KYC teams that use Encompass experience a great deal of frustration. Analysts spend countless hours a week continuously requesting the same documents, performing the same verification activities, logging the same notes into the same fields, and passing them off while they wait for their next job to come in. Meanwhile, in the background, the possibility exists for errors from untrained human resources.
Each audit becomes an adventure. AI agents are marketed specifically to solve these problems. And, in fact, some of them do provide real value. However, not all types of AI agents are appropriate to use in a KYC workflow. Or more accurately, it’s important to know that the distinction between these types of agents is greater than what most vendors disclose.
Constrained AI agents are designed not to do too much. Instead, they are used for very specific defined tasks. They are efficient, predictable and able to perform as needed within the constraints imposed by various regulatory authorities. In this blog, we will discuss what are constrained AI agents, how they differ from ‘open ended’ agents and how this impacts compliance teams, data extractors and developers that use/encompass.
Quick Answer: KYC automation in Encompass is most effective when AI agents KYC compliance operate within predefined permissions, policies, and approval workflows.
What is Encompass KYC Automation and Where Does It Break Down?
The Encompass KYC automation process automates the verification of borrower identity for lenders as well as fulfilling KYC compliance requirements; it reduces manual effort; increases efficiency; and enhances accuracy. However, if consumer data is missing or improperly formatted or doesn’t match or if there is an issue with a 3rd party verification service, the KYC automation will create an exception.
How does Encompass use AI for KYC?
Encompass has integrated artificial intelligence to facilitate KYC through automated processes for verifying identity as well as analyzing documents. It uses intelligent data capture to read ID documents, bank statements, and application forms to extract data from them. Next, it checks the captured information against other sources of information to find inconsistencies or determine if there is a risk of fraud.
Missing documentation or unusual activities are then flagged. As such, this helps alleviate some of the manual review responsibilities that are typically assigned to a loan officer. The use of AI within workflow processes allows Encompass to allow for an expedited borrower onboarding process while maintaining a strong KYC compliance record for all lenders and allowing the corresponding lender to continue with their mortgage approval process without delay.
The real bottlenecks analysts face every day
- The challenge of interpreting complex corporate structures across multiple jurisdictions.
- The difficulty of extracting beneficial ownership data from unstructured documents (e.g., scanned PDFs and translation of filings).
- The challenge of determining when two sources of information contradict each other, which should be flagged for review.
- The difficulty of running checks again after needing to remediate without disrupting the audit trail.
- Difficulties related to processing exceptions that do not conform to established workflows.
How does Encompass handle KYC automation?
Encompass KYC automation works of AI document processing, workflow rules and compliance checks, all featured in the LOS. Upon submitting an application, the system can collect and organize identity documentation automatically and will compare those to various records to ensure accuracy.
Each lender has specific KYC rules that will then be applied by the platform to confirm compliance with KYC regulations, any discrepancies that occur will automatically be assigned as tasks for a loan officer’s review. The results are an increase in operational efficiency, improved accuracy and a shortened onboarding timeline all while ensuring compliance with KYC standards throughout the mortgage lending process.
Open-Ended AI Agents vs. Constrained AI Agents: What is the Real Difference?
This is a big question that developers and compliance officers are trying to solve right now, and the answer to this question will dictate much of how you design your KYC automation stack.
| Features | Open-Ended AI Agent | Constrained AI Agent |
| Scope of action | Can use any tools, make any choices, and have access to any web pages (subject to permissions granted by developers) | Works with only a limited number of tools and decisions |
| Audability | Difficult to see how you came to a certain decision | All actions are tracked and can be referenced back to a defined rule |
| Regulatory fit | Challenging to the regulated industry, getting certified | Meets and exceeds the compliance and explainability requirements |
| Error handling | May make unexpected decisions towards the end of their process | Reverts back to human review for decisions out of scope |
| Integration | Must have extensive sandboxing and monitoring | Plugs into Encompass API with defined permissions |
| Trust level required | High: You provided the agent with a lot of latitude to make independent decisions | Moderate: The agent is required to make independent decisions, but under limits you establish. |
In research contexts, open-ended agents have remarkable capabilities, like multiple-step reasoning and flexible web browsing and synthesising. However, in terms of KYC regulations, they are a disadvantage in that they do not provide the degree of predictability or consistency that regulators are looking for.
What are constrained AI agents in mortgage?
AI agents used in home lending are referred to as “constrained” because they operate under well-defined parameters and compliance rules. AI agents KYC compliance perform different functions such as document validation, data validation, and risk assessment by following specified lending regulations, privacy regulations, and lender-specific policies.
