Customer / Client Lifecycle & Entitlement Centre
Internal workspace for BLACKSWAN's end-to-end client lifecycle: prospect intake → KYC/KYB → jurisdiction & eligibility posture → classification → entitlements → counterparty documentation → service activation → access reviews → suspension/offboarding. Every transition is gated by counsel countersign, evidence-pack attestation, and SOD; nothing in this Centre constitutes a suitability determination, client acceptance, or any regulator-recognised onboarding act. Conservative posture throughout — internal readiness only.
Twelve stages · counsel-gated transitions · evidence captured at each step
Lead capture
Initial interest registered; no MNPI, no KYC artefact, no commercial engagement. Counsel-locked outreach language only.
Internal triage
Internal Commercial + Compliance triage; jurisdiction first-look; counterparty-type drafted; RAID entry where flagged.
Counterparty due diligence
KYC partner DD (contract pending) · KYB documents collected · UBO chain captured · sanctions/PEP screening logged.
Counsel countersign
External counsel reviews jurisdiction posture, perimeter overlap, MNPI scope; locks counterparty wording.
Eligibility assessment
Eligibility assessed against the activity perimeter (POL-005); never a suitability determination; never a regulator-recognised classification.
Internal classification
Internal client classification (pilot / counterparty / observer); MNPI binding scope set; jurisdiction tags applied.
Counterparty documentation
MSA · DPA/SCC · pilot tenant template · NDA · counsel countersign per artefact (CTL-010).
Entitlement matrix applied
Product · venue · data-room · reporting · billing entitlements bound to client classification; least-privilege default.
Service activation
Identity provisioned (Entra OIDC target) · per-pilot tenant created · per-recipient link signing keys issued · billing flagged.
Quarterly access review
Quarterly review per role; stale access flagged; consent / attestation re-confirmed; suspension recommended where stale.
Suspension
Service paused; entitlements pulled; data retention hold applied; counsel-bounded resumption path documented.
Offboarding · archive
Service revoked; per-recipient signing keys rotated; retention class enforced; audit ledger frozen at 10-year retention.
Transition · gate · evidence captured · owner
| Transition | Gate | Acceptance criteria | Evidence captured | Owner |
|---|---|---|---|---|
| Prospect → Intake | Counsel-locked outreach | Internal-only outreach phrasing · no MNPI · no commercial commitment | Outreach log · counsel-locked footer hash | Operations · Compliance |
| Intake → KYC / KYB | KYC partner engagement | KYB docs · UBO chain · sanctions / PEP screening clean | KYC partner ledger (KYC-EV-*) | Operations · Compliance |
| KYC → Counsel Review | Counsel countersign | Counsel reviews jurisdiction / perimeter overlap; phrasing locked | Counsel countersign hash (CTL-010) | External Counsel · Compliance |
| Counsel Review → Eligibility | Perimeter alignment | Activity Perimeter pack (POL-005) confirms in-scope; no suitability claim | Eligibility note · perimeter cross-reference | Compliance · Operations |
| Eligibility → Classification | Internal classification | Pilot / counterparty / observer · MNPI scope bound · jurisdiction tags applied | Classification record · MNPI ledger | Compliance · Tech/Security |
| Classification → Docs | Documentation countersign | MSA · DPA/SCC · pilot tenant template · NDA · counsel countersign per artefact | Counterparty document hash set | External Counsel · Operations |
| Docs → Entitlements | Entitlement matrix applied | Product · venue · data-room · reporting · billing entitlements bound to classification | Entitlement ledger | Operations · Tech/Security |
| Entitlements → Activation | Identity + tenant provisioned | Entra OIDC sign-up · per-pilot tenant created · per-recipient link signing keys issued | Activation audit-event tag (CCLE-ACT-*) | Tech/Security · Operations |
