automation depth depends on engagement scope rather than a single standardized product
- –Tooling integration effort can increase for complex source system landscapes
- –RBAC and API governance details are not consistently exposed as a self-serve surface
Best for: Fits when regulated teams need consulting-led CDD governance plus managed execution for onboarding and reviews.
Deloitte
enterprise_vendorBig Four firm providing customer due diligence, enhanced due diligence, and AML advisory services.
Risk-based case execution with documented decisioning for enhanced due diligence and ongoing review documentation.
Deloitte delivers customer due diligence services that pair regulatory risk coverage with delivery workflows across multiple jurisdictions. Its core offering is built around risk-based customer risk assessment, enhanced due diligence execution, and ongoing review operations that produce audit-ready documentation.
Delivery teams bring structured governance artifacts like customer acceptance policy design, periodic review controls, and tradeoffs for beneficial ownership resolution across complex legal entities. Integration work tends to be project-scoped around AML and identity verification workflows rather than a turnkey, self-serve API-first product surface.
- +Covers complex beneficial ownership and entity-structure analysis for CDD reviews
- +Strong delivery governance for audit trails and periodic review workflow controls
- +Depth in risk-based customer risk assessment across jurisdictions and risk tiers
- +Reliable execution of enhanced due diligence cases with documented decision paths
- –Limited product-style automation tooling compared with specialist CDD workflow vendors
- –Heavier engagement model can slow iterative changes to customer acceptance policy
- –API and extensibility expectations require project scoping rather than self-serve configuration
Best for: Fits when regulated banks need Deloitte-led CDD delivery with strong governance and entity analysis.
Accenture
enterprise_vendorGlobal professional services firm offering AML, KYC, and customer due diligence consulting.
Multi-workstream customer risk and case workflow delivery that aligns operational decisions with client governance, evidence, and escalation rules.
Accenture is a customer due diligence services provider that fits banks, fintechs, and regulated enterprises needing program design, investigative case workflows, and ongoing compliance operations. Its delivery model emphasizes integration across KYC, identity verification, sanctions screening, and risk rating workflows through enterprise systems and client-run controls.
Governance and control evidence are commonly handled through structured project delivery, documented procedures, and audit-oriented reporting patterns for compliance teams. Accenture is strongest when the requirement includes end-to-end delivery support and change management across multiple customer risk assessment and monitoring processes.
- +End-to-end delivery across KYC intake, screening, case management, and reviews
- +Integration support for enterprise workflows tied to risk-based customer acceptance policy
- +Program governance artifacts that map to compliance review and audit expectations
- +Adaptable operating model for periodic review and trigger event review processes
- –Delivery-heavy approach can feel slow for teams needing self-serve automation only
- –Admin control depth depends on client-side system ownership and process boundaries
- –Extensibility often requires implementation work across client systems
- –API-first extensibility for developers is not the primary interaction surface
Best for: Fits when regulated teams need managed KYC and monitoring operations with documented governance and integration help.
BDO
enterprise_vendorGlobal accountancy and advisory firm providing AML compliance and customer due diligence services.
Structured evidence and governance documentation that packages CDD decisions for audit and regulator-style scrutiny.
BDO is a consulting and assurance firm that delivers customer due diligence through staffed engagements tied to AML program design, policy, and execution workflows. Its distinct strength is translating regulatory expectations into operational deliverables like risk rating frameworks, acceptance procedures, and review playbooks used by financial institutions and regulated companies.
BDO also supports onboarding and ongoing reviews with document and information verification processes that connect to customer information file building and review casework. Engagement governance, including evidence handling and audit-ready documentation, is a core part of how BDO structures client support.
- +Produces AML-ready deliverables with policies, procedures, and evidence packages
- +Brings practical experience mapping risk rating and review triggers to operations
- +Supports cross-LOB CDD workflows with consistent documentation standards
- +Offers governance artifacts that reduce ambiguity during internal and regulator review
- –CDD execution depth depends on engagement scope rather than a universal tool
- –Requires client participation to supply data, controls, and operating context
- –Automation breadth is limited because delivery centers on advisory work
- –Less suited for teams seeking API-first workflow integration
Best for: Fits when regulated teams need governed CDD workstreams and documentation artifacts for reviews.
