If you are based in Luxembourg, raising a fund with a target of €1 billion or more, and need compliant LP onboarding, start with the files that could delay your next close. You need a process that identifies each limited partner, explains its ownership and funding, and gives the authorised approver enough evidence to decide.
A signed subscription agreement does not mean the investor’s KYC is complete. An investor portal can collect documents, but someone still has to assess conflicting ownership records, screening matches and missing evidence.
AgentKYZ’s Luxembourg investor onboarding service provides software-supported, human-reviewed KYC file work under your approved AML policy. It can work alongside your administrator or transfer agent. Your firm retains compliance responsibility and investor acceptance decisions.
This guide uses a €1bn+ target as an example of a large fundraise. The operational questions also apply to a US-dollar or other-currency billion-plus target. Fund size is a scoping input, not a separate Luxembourg AML category.
Scope the raise by investor complexity
A €1bn target does not tell you how many investor files need review. Twenty institutional commitments and hundreds of commitments through family holding companies can require very different staffing and document workflows.
Before comparing providers, give your operations lead, compliance team and administrator one shared brief:
- The fund’s legal form and regulatory regime, its alternative investment fund manager (AIFM), and any feeders or parallel vehicles.
- Expected LPs at each close, investor jurisdictions and the number of existing files that may need refreshing.
- The mix of institutions, individuals, trusts, nominees and layered corporate investors.
- First-close and later-close dates, current file gaps and available internal approvers.
- Who contacts the LP, who reviews each file and where the final record will be held.
Use the actual subscribing entities when estimating the workload. One investor group subscribing through several vehicles can produce several relationships to assess. Reusing evidence may help, but the reviewer still needs to establish which entity is investing and what has changed.
Choose software, managed KYC or both
Investor onboarding software can support questionnaires, document collection, subscription execution and status tracking. Check which functions a particular product actually includes. Your team or administrator may still need to perform the substantive review and make decisions on exceptions.
Managed KYC adds operational review capacity. It fits a raise where documents are arriving but ownership analysis, screening review or remediation is keeping files open. The scope should identify the work performed, the reviewer’s output and the decisions reserved for your firm.
For a fund already raising, first assess whether the current subscription portal and administrator can stay in place. Adding a defined KYC workstream may avoid changing the investor-facing process during a close. If the collection workflow itself is failing, evaluate that separately with the administrator.
AgentKYZ’s Luxembourg offering combines software and AI agents with managed KYC review. Agents organise documents and run the first pass; qualified compliance reviewers check the evidence and reasoning. We agree how the reviewed files and exception log reach your team and administrator. Confirm separately which provider will handle subscription execution, FATCA/CRS reporting and any system integrations, so each part of onboarding has a clear owner.
Map Luxembourg responsibilities before onboarding
The Law of 12 November 2004, as amended, sets the core anti-money laundering and counter-terrorist financing (AML/CFT) obligations. Customer due diligence (CDD) includes identifying and verifying the customer and beneficial owner, understanding the relationship and conducting ongoing monitoring. The work must reflect the risks of the customer and relationship.
For professionals within its scope, CSSF Regulation No 12-02 adds detailed requirements. However, a Luxembourg address does not mean every entity in the structure has the same supervisor.
A reserved alternative investment fund (RAIF) is not subject to CSSF product approval. It still has AML/CFT obligations. The AED’s RAIF technical sheet identifies the AED as its AML/CFT supervisory authority. The RAIF’s authorised external AIFM has its own obligations and supervisory position. Map the fund and manager separately.
Name the RR, responsible for compliance with AML/CFT obligations at management-body level, and the RC, responsible for controlling compliance with those obligations. The CSSF’s fund and manager FAQ and the AED’s RAIF guidance explain the relevant appointment arrangements. Buying file-review capacity does not appoint the provider to either role.
For CSSF-regulated outsourcing within Article 37 of Regulation 12-02, document the delegated tasks, information access and oversight. Distinguish outsourcing from statutory third-party reliance under Article 3-3 of the AML Law. Both require more than a provider saying a file is complete. Our Luxembourg AML requirements guide explains these controls in more detail.
Build an LP file your approver can use
Agree the evidence requirements with your compliance team before sending requests to investors. The following is a practical file checklist, to be adapted to the entity, risk and approved policy:
- Investor identity and authority. Establish the subscribing entity’s legal existence and verify the people acting for it and their authority. Check that names and signatories agree across the subscription documents and KYC record.
- Ownership and control. Trace the structure to the relevant natural persons and explain control through other means. Use register information alongside supporting evidence. Article 3(2a) of the AML Law prohibits exclusive reliance on central beneficial ownership registers.