Constrained AI agents are essential in the mortgage processing system, where decisions must be reliable and compliant with applicable law. By leveraging constrained AI agents to assist human mortgage lenders, constrained programs enable faster loan processing.
Why Constrained AI Agents Fit Encompass KYC So Well?
The Encompass platform is built on rules; it has a workflow, an automated process, data orchestration and a defined structure. The constrained AI agent provides additional value within Encompass without changing any existing workflows or processes.
Here are five specific reasons why this pairing works
1. Defined API Permissions Match Compliance Boundaries
The agent is not able to go outside those approved boundaries. In regulated environments, this is essential as, each time there is an access to data, permission for that access has to be validated.
2. Deterministic Behaviour Makes Audits Simple
When a constrained agent updates a risk flag or obtains a UBO chart, the operation has a defined cause. The condition, data used and result is recorded. Auditors can follow the trail of logic leading up to the audit without having to decipher the reasons for a neural network to act in a certain manner. Traceability is essential in KYC. Therefore every action has to be traceable.
3. Graceful Escalation Keeps Humans in the Loop
A well-designed constrained agent is aware of its own limitations and knows when it has reached the limits of its capabilities. When it encounters an unclear ownership structure it cannot fully resolve. This is not considered a failure, it is a function of the system. Open-ended agents will proceed even when they are faced with uncertainties and make an educated assumption. A constrained agent, by design, will not make an assumption, he will escalate the case to a human.
4. Reduced Hallucination Risk on Structured Data
Encompass workflows typically operate on structured, verifiable data supplied by integrated registries, document-processing services, and screening providers. A constrained agent must use specific tools to obtain a specific result. In addition, the result produced by a constrained agent in an Encompass workflow will be an action that has been documented, not simply a paragraph of text.
5. Faster Iteration Without Breaking the Workflow
When your constrained agent interacts with three specific Encompass fields and two external registries, updating your agent is an easy process. You simply make necessary changes to your code and conduct testing against any existing cases before deploying. This process does not involve reconfiguring an entire reasoning system each time you have a regulatory update or when there are changes to the schema of a data source.
How do AI agents automate KYC workflows?
AI agents automate KYC processes by performing tasks that are repetitive in nature and require lots of data. They will collect customer information, review documents, extract important information from them, and check if the customer’s identity can be verified using trusted databases. If information on the customer is missing or incorrect, the AI agent will send an alert or request additional information automatically.
The AI agent can also screen customers against lists of fraud and compliance databases. With AI completing most of the first review steps of KYC automation mortgage 2026 instead of having humans review every file manually, an agent will have to review only exceptions or complex cases. This increases the speed of the KYC process, reduces overall costs, increases accuracy, and improves compliance.
What Constrained AI Agents Actually Do Inside an Encompass Workflow?
To illustrate this with an example of how a constrained agent would work in the course of the KYC onboarding process at a typical corporate organization using Encompass.
| Steps | What does the agent do? | What it cannot do? |
| Company lookup | Calls Companies House, GLEIF, or other approved registries through integrated services connected to Encompass. | Cannot access registries that are not explicitly authorized |
| Document extraction | Extracts UBO data using integrated document-processing services before writing validated results into Encompass. | Can only input UBO data after performing a check to ensure a minimum level of confidence exists. |
| Sanctions screening | Uses integrated sanctions-screening providers and records the results in Encompass. | Cannot clear the match unless there is human sign-off |
| Risk scoring | Applies predefined organizational risk rules (or integrated risk models) and records the resulting scores in Encompass. | Cannot override the risk assessment rules or change the weighting applied to them |
| Case not generation | Creates a structured case note based on the information recovery. | Cannot submit a case to Encompass for processing without the approval of an analyst. |
| Escalation | Flags ambiguous cases and prepends reason for the ambiguity code into the cases for routing to the appropriate queue. | Cannot determine a case is low risk without resolving all required data to produce a low confidence case determination. |
Encompass KYC automation does not act as a fully autonomous agent making decisions on who gets onboarded. Instead, it is a documented, precise assistant that performs most of the mechanical portion of work and provides a smaller judgment-based portion to qualified, payroll personnel who have the authority to make those decisions.
What is AI model risk management in KYC?
The AI risk management process for KYC is involved with ensuring that the AI systems used for identity verification, and compliance are accurate, equitable, and safe. The organisation needs to conduct testing of the AI models prior to being used, while in use, to confirm that they are free of errors and bias and not making careless predictions.