FTI Consulting
specialistGlobal business advisory firm offering forensic investigations and customer due diligence services.
Investigation and decision-pack support that converts screening hits into structured risk narratives for customer acceptance.
FTI Consulting delivers customer due diligence as professional services focused on risk-based client onboarding, periodic review, and investigative support for complex cases. Delivery typically combines identity and document verification workflows with screening coverage for sanctions, adverse media, and politically exposed persons, then translates results into decision-ready customer risk narratives.
Teams also use structured data capture to support audit trail expectations and governance around customer acceptance and enhanced due diligence. Engagements often emphasize case management and escalation paths rather than self-serve tooling, which matters when internal controls require human review and defensible documentation.
- +Strong case investigation workflow for adverse media and escalation decisions
- +Governance-focused customer acceptance outputs with traceable evidence narratives
- +Experience applying risk-based approaches across onboarding and periodic reviews
- +Coverage of screening categories used in customer risk assessment programs
- –More dependent on engagement team processes than self-serve automation
- –Limited automation and API surface for buyers seeking direct system integration
- –Requires clear input standards to maintain consistent customer information files
- –Turnaround depends on workload and document readiness from requesters
Best for: Fits when regulated organizations need investigative customer risk assessment and defensible case documentation.
Grant Thornton
specialistProfessional services firm offering financial crime compliance and customer due diligence advisory.
Case-level decision support delivered with documented evidence standards and governance-oriented workflow handoffs.
Grant Thornton delivers customer due diligence consulting and execution support for customer identification program, customer risk assessment, and ongoing review workflows. Teams typically get guidance on risk-based approach design, data capture for customer information file creation, and governance-ready documentation to support audits.
Delivery is anchored in advisory project management with analyst workstreams for identity, beneficial ownership, and case-level decisioning rather than software-led configuration. The service fit is strongest when documentation quality, regulatory alignment, and workflow handoff matter as much as tooling integration.
- +Strong governance artifacts for case notes and customer information file completeness
- +Experienced advisory delivery for customer risk rating and policy-to-workflow mapping
- +Practical handling of beneficial ownership evidence and escalation paths
- +Clear engagement structure for periodic review and trigger event reassessment
- –Not a software product with configurable customer risk assessment data model
- –Automation depth depends on client tooling and available identity verification data
- –API and system extensibility are not the primary delivery surface
- –Turnaround and throughput are tied to staffed analyst capacity per engagement
Best for: Fits when regulated organizations need policy-to-case execution support and audit-ready CDD documentation.
AlixPartners
specialistGlobal consulting firm providing corporate investigations and due diligence services.
Documented customer review casework that links risk ratings to supporting evidence for audit-style defensibility.
AlixPartners is a customer due diligence service provider focused on operational support for risk-based onboarding and ongoing monitoring programs across regulated industries. Its delivery model emphasizes advisory-led execution around customer risk assessment workflows, escalation handling, and case documentation for reviews.
AlixPartners also supports beneficial ownership data collection and harmonization efforts that feed customer information files used in periodic review cycles. Teams typically engage it for complex, high-scrutiny customer sets where internal processes need stronger controls, governance, and traceable decisioning.
- +Advisory-led delivery for customer risk assessment and escalation workflows
- +Case-level documentation supports defensible outcomes for customer reviews
- +Beneficial ownership data collection and quality controls for customer files
- +Program governance design for periodic review and trigger event handling
- –Automation and API surface is limited since delivery centers on services
- –Implementation timelines depend on client data readiness and stakeholder availability
- –Operational throughput support is constrained by engagement scope and staffing model
- –Less suitable for teams seeking hands-on tool provisioning inside their stack
Best for: Fits when complex onboarding and review decisions require advisory execution and defensible case records.
