Compliance without the spreadsheet folders
KYC by nationality, sanctions screening, and the file Ley 10/2010 requires.
14-day trial · No lock-in
Spain's Ley 10/2010 made law firms obliged parties for much of what they do: property conveyancing, company formation and management, holding client money. And the obligation is not to keep the copies. It is to be able to show, years later, what was checked, when, and with what result.
Most firms solve this with a shared folder and a spreadsheet. It works until the first inspection.
Compliance, with the paperwork to prove it.
KYC by nationality
The right document list for each client: DNI, NIE, passport or equivalent.
Sanctions screening
Checked against OpenSanctions, with the dated result stored on the file.
The Ley 10/2010 file
The due-diligence documentation, complete and findable if an inspection comes.
Audit log
Every access and every change, recorded with author and date. No silent edits.
Due diligence, without the spreadsheet folders.
- Guessing which documents to ask a foreign client forBack & forth
- Searching loose sanctions lists by hand30 min
- Reconstructing folders when a request arrivesDays
- 'Who touched this file?' — nobody knowsRisk
- A KYC checklist for their nationalityOne list
- Screened against OpenSanctions, result storedSeconds
- The Ley 10/2010 file, already assembledDone
- An audit log of every actionAlways
An illustrative estimate; how deep due diligence goes is the firm's own risk decision.
KYC that depends on where the client is from
A Spanish buyer does not produce the same documents as a British resident, a Moroccan national or a Luxembourg company. On each matter Mandato asks for the documentation that corresponds to the client's nationality and legal form, and does not treat the file as complete until it is there.
Beneficial ownership of companies, source of funds, politically exposed persons. What is missing is visible. What expires raises a warning.
- Document requirements by nationality and by legal form.
- Beneficial ownership, with the corporate chain recorded.
- Expiry warnings on identity documents and proof of funds.
Sanctions screening
Every client, every counterparty and every beneficial owner is screened against OpenSanctions, which aggregates the sanctions lists of the European Union, the United Nations, the US OFAC and HM Treasury, alongside lists of politically exposed persons.
Screening runs on onboarding and repeats periodically, because the lists change and a client who was clean in January may not be in October. Every run is recorded with its date and its result, whether or not there was a match.
The Ley 10/2010 file
The due-diligence file assembles itself: identification, documents, screening, risk assessment and the decisions taken, each with its date and its author. It is retained for the statutory period and exported in full whenever somebody asks.
If SEPBLAC asks about a particular client, the answer is a document. Not an archaeological dig through a shared folder.
Audit log
Everything that happens in Mandato is written down, and cannot be rewritten: who opened a matter, who downloaded a document, who ran a screening, who changed a risk assessment. The log only appends; it never edits.
This is not one more compliance feature. It is the condition on which the others are worth anything: a check you cannot evidence is, for practical purposes, a check that never happened.
Compliance, measurable.
- 20+
nationalities served by the founding firm, each with its own KYC checklist
- 1file
of due diligence per client, as Ley 10/2010 requires
- 100%
of compliance-file changes recorded with author and date
The nationalities figure is the founding firm's (Frank & Partners). Run your own numbers with the savings calculator
Names belong to their respective owners. They indicate the systems Mandato integrates with; they do not imply sponsorship, certification or official affiliation.
Frequently asked questions
Which sanctions lists are screened?
Mandato screens against OpenSanctions, which consolidates the lists of the European Union, the United Nations, the US OFAC and the UK's HM Treasury, alongside lists of politically exposed persons. Every query is recorded with its date and its result, whether or not there is a match.
How often is screening repeated?
On client onboarding, and periodically thereafter for as long as the business relationship lasts. The frequency is configured per risk level. A positive result opens an alert on the matter and notifies the firm's compliance officer.
Does Mandato decide whether to report a transaction to SEPBLAC?
No. That decision belongs to the firm and to its representative before SEPBLAC. Mandato gathers the information, makes visible what does not add up, and leaves the documentary trail the report requires. The judgement is not delegated to software.
What happens to compliance files when a matter closes?
They are retained for the period Ley 10/2010 requires and remain searchable and exportable. When the retention period expires, Mandato warns you so the firm can decide on deletion under its own retention policy.
Close your first due-diligence file.
Open your first due-diligence file with its nationality checklist already assembled.
The demo opens in your browser — no account needed.