Choose a fund administrator that can show how it will meet your fund’s requirements: who performs each compliance task, what evidence it keeps, how it escalates problems and what the service costs. Compare the same scope across providers, test the workflow with a difficult investor case, and put the agreed responsibilities in writing before appointment.
For a fund COO, CFO or compliance officer, “strong compliance support” should mean fewer unanswered questions when an investor, auditor or regulator asks for records. A useful selection process covers fund accounting and reporting as well as anti-money laundering (AML) and know your customer (KYC) work. It also leaves your team able to supervise the provider after launch.
Define the compliance support you are buying
Start with a service schedule for each fund and relevant manager entity. List the domicile, regulatory status, investment strategy, investor types and countries, expected volumes and reporting dates. A provider with experience in a domestic venture fund may need a different team or process for a cross-border hedge fund with institutional feeders.
Separate the work into clear categories:
- Fund accounting and investor operations: net asset value (NAV), reconciliations, fees, capital calls, distributions and investor reporting. Ask how the team checks the governing documents and handles exceptions.
- Investor AML/KYC: identification, beneficial ownership, risk assessment, sanctions and politically exposed person (PEP) screening, enhanced due diligence where required, and ongoing reviews.
- Tax and regulatory reporting: identify the specific filings and data obligations that apply. For example, FATCA/CRS support, US adviser filings or European fund reporting may involve different entities and providers. Specify who prepares, checks, approves and submits each return.
- Compliance advice, officer roles and assurance: policy advice, appointed AML officers, compliance reviews, financial-statement audits and independent AML audits are distinct services. Confirm which are included, separately engaged or retained internally.
Do not accept “compliance included” as the scope. Ask who monitors regulatory changes, who assesses their effect on your fund, and who approves changes to procedures. Request an example showing how a rule change became a revised checklist, staff instruction and tested control.
The regulatory position must match the entity. As checked on 19 October 2026, FinCEN’s final postponement moves the US investment adviser AML rule’s effective date to 1 January 2028. It is not a universal current AML requirement for every US private fund. The delay does not remove other applicable obligations, including sanctions requirements. Our US AML requirements guide explains the distinctions.
For Cayman structures, CIMA’s FAQs confirm that the AML Rule took effect on 18 September 2026 and that outsourcing leaves ultimate responsibility with the in-scope financial services provider and its governing body. Use the CIMA AML Rule guide for fund-specific oversight requirements. Have qualified advisers confirm the rules for your own structure; one jurisdiction’s checklist cannot settle another’s obligations.
Use these fund administrator RFP questions
Send the same request for proposal (RFP) to each shortlisted provider. Ask for a dated answer covering the legal entity, servicing location and team that will actually handle your fund. The questions below are AgentKYZ’s suggested buying checks, not a prescribed regulatory questionnaire.
- Which comparable funds do you service? Request relevant strategy and jurisdiction experience, the proposed team’s qualifications and client references where permission allows. Check required licences or registrations against the relevant official register. Group-wide experience is useful, but identify the people available to your account.
- Who owns each task and decision? Request a responsibility matrix covering the administrator, manager, fund board, compliance team and appointed money laundering reporting officer (MLRO). Include higher-risk approvals, incomplete files, suspicious-activity escalation, reporting and payment restrictions. Resolve any task that both parties assume the other performs.
- What will we receive for each investor? Request a suitably redacted file showing ownership evidence, risk reasoning, screening results, alert decisions, reviewer sign-off and outstanding requests. Check how the workflow applies your approved policy and records exceptions to it.
- How do ongoing checks work? Ask about periodic reviews, changes in ownership, sanctions-list updates and adverse information. Request a backlog report by risk and age, with named owners and escalation dates. Establish how monitoring of relevant transactions and investor activity connects to the file-review process.
- How are reports and filings controlled? Request a sample reporting calendar and a walkthrough from underlying accounting or investor records to a return. Check reconciliation, review, submission confirmation and correction procedures. Ask how the team handles an approaching deadline when information is missing.
- Can we retrieve the evidence ourselves? Demonstrate access to a complete file and its history, including earlier screening decisions and approvals. Agree authorised access for your team, auditors and regulators, subject to applicable law. Request the export format and explain how records remain accessible after termination.
- What happens when delivery goes wrong? Ask for the escalation route, incident-notification terms, staff cover and business-continuity test results. Discuss a reporting failure or onboarding surge with the proposed service lead. Speak to a reference about how the provider resolved a real problem, where the client can share that information.
- What does the quote exclude? Request all implementation, recurring, case-based and exceptional charges, plus assumptions about investor complexity and document availability. Confirm the cost of remediation, enhanced due diligence, audit support and exit assistance.
AIMA’s public listing provides an administrator due diligence questionnaire. Obtain the authorised edition under AIMA’s access terms. Our AIMA administrator due diligence guide explains how to examine the AML/KYC evidence behind the responses. A completed questionnaire is an input to selection, not proof that every control works.
Test a difficult investor case before signing
Ask the proposed servicing team to run a demonstration using fictional or properly redacted information. Use a layered corporate investor with a possible sanctions-name match and one missing ownership document. Agree the expected treatment under your policy before the demonstration so you can judge the result independently.
Follow the case from receipt through ownership checks, screening, risk assessment and escalation. Ask the reviewer to explain why an alert is cleared or escalated, which evidence is still missing and who can approve the next step. A possible name match needs investigation; it is not automatically a confirmed sanctions match. PEP status also needs its own risk-based assessment rather than being treated as a sanctions designation.