Conclusion
After evaluating 10 policy government matters, RSM stands out as our overall top pick — it scored highest across our combined criteria of features, ease of use, and value, which is why it sits at #1 in the rankings above.
Use the comparison table and detailed reviews above to validate the fit against your own requirements before committing to a tool.
How to Choose the Right customer due diligence
Customer due diligence brings together identity verification, document and non-documentary checks, and risk-based decisioning so organizations can accept or reject customers with an auditable record. This due diligence buyer’s guide covers RSM, PwC, EY, KPMG, Deloitte, Accenture, BDO, FTI Consulting, Grant Thornton, and AlixPartners, using the way each provider documents and runs onboarding and ongoing reviews as the evaluation backbone.
RSM emphasizes trigger event review documentation tied to customer risk rating updates across onboarding and ongoing monitoring. PwC focuses on translating policy into case workflows that tie risk rating, acceptance rules, and review triggers into investigation handling. EY centers evidence-first case management that links screening findings to recorded policy decisions and audit trails.
Customer due diligence for risk-based onboarding and ongoing review decisions
Customer due diligence is the workflow that turns customer information into risk ratings, acceptance decisions, and review triggers that stay traceable from onboarding through ongoing monitoring. RSM and PwC both operationalize governance decisions by building documentation that connects risk assessment outcomes to what investigators and reviewers do next. EY supports that same requirement by structuring case evidence so policy decisions and review rationale remain linked to screening findings.
In practice, customer due diligence also includes defensible review cycles that distinguish periodic reviews from trigger event reviews, and it records the evidence that justifies simplified, standard, or enhanced due diligence actions. KPMG and Deloitte align customer risk assessment workflows with governance artifacts and entity analysis so the decision record can withstand regulator-style scrutiny. Providers like FTI Consulting and AlixPartners focus on converting screening hits and case inputs into structured risk narratives that support escalation and customer acceptance outcomes.
Customer due diligence documentation, workflow control, and evidence linkage
Customer due diligence success depends on whether onboarding decisions and ongoing monitoring outputs can be traced to risk assessment updates, acceptance rules, and review rationale. The providers in this guide were differentiated by how they structure that traceability across investigations, casework, and governance artifacts.
These capabilities matter because regulated teams need audit-ready records that connect screening findings and entity analysis to documented customer acceptance or escalation decisions. They also matter because workflow design choices determine whether teams can operate with repeatable evidence standards or must manage variable services-driven documentation.
Risk rating updates tied to trigger event review documentation
RSM ties trigger event review documentation to customer risk rating updates across onboarding and ongoing monitoring so governance review can follow the same decision logic each time. This approach also aligns investigation outputs to acceptance and enhanced due diligence triggers.
Policy-to-operations mapping that drives case workflows
PwC translates customer risk rating, acceptance rules, and review triggers into case workflows so investigations run from governance decisions rather than ad hoc instructions. This design ties policy mapping directly to operational case handling for audit-ready onboarding.
Evidence-first case management that links findings to policy decisions
EY structures case management so screening findings are linked to recorded policy decisions and audit trails. This evidence-first approach standardizes onboarding and periodic review evidence through method-led workflows.
Governance-first orchestration aligned to periodic and trigger reviews
KPMG orchestrates customer risk assessment and review workflows with governance artifacts and case documentation standards. Deloitte extends that model with risk-based case execution that includes documented decisioning for enhanced due diligence and ongoing review documentation.
Choose by workflow philosophy, evidence traceability, and automation boundaries
Selection should start with the workflow philosophy that the internal compliance team can operationalize. RSM, PwC, and EY center traceable evidence and decision linkage, but their workflow control surfaces differ based on whether the provider designs governance-led operations or delivers services-led case execution.
Next, the decision should account for automation and integration boundaries that affect day-to-day throughput. Some providers emphasize investigation documentation and governance narratives that depend on engagement staffing, while others provide stronger workflow alignment for enterprise operational teams and case systems.