Financial Institutions are responsible for monitoring the AI models in order to ensure that they are compliant with the current regulations. This is particularly important in KYC since an AI model making an incorrect decision, may lead to fraud, civil litigation, and/or customer rejection. The human oversight, audit audit trail, and regular updates are all part of KYC AI Risk Management. These processes guarantee support for Encompass AI compliance automation.
How Does This Compare to Other KYC Automation Approaches?
There are numerous other automated KYC solutions/mortgage KYC software available in the market. Teams looking into the Encompass KYC automation solution typically assess the solution against three alternatives.
-
RPA-based KYC automation
Robotic Process Automation software (RPA) solutions, such as UiPath and Automation Anywhere, are designed for handling click-based tasks within Encompass. These solutions can be deployed quickly and easily when they are being used for simple, repetitive processes. However, they require maintenance when applications, interfaces, or workflows change. RPA solutions have no reasoning capabilities; they follow exactly the process they were trained to follow.
-
Traditional workflow engines
Traditional KYC workflow management solutions, such as Pegasystems and Appian, are designed to provide rules-based KYC management. These products excel at managing standardised processes but require substantial configuration when exceptions occur. Traditional workflow engines do not inherently learn from data without additional AI or machine learning integrations.
-
General-purpose LLM integrations
Some of the development teams are trying to utilize large language models (LLMs) directly in their KYC workflows, and they are getting mixed results. There are many instances where LLMs will produce outputs that might appear to be reasonable but are not accurate; or they will produce outputs that are inconsistently formatted or do not have an audit trail, which makes them unusable.
Key Insight:
There is a definitive and useful place for constrained AI agents. The combination of LLMs and robotic process automation (RPA) gives organizations the flexibility of using AI while also fulfilling the requirements of an audit trail and providing consistent outputs for each use case. No other outputs from unconstrained LLMs or pure RPA provide these outputs.
Real Observations from Teams Building on Encompass
We looked at developer discussions, RegTech conference presentations, and analyst feedback over the past 18 months to understand what is actually working. These are the patterns that emerge in case AI mortgage compliance platform exists.
What teams get right?
- Teams develop agents based on a single high-volume, low-judgment task (e.g., document summarization or registry lookups) before determining broader scope / role for the agent.
- Teams capture the agent’s decision log directly within the Encompass case record, as opposed to in a separate system.
- Teams create explicit fallback conditions (known as “failover”) prior to deploying the agent rather than after experiencing their first failure.
- Teams prepare analysts by providing them with knowledge of how the agent operates (e.g., what types of issues will be handled by the agent versus requiring an escalation) so that escalations can be processed more quickly.
- Teams perform parallel validation (i.e., comparing agent output with human output) for the first three-months of operation before achieving full production deployment.
Where do teams run into trouble?
- Assuming that an agent can manage jurisdictional edge cases that it was never trained on or designed for.
- Teams skipping the explainability layer and then having difficulty explaining output produced by the agent to auditors and regulators.
- Allowing the agent’s role to expand (the scope creep phenomenon) before having fully validated the agent in its constrained state.
- Underestimating how much the quality of documents impacts extraction accuracy.
“The primary error we observe is that teams create the agent to handle low-complexity cases but are not prepared for the complexity of cases that arise. Design with ambiguity from the outset; otherwise, you will be surprised when you start encountering them.”
— Senior RegTech architect, DACH region financial services firm (LinkedIn post, March 2025)
Building a Constrained AI Agent for Encompass: What Developers Need to Know?
When building or reviewing an agent’s architecture, technical decisions that designers make are as follows:
-
Tool definition is everything
Constrained agents rely heavily on tool definitions; therefore, every tool should retrieve data from a single source, write to a single field or send a single type of notification. The more generic a tool is, the greater the amount of ambiguity will exist, whereas with specific tools, reliability can be established.
-
The system prompt is the constraint layer
The agent’s identity, allowable scope, and escalated logic are defined by the system prompt. The prompt must include specific examples of what the agent will not do, as well as what it will do. Negative constraints are just as important as positive instructions.
-
Confidence thresholds prevent bad writes
Before an agent makes a write to an Encompass case record, it should assess the confidence it believes is associated with a particular output. For example, if an organization may choose an 85% confidence threshold, the agent should create a flag to facilitate the routing for review, instead of writing an output value that could potentially be incorrect.
-
Idempotency protects the audit trail
Idempotency is necessary for all actions taken by an agent. It means if the agent runs a given workflow two times, it should yield the same results and not create two entries in the system. This helps to ensure both the quality of the data and the integrity of the audit trail whenever a workflow is retried, or an unexpected loop occurs as a result of an edge case.
From a practical implementation standpoint, this is where Awesome Technologies Inc.’s Encompass API development services become critical. They allow institutions to build in constrained AI logic directly into existing KYC pipelines, ensuring every decision, field update, and fully traceable exception.
