AML and KYC for small galleries: what to document on the contact record

Anti-money-laundering and know-your-customer rules are no longer abstract concerns for the largest auction houses. Galleries selling above threshold amounts in the EU, UK, and an expanding set of jurisdictions face documentation duties that land on the sales desk, not a compliance department most small galleries do not have.

This post is not legal advice. It is a registrar's checklist for what belongs on the contact record so due diligence survives staff turnover and does not live in a partner's inbox alone.

Why the contact record is the system of record

KYC is not a one-time PDF at first purchase. Collectors buy again, advisers act on their behalf, and entities buy through structures that change. If identity documents and verification notes live only in email, the next director inherits gaps and regulators see inconsistency across sales years apart.

Treat the contact record as the durable file: legal name, entity type, beneficial owner where relevant, verification date, document references, and who performed the check. Link high-value sales to that contact so auditors trace from invoice to identity without opening three systems.

What to capture before a high-value sale closes

Requirements vary by jurisdiction and sale amount. Common elements galleries document include:

• Government-issued ID or equivalent for individuals; registry extracts for entities.
• Proof of address when policy requires it.
• Source-of-funds or source-of-wealth notes for transactions above local thresholds.
• Politically exposed person (PEP) screening results with date and provider.
• Written record of who approved proceeding when a flag required partner review.

Store references and dates on the contact. Original documents may remain in secure storage; the inventory system should show that verification happened, when, and under which policy version.

Sales workflow integration, not a side folder

Compliance checks should sit at a defined pipeline stage — before invoice issue or before funds release — not as an afterthought when finance notices a wire from an unfamiliar jurisdiction. When a deal moves to "invoice issued," the contact should already carry the verification state your policy requires.

Advisors and third-party payers need explicit linkage: the collector of record, the adviser who introduced the work, and the entity paying may be three different contacts. Conflating them creates audit fiction.

Retention and access control

Identity data is sensitive. Limit visibility to roles that need it; do not expose document notes on consignor statements or viewing rooms. Retention periods should match counsel's guidance — deleting everything on sale completion is as risky as keeping scans in an unsecured shared drive forever.

The bottom line

AML and KYC fail when galleries treat them as fair-week paperwork instead of contact-level facts. Document verification on the collector record, tie high-value invoices to that record, and make pipeline stages reflect when checks must complete. Art.industries CRM timelines and role-based fields give you a place to store that context alongside purchase history and room engagement — so compliance becomes part of the same graph as sales, not a parallel archive nobody trusts.