Map how decisions become evidence, then check whether that evidence ties back to risk rating updates
Confirm whether the provider connects onboarding and ongoing monitoring outputs to customer risk rating updates and documented decision rationale. RSM emphasizes trigger event review documentation that updates risk ratings across the customer lifecycle, while EY links screening findings to recorded policy decisions and audit trails.
Select a policy-to-workflow operating model that matches the compliance team’s change capacity
Choose a provider that can translate policy decisions into case workflows without forcing the bank to redesign operational handling with heavy internal ownership. PwC delivers governance-led CDD workflow design that maps risk assessment and acceptance policy to operational case handling, while KPMG and Deloitte orient around governance artifacts and standardized review workflows.
Decide whether the target outcome is investigation-led evidence packages or self-serve workflow automation
If the priority is defensible investigation documentation and traceable customer acceptance narratives, FTI Consulting and AlixPartners focus on structuring risk narratives from investigation and case inputs. If the priority is reducing manual handoffs and maintaining repeatable evidence standards through structured workflows, EY and RSM emphasize standardized evidence linkage across onboarding and reviews.
Evaluate integration support depth by checking how casework interfaces with enterprise systems ownership
Assess whether the provider’s integration help aligns with who owns screening and case systems inside the enterprise. Accenture provides integration support for enterprise workflows tied to risk-based customer acceptance policy, while RSM flags that services-led delivery can limit self-serve automation inside the customer workflow.
Stress-test data readiness dependencies for entity analysis and evidence packaging
Require a clear plan for how the provider will handle gaps in customer data needed for evidence packages. Deloitte and KPMG both rely on strong entity and data readiness to avoid rework in onboarding cases, while Grant Thornton and BDO tie execution depth to engagement scope and client participation for risk rating and review mapping.
Who benefits from these customer due diligence delivery models
Customer due diligence buyers should match provider delivery behavior to internal governance structure and investigation operating rhythm. The providers here vary by whether they primarily drive governance-led workflow design, deliver evidence-first case management, or run services-led investigation documentation.
Teams with strong internal process owners can adopt workflow redesign, while teams that need fast defensible case records may prefer engagement-heavy delivery that packages evidence. The best fit depends on whether the compliance program needs trigger event documentation rigor, policy-to-case workflow mapping, or entity analysis depth for complex reviews.
Enterprise compliance teams building investigation-led governance documentation
RSM fits when governance review must follow trigger event documentation tied to customer risk rating updates across onboarding and ongoing monitoring. PwC fits when policy decisions must be operationalized into investigation-ready case workflows for audit narratives.
Regulated teams that must standardize evidence for onboarding and periodic review
EY fits teams that need evidence-first case management that links screening findings to recorded policy decisions and audit trails. BDO fits teams that want structured evidence and governance documentation packaged for regulator-style scrutiny.
Banks requiring deeper entity and beneficial ownership analysis inside CDD reviews
Deloitte covers complex beneficial ownership and entity-structure analysis for CDD reviews while maintaining delivery governance for audit trails. KPMG complements this with customer risk assessment and review-workflow orchestration tied to governance artifacts and case documentation standards.
Organizations prioritizing managed operations and integration help across KYC intake, screening, and reviews
Accenture fits when end-to-end delivery is needed across KYC intake, screening, case management, and reviews with integration support tied to risk-based acceptance policy. AlixPartners fits when complex onboarding and review decisions require advisory execution plus defensible case records.
Teams that need investigative risk narratives for adverse media and escalation decisions
FTI Consulting fits when screening hits must be converted into structured risk narratives that support customer acceptance and escalation. AlixPartners also supports defensible outcomes through advisory-led customer review case documentation tied to evidence.
Common customer due diligence selection pitfalls
The highest-risk mistakes come from choosing delivery models that do not match internal operating capacity. Many due diligence failures show up as weak traceability between risk assessment decisions and the next action taken by investigators and reviewers.
Another recurring issue comes from underestimating dependencies on client data readiness and engagement scope. When the provider is services-led, automation and workflow configuration may be constrained by what the client can supply in inputs and ownership boundaries.
