---
title: "US Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements — KYE Protocol™ coverage"
description: "US Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/us-bsa-fincen/
lang: en
source: "KYE Protocol"
---

> US Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

US Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements

# US Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements — 100% of in-scope requirements covered.

4 requirements · 4 in scope (4 enforced). The 100% is weighted over the in-scope base.

**Source:** The US Bank Secrecy Act (31 U.S.C. 5311 et seq.) and FinCEN's implementing regulations (31 CFR Chapter X) require covered financial institutions to maintain a risk-based AML program (31 U.S.C. 5318(h)), perform customer due diligence and beneficial-ownership identification (the FinCEN CDD Rule, 31 CFR 1010.230), file Suspicious Activity Reports (SARs) for suspicious transactions (31 CFR 1020.320 and parallel provisions), and keep records. KYE Protocol™(TM) governs WHETHER an AI agent's AML action may proceed at the action boundary - alert triage, sanctions screening, SAR drafting, KYC/CDD - under a named compliance officer's / BSA officer's authority, with due diligence recorded before the action and replay-provable provenance, and section-36 two-person sign-off on the consequential SAR filing. KYE™ does not run transaction-monitoring models, does not decide whether a transaction is truly suspicious, and does not replace the institution's BSA/AML program. · **License:** The Bank Secrecy Act and FinCEN regulations are US federal law published under the US Government; KYE™ registry cites their sections for mapping purposes.

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| AML program (31 U.S.C. 5318(h)) | 1 | 1 | 0 | 0 | 0 | **100%** |
| Customer due diligence & beneficial ownership (CDD Rule) | 1 | 1 | 0 | 0 | 0 | **100%** |
| Suspicious Activity Reporting (SAR) | 1 | 1 | 0 | 0 | 0 | **100%** |
| Record-keeping | 1 | 1 | 0 | 0 | 0 | **100%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `us-bsa-fincen.aml-program-5318h` | AML program (31 U.S.C. 5318(h)): an AI AML action proceeds only under a recorded named-authority decision | enforced | **rule\_packs**: `kye:rule-pack:aml-financial-crimes` **dictionaries**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `us-bsa-fincen.cdd-beneficial-ownership` | Customer due diligence & beneficial ownership (CDD Rule, 31 CFR 1010.230): CDD result recorded before an AI KYC/CDD action proceeds | enforced | **rule\_packs**: `kye:rule-pack:aml-financial-crimes` **dictionaries**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `us-bsa-fincen.sar-filing` | Suspicious Activity Reporting (SAR, 31 CFR 1020.320): the SAR filing is the killer consequential action requiring section-36 two-person sign-off | enforced | **rule\_packs**: `kye:rule-pack:aml-financial-crimes` **constitution\_refs**: `constitution/36-GOVERNEDUI.md` |
| `us-bsa-fincen.record-keeping` | Record-keeping (31 CFR Chapter X): a replay-provable provenance pin preserves the AI AML decision lineage | enforced | **rule\_packs**: `kye:rule-pack:aml-financial-crimes` **dictionaries**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |

Canonical KYE™ surfaces referenced on this page: [KYE Protocol™](https://kyeprotocol.com/).