GOVERNANCE

Kyndryl, Incore Bank and Google Cloud automate bank KYC with agentic AI — 99% accuracy, human oversight kept by design

On September 3, 2026, Kyndryl, Swiss bank Incore Bank and Google Cloud announced the results of a pilot project using AI agents (Gemini models plus Kyndryl's "Agentic AI Framework") to automate identity verification and risk assessment (KYC) for bank customers. The announced result: up to 99% accuracy in automated document extraction, and customer onboarding time cut from several months to a few days — all, both executives quoted in the announcement insist, without removing the human oversight and auditability that banking regulators require.

KYC ("Know Your Customer") is historically one of banking's slowest and most expensive processes: gathering, verifying and cross-checking evidence from unstructured documents, internal systems and external sources, with human teams doing manual back-and-forth for weeks, sometimes months. Kyndryl's solution introduces a semantic layer with compliance rules coded as "policy as code" and guardrail agents: several AI agents work in parallel on structured and unstructured data to extract customer information, identify risk factors, produce an explainable risk score, and generate auditable decision files for compliance teams. Mark Dambacher, CEO of Incore Bank, sums up the intent: "Innovation must go hand in hand with trust, transparency and strong regulatory governance […] while maintaining the rigor of oversight and control that a regulated environment demands." Jacqueline Wild (Kyndryl Alps) adds that in a sector as regulated as banking, "success depends on strong governance, explainability, auditability, secure data access and human oversight."

The parallel with AppH is real, but deliberately modest — and that's exactly why it's worth stating plainly. AppManager's domiciliation module (launched this very morning, September 5, 2026) also tracks KYC documents for clients of corporate domiciliation agents operating under prefectural authorization: an automation rule warns staff 30 days before a document expires, and a "kyc_breach" incident can be flagged and tracked through to resolution. But AppH extracts no data from any document, computes no risk score, and never decides whether a customer is compliant — that's neither built nor planned at this stage: the assistant tells staff a deadline is approaching, a human always verifies and decides. This is not the same category of product as the Kyndryl/Incore/Google pilot — it's an operational reminder, not a regulatory decision engine. What stands out from this announcement is confirmation, from three players operating at a scale far beyond ours, that automating KYC and keeping humans in the loop are not contradictory: even with agents capable of extracting documents at 99% accuracy, no one here is claiming the machine decides alone.

We could have skipped this announcement — it's about banks, not SMBs, and AppH doesn't do KYC in the sense Kyndryl means it. But that's precisely why we're choosing to talk about it honestly rather than half-quote it to look good: on the very day we add our own KYC deadline reminder for domiciliation, three players operating at regulated banking scale publicly confirm that "human oversight" is not a brake on automation, even when the machine hits 99% accuracy. What we're NOT doing today — extracting, scoring, deciding — matters just as much to say as what we are doing: our role stays warning a human, never replacing them on a compliance decision.

Verified by a human at AppH