Then change one fact: an investor reports a new beneficial owner after onboarding. Does the workflow reopen the relevant checks, preserve the previous decision and identify the person responsible for the review? Ask the team to show the unresolved case in its management report.
A useful question is: “Show me a file that is still waiting for a decision.” That reveals whether the system distinguishes documents received, checks completed and investor approval. A green “complete” label is only useful if everyone agrees what it means.
For AI-assisted tools, ask to see the source documents behind a finding, human review, recorded overrides and the treatment of uncertainty. Confirm what happens when a document cannot be read or an ownership link cannot be established. Assess the software and the people operating it together.
Check security, assurance and records access
Request the actual assurance reports that cover the proposed service, with appropriate confidentiality arrangements. SOC 1 concerns controls relevant to users’ financial reporting. SOC 2 concerns controls relevant to security, availability, processing integrity, confidentiality or privacy. Check the criteria and systems included in the particular report.
Read the reporting period, auditor’s opinion, exceptions, excluded subcontractors and controls your own team is expected to operate. A report covering another platform or servicing entity may not answer your question. Neither a SOC label nor a financial-statement audit establishes that the investor files meet your AML policy.
Ask about access permissions, multi-factor authentication, encryption, hosting locations, subprocessors, incident handling, retention and secure deletion. Test an export with its documents and audit trail. Confirm permitted international data transfers and any restrictions before transferring investor information. Do not send identity documents or confidential suspicious-activity material in an ordinary RFP email.
For Cayman funds, CIMA FAQs 43 and 45 call for sufficient fund-specific evidence in the independent AML audit. A service-provider-level audit alone is insufficient. File testing can inform that audit, but the programme-wide audit has a broader scope and its own independence requirements.
Compare the operating model and total fees
An administrator may deliver accounting, investor services and compliance support within one group. Another arrangement combines an administrator with specialist KYC support or an internal compliance team. Evaluate the actual handoffs, data access and decision rights in each proposal.
For the KYC work specifically, compare in-house delivery, managed services and AI software using the same quality standard, retained oversight and total-cost assumptions.
An integrated service can reduce coordination work. A specialist arrangement can add capacity or focused expertise while you retain the existing administrator. Both need a named owner for shared tasks and a tested route for escalation. Keep independent assurance sufficiently separate from the work being assessed.
If you are buying investor due diligence separately, our KYC providers for private funds comparison examines AgentKYZ, Fenergo, Flow and Passthrough using published scope, cost, AI, support and data-processing evidence.
Compare quotes using the same investor count, entity structures, review volume and reporting scope. Ask for a normal-year cost and a realistic stress scenario, such as a new feeder launch or an inherited KYC backlog. Include:
- setup, historical-data migration and reconciliation;
- recurring administration and any asset-based or minimum fees;
- onboarding, periodic reviews, enhanced due diligence and document chasing;
- filings, audit queries and out-of-scope support;
- additional users, integrations, data exports and termination assistance.
Per-case and bundled fees can both work when their scope is clear. Ask when a case becomes billable, whether rework is included, what pauses a delivery clock and how unresolved cases are handed back. A low base fee does not tell you the cost of the service your fund will actually use.
Record the appointment and oversight plan
Use a simple comparison sheet with one row per requirement. Record the provider’s answer, evidence reference, reviewer, unresolved gap and agreed action. Label each item supported, needs clarification, not demonstrated or not applicable, with reasons. These labels are a practical decision aid, not a regulatory scoring system.
Identify mandatory requirements before ranking service preferences. Price or a polished portal should not offset a material gap in required capability, access to records or accountability. Where a gap can be resolved before launch, document the appointment condition, owner, deadline and evidence needed to close it.
In the agreement and service levels, settle reporting deadlines, escalation timing, incident notification, subcontracting controls, audit access and exit support. Define how you measure turnaround, including what happens while waiting for an investor’s documents. Keep unresolved cases visible rather than excluding them from the report.
For a transition, agree the inventory of records, historical approvals, open exceptions and upcoming review dates. Reconcile the migrated population and allocate responsibility during the handover. Confirm that the receiving team can retrieve and use the files before ending access to the previous system.
After appointment, review actual performance: overdue cases by risk and age, unexplained changes in completion rates, repeat findings and missed reporting dates. Set review frequency from applicable requirements and your risk assessment, with earlier review after significant incidents or service changes. CIMA FAQ 25, for example, expects ongoing monitoring, timely records access and periodic review and testing of outsourced activities.
Add the KYC support your fund needs
AgentKYZ supports the investor KYC work alongside your fund administration arrangements. Choose the delivery model around the task you need completed:
- You need people to work the files. Managed KYC covers agreed onboarding, periodic reviews and remediation under your approved AML policy. AgentKYZ returns human-reviewed files with evidence, reasoning and unresolved exceptions for your authorised team to decide.
- Your compliance team runs the reviews. AgentKYZ’s KYC software reads case documents, maps ownership, screens sanctions, PEPs and adverse media, and prepares assessments for your reviewers. Discuss a hybrid arrangement if you need specialist support for escalations or additional capacity.
- Your administrator already performs KYC and you need oversight evidence. Shadow KYC separately tests administrator-held investor files against your fund’s AML policy and reports evidence-linked exceptions. Agree scope, independence and reporting arrangements; the review supports oversight and does not replace a programme-wide AML audit.
Your firm keeps compliance responsibility and final approval. Fund accounting, tax advice, statutory officer appointments and required audits should remain clearly allocated in the wider service arrangement.
To discuss the KYC scope, bring your jurisdictions, approximate investor count, review type, target date and the work your administrator already covers. You do not need to send identity documents to request a quote. Explore managed KYC and arrange a scoping call.