Document Collection & Verification

• Configurable document groups (identity, address, etc.) with individual enable/disable control
• Per-group mandatory or optional setting
• Clients choose one document type per group from admin-enabled types
• Custom labels per document type shown to the client
• File upload support: JPEG, PNG, WebP, PDF (up to 10MB)
• Secure document viewing via tokenised URLs — documents are never publicly accessible

KYC Statuses & Lifecycle

• Six statuses tracked: none pending under_review rejected approved expired
• Configurable KYC validity period in days — approvals auto-expire via daily cron
• Configurable grace period before expired KYC triggers action
• Clients can resubmit documents after rejection

Automatic Service Control

• Automatically holds services, domains, and addons when KYC is missing or pending
• Automatically suspends services, domains, and addons when KYC is rejected
• Automatically activates services (runs ModuleCreate or ModuleUnsuspend) when KYC is approved
• Covers hosting services, service addons, and domains independently
• Optional setting to hold services while documents are under review, not just on rejection
• Prevents bypassing KYC via manual admin unsuspend or status change to Active

Order & Checkout Control

• Block checkout entirely until KYC is approved (configurable toggle)
• Apply KYC requirement to all products or specific product IDs only
• Cart validation fires before payment with a direct link to the KYC upload page

Rules Engine

• Create custom rules with multiple conditions and actions
• Condition fields: product ID, order amount, client country, risk level, client group, new client flag
• Operators: equals not_equals greater_than less_than contains in_list
• Priority ordering and enable/disable toggle per rule
• Trigger count tracked per rule

Risk Scoring Engine

• Automatic risk score calculated per client on submission
• Risk factors: multiple accounts from same IP, IP/country mismatch, proxy detected, VPN detected, high-risk country
• Risk levels: Low / Medium / High / Critical based on total score
• 30+ high-risk countries pre-configured
• Risk scores stored and visible in the admin panel per client

Admin Panel

• Dashboard with total, pending, approved, and rejected verification counts
• 6-month chart of approvals, rejections, and pending submissions
• Recent verifications list and high-risk clients panel
• Full client list with KYC status per client
• Verification detail view with document preview and one-click approve/reject
• Recent activity log

Reporting

• Overview report: daily breakdown of total, approved, rejected, and pending
• Approval rate percentage and average approval time in hours
• Risk distribution report and country report
• Configurable date range (default 30 days)

Email Notifications

• Automated emails to clients on: submitted, approved, rejected, expired, and verification required
• Uses WHMCS SendEmail API with automatic fallback to PHP mail()

Client Area

• Document upload page, status page, submission confirmation, and verification history
• KYC module hidden from primary client navigation
• Animated status banner on the client dashboard — context-aware per status: action required, under review, rejected, or expired

Data & Backup

• Full database backup downloadable by admin as a SQL file
• Clean deactivation: drops all tables and deletes all uploaded files from disk