Is Your Team Ready for Constrained AI Agents in Encompass?
An honest assessment is very helpful prior to investing any time or resources building or purchasing constrained AI agents. Take some time to work through these questions as a team before you proceed.
- Do you know exactly which KYC tasks are rule-based and repetitive, and which ones are based on human judgment?
- Is your workflow in Encompass stable enough that any changes are planned and clearly documented with version control?
- Do you have a compliance officer who knows what your future AI-generated outputs will need to look like for audit documentation?
- Are you able to rely on the quality of the documents you are extracting information from, or does this vary between documents?
- Do you have a method of reviewing agent errors and providing feedback on those corrections back into the agent configuration process?
If you have answered yes to most of these questions then restricting agents would definitely be the next reasonable step. However if you have several unanswered questions, the next step would most likely be to standardise processes before implementing automation.
The Next Step in KYC Automation
For many organizations, successful KYC automation depends more on process and system design than on AI capability alone. There are plenty of functional tools available to utilize that can automate KYC tasks that are repetitive and in a structured manner when designed effectively from the onset with proper constraints. The long-term vision of KYC automation in Encompass as an AI mortgage compliance platform will involve AI performing specifically what it is designed to do consistently, transparently and within the bounds of what your compliance team has approved.
The Bottom Line
At this point, we have clarity around what direction things are headed, but not necessarily concerning the timeline. As we move into 2026, a majority of Tier 1 and Tier 2 banks have implemented some level of AI-aided KYC Triage, with constrained architectures being the prevalent solution for these institutions. This is because constrained architectures assist in meeting both efficiency and regulatory compliance pressures.
According to a report published by Chartis Research in 2026, over 61% of financial institutions utilized some form of constrained agent designs to incorporate AI into KYC workflows by 2025, compared to only 29% of these institutions just two years prior. The transition to constraint was not done out of an abundance of caution but rather through pragmatic engineering.
The next big development is going to be multi-agent coordination, where one agent for document extraction passes its case off to a second agent who assesses risk through scoring, passing it to the next agent, and so on throughout the process unimpeded within defined handoff points and with human supervision along the way. Modular design provides for very narrow and easily tested functions while ultimately constructing an extremely powerful, end-to-end automation system.
Encompass can serve as the basis of the platform layer for all constrained agent networks. Encompass has an established structured data model, API architecture, and existing Encompass KYC workflow automation logic. Encompass already provides a strong foundation for automation. However to fully unlock its potential for constrained agent networks and KYC workflows, partner with our Encompass automation services today to streamline implementation, enhance integrations, and scale your lending operations with confidence!
Frequently Asked Questions
1. Can constrained AI agents replace KYC analysts entirely?
No, they will not replace KYC analysts. This is purposeful because constrained agents execute the mechanical, repetitive and rules-based part of KYC. Only experienced human resources can perform the judgement-based parts of KYC. These include making decisions based upon complex ownership structures, discovering risk on borderline cases or managing politically exposed persons.
2. How do constrained agents handle data privacy requirements like GDPR?
Constrained agents can only access the data that their approval toolsets provide access to. Data definitions, retention, and processing rules to meet GDPR were established in advance and prior to deploying the agent. Meaning that compliance to GDPR exists within the configuration layer. Hence, an agent cannot access any personal data unless granted permission.
3. What happens when the agent encounters a case it cannot handle?
The case will be escalated. A well-designed constrained agent will have assigned explicit conditions for when escalation is warranted. If any of these conditions trigger, then the constrained agent will write a structured summary of its findings and forward the case to a human review queue.
4. How long does it take to deploy a constrained AI agent inside Encompass?
Deployment timelines typically range from several weeks to several months depending on complexity. The development of complex agents covering multiple stages of the workflow automation may take longer as testing all edge cases requires more time to gather real-case data.
5. Are constrained AI agents more expensive than RPA alternatives?
The initial build cost is typically more than for a basic RPA deployment. However, over the long run, it is often less expensive to own a constrained agent because it more gracefully handles exceptions, requires less maintenance, and uses fewer analyst hours for escalations that an RPA cannot handle.
6. How do regulators view AI agents in KYC workflows?
Regulatory guidance from most of the major jurisdictions (FCA, FinCEN, MAS, etc.) is becoming more uniform. AI assistive KYC is permissible if the institution showcases well defined levels of explainability, auditability, and suitable human oversight. Constrained agents are designed specifically with those three principles in mind. Open ended agents are likely to be scrutinized much more rigorously in regulatory environments.