- Screening and risk assessment. Record sanctions, politically exposed person (PEP) and adverse-media checks for the relevant parties, the assessment of potential matches and the proposed risk rating. A PEP match is not itself a sanctions designation.
- Funding evidence. Establish source of funds and, where required, source of wealth. Source of funds concerns the money used for the investment; source of wealth concerns how wealth was accumulated. A bank transfer receipt may not explain either fully.
- Review and decision. Link conclusions to evidence, record outstanding gaps and identify the approver. Apply enhanced due diligence and senior-management approval where required, including the applicable PEP requirements under Article 3-2.
Investor eligibility, subscription terms and FATCA/CRS tax classification are separate checks. Assign them to the appropriate legal, tax and administration teams. KYC clearance alone does not establish that an investor is eligible for the vehicle or that marketing to that investor was permitted.
Keep incomplete files visible before each close
Article 3(4) of the AML Law generally requires identity verification before establishing the relationship or carrying out the transaction. Limited derogations have conditions. A fundraising deadline is not a basis for treating incomplete checks as complete; any proposed exception needs assessment by the responsible compliance and legal team.
Our operational recommendation is a closing list that shows each LP’s KYC status, unresolved evidence, escalation owner and approval status. Track subscription-document and tax status separately. Give missing-document requests a named owner so the investor does not receive conflicting requests from several providers.
For example, if an ownership chart names a different controlling person from the supporting documents, the file should show that discrepancy and the next action. An upload confirmation should not move it into an approved queue.
Ask providers to distinguish time spent reviewing a complete file from time waiting for investor evidence or your team’s approval. Agree delivery capacity and escalation arrangements against the next close. Do not treat a headline turnaround time as a promise that every complex LP can be cleared within it.
Check data handling and handover before signing
LP onboarding involves identity documents, ownership records and financial information. Before transferring live files, establish who is controller or processor, where data is stored and accessed, and which subprocessors are involved. Under the GDPR, processor terms, appropriate security and international-transfer requirements need assessment, including Articles 28 and 32 and Chapter V.
Ask for evidence of access controls, security testing, incident handling, deletion arrangements and an export you can use after the contract ends. Where AI services process documents, ask which providers receive the data and what contractual restrictions apply to its use. Review the supporting evidence and engagement terms together before transferring files.
If your AIFM is in scope of DORA, assess the proposed ICT service and applicable contractual, register and notification requirements. ESMA Q&A 2447 explains that signing an ICT contract directly through the fund does not necessarily take it outside the AIFM’s DORA obligations.
Test handover with a representative sample agreed with compliance. Include a layered corporate LP and a file with an unresolved issue. Have your administrator and approver check whether they can retrieve the underlying evidence and understand the conclusion. Ask for an exception log as well as completed files.
Plan for later closes and ongoing reviews
After acceptance, the relationship still needs monitoring. The AML Law requires risk-based reviews and updates when relevant circumstances change. A change in ownership or new adverse information can require attention before the next scheduled review. Define who handles those triggers and who owns transaction monitoring; a periodic document refresh does not cover every monitoring obligation.
Article 3(6) generally requires CDD records to be retained for five years after the relationship ends, subject to extensions and other legal retention requirements. A fund’s final fundraising close is not the end of every investor relationship. Agree retention and retrieval arrangements with the administrator and any KYC provider.
The EU AML Regulation, Regulation (EU) 2024/1624, generally applies from 10 July 2027, as the CSSF explains. A fund raising in 2026 may have later closes and investor reviews after that date. Keep current requirements separate from the transition plan, and ask how policy changes will be reflected in the files and provider scope.
Scope your next close with AgentKYZ
For your next close, AgentKYZ’s Luxembourg KYC service provides review capacity scoped around your current raise. The work can include identity and authority review, beneficial ownership analysis, screening, risk assessment and agreed remediation. Your team receives human-reviewed evidence and an exception log for its decisions.
Bring the fund structure, target currency and size, expected LPs per close, ownership complexity, current backlog, administrator and next closing date. Ask us to confirm the file population, document-request responsibilities, deliverables, delivery schedule and price in writing before work starts. Use an anonymised summary for the initial discussion; agree data-handling terms before sending investor documents.
AgentKYZ supports your existing RR and RC arrangements with documented file work. Your firm keeps investor acceptance, high-risk approvals and reporting decisions; regulatory acceptance remains subject to the applicable requirements and supervisory assessment. For files already held by an administrator, a separately scoped Shadow KYC review can support your oversight.
Book a 15-minute call to scope your Luxembourg LP onboarding. Bring the file count and closing date so the discussion can focus on the work your team needs completed.