Selecting a services-led provider without confirming evidence traceability from risk decisions into acceptance and enhanced due diligence triggers
RSM’s strength is trigger event review documentation tied to customer risk rating updates that align investigation outputs to acceptance and enhanced due diligence triggers. If those links must be guaranteed, avoid providers that deliver evidence packaging but do not emphasize the decision-to-trigger documentation chain.
Assuming policy mapping will translate into operational case workflows without heavy internal process change ownership
PwC maps policy to case workflows through governance-led CDD workflow design, but services-led delivery can still require internal ownership for process changes. Validate integration decisions between screening and case systems before committing to an operating model.
Treating evidence standardization as the same thing as self-serve automation inside customer workflows
EY emphasizes evidence-first case management and standardized onboarding evidence, but it is less suited for self-serve automation without consulting effort. If the target outcome is direct system integration with minimal engagement staffing, prioritize providers that explicitly support workflow operations across systems ownership boundaries.
Underestimating client data readiness requirements for entity analysis and onboarding case completeness
Deloitte and KPMG rely on strong client data readiness to avoid rework in onboarding cases. Grant Thornton and BDO also tie CDD execution depth to engagement scope and client participation, so incomplete customer information can slow case turnaround.
Overlooking that documentation speed depends on investigation complexity and engagement staffing
RSM flags turnaround dependence on investigation complexity and provided input quality. FTI Consulting and AlixPartners also depend on engagement processes, so schedule and staffing assumptions must reflect the expected volume of adverse media and escalation work.
How We Selected and Ranked These Providers
We evaluated RSM, PwC, EY, KPMG, Deloitte, Accenture, BDO, FTI Consulting, Grant Thornton, and AlixPartners on workflow documentation quality, governance traceability, and how tightly case outputs map back to customer risk rating updates and acceptance decisions. Features received 40% weight because buyers need audit-ready linkage from screening and entity analysis into investigation evidence and ongoing review records.
Ease and value each received 30% weight because services-led execution affects turnaround and internal process burden during CDD redesign and operational rollout. RSM ranked first because trigger event review documentation tied to customer risk rating updates across onboarding and ongoing monitoring connects investigation outputs to acceptance and enhanced due diligence triggers with an audit trail grounded in customer file updates.
Frequently Asked Questions About customer due diligence
How do RSM and PwC differ in connecting onboarding checks to ongoing customer risk rating changes?
Which provider format suits audit teams that need evidence-first documentation for decisions and exceptions?
What breaks when a due diligence program expects self-serve case management but the provider uses a services-led delivery model?
When should teams choose a consulting-led workflow like KPMG over investigation-heavy engagement models like FTI Consulting?
How do EY and Grant Thornton handle documentation standards for customer acceptance policy decisions during review workflows?
Which provider is best suited for beneficial ownership workflows that must feed a customer information file for periodic review cycles?
How do Deloitte and Accenture differ when integration work needs to align multiple customer risk assessment and monitoring processes?
Where does AlixPartners fall short for teams that require API-first provisioning and high automation throughput?
What is a practical getting-started path for compliance teams building a customer risk rating approach with measurable trigger events?
Tools reviewed
Primary sources checked during evaluation.
Referenced in the comparison table and product reviews above.
- Legal Professional ServicesTop 10 Best Business Due Diligence Services of 2026
- Finance Financial ServicesTop 10 Best Customer Credit Check Services of 2026
- Market ResearchTop 10 Best Consumer Due Diligence Research Services of 2026
- Finance Financial ServicesTop 10 Best Customer Due Diligence Software of 2026
- Legal Professional ServicesTop 10 Best Automated Due Diligence Software of 2026
Keep exploring
Comparing two specific tools?
Software Alternatives
See head-to-head software comparisons with feature breakdowns, pricing, and our recommendation for each use case.
Explore software alternatives→In this category
Policy Government Matters alternatives
See side-by-side comparisons of policy government matters tools and pick the right one for your stack.
Compare policy government matters tools→