| Activation → Access Review | Quarterly cadence | Role-bound access review · consent / attestation re-confirmed | Access review log (AR-008) | Tech/Security · Compliance |
| Access Review → Suspended | Stale access / breach signal | Trigger logged · counsel-bounded resumption path documented | Suspension record · retention hold | Tech/Security · Compliance |
| Suspended → Offboarded | Offboarding runbook | Per-recipient keys rotated · entitlements pulled · billing closed · ledger frozen | Offboarding manifest hash · 10-y retention | Tech/Security · Operations · Compliance |
Ten entitlement classes × client classification
| Entitlement class | Prospect | Pilot · Per-Tenant | Counterparty | Observer (Investor / Regulator-Review) | Auditor (Engagement) | Linked pack(s) | Owner |
|---|---|---|---|---|---|---|---|
| Product access | None | Pilot-scoped | Per-contract | Read-only · redacted | n/a | Product Governance · Activity Perimeter | Operations |
| Venue access (where in scope) | None | Sandbox | Per-contract | Deny | Deny | Activity Perimeter | Compliance · Operations |
| Data-Room / MNPI | Deny | Per-pilot · consent | Per-engagement · consent | Counsel-redacted | Scope-bound | Data-Room MNPI Access · Policy Attestation | Tech/Security · Compliance |
| Onboarding flow | Outreach | KYC partner | KYC partner | n/a | n/a | KYC/KYB Onboarding | Operations |
| Counterparty documentation | NDA | Pilot template | MSA + DPA/SCC | n/a | Engagement letter | Partner-Route Assurance | External Counsel |
| Billing & revenue | None | Pilot fee schedule | Per-contract billing | None | Engagement billing | Revenue Recognition · Tax/VAT | Finance |
| Reporting pack | None | Pilot dashboard | Per-contract reporting | Redacted external | Scoped reports | Board-Pack Attestation · Conduct Risk MI | Operations |
| Complaints / escalation | n/a | Per-pilot · counsel route | Standing channel | Standing channel | Engagement channel | Complaints · Conduct Risk MI | Compliance · Operations |
| Audit / evidence visibility | None | Pilot evidence | Counsel-locked | Counsel-redacted | Audit binder scope | Regulatory Exam Response · Control Testing | External Counsel · Auditor |
| Support / break-glass | n/a | Pilot support · JIT | Tiered support | n/a | Engagement support | Outsourcing Concentration · Settlement Responsibility | Tech/Security · Operations |
Lifecycle stage × BLACKSWAN evidence packs
| Lifecycle stage | Primary evidence pack(s) | Touches user-role posture | Counsel countersign required |
|---|---|---|---|
| Prospect / Intake | Activity Perimeter · Policy Attestation | Compliance · Operations | For external phrasing only |
| KYC / KYB | KYC/KYB Onboarding · Partner-Route Assurance · Outsourcing Concentration | Compliance · Operations · Tech/Security | Yes |
| Counsel Review | Regulatory Exam Response · Activity Perimeter · Regulatory Change | Compliance / Legal | Yes — mandatory |
| Eligibility | Activity Perimeter · Product Governance · Conduct Risk MI | Compliance · Operations | For regulator-facing language |
| Classification | Data-Room MNPI · Policy Attestation · Product Governance | Compliance · Tech/Security | Yes (where MNPI binding) |
| Documentation | Partner-Route Assurance · Settlement Responsibility · Outsourcing Concentration | External Counsel · Operations | Yes — per artefact (CTL-010) |
| Entitlements | Product Governance · Auth · Data-Room MNPI · Policy Attestation | Tech/Security · Operations | For external-bundle visibility only |
| Activation | Auth · KYC/KYB · Policy Attestation | Tech/Security · Operations | For regulator-facing artefact |
| Billing | Revenue Recognition · Tax/VAT · Settlement Responsibility | Finance · Operations | For revenue narrative |
| Access Review | Policy Attestation · Conduct Risk MI | Tech/Security · Compliance | n/a (internal) |
| Complaints / Suspension | Complaints · Conduct Risk MI · Incident | Compliance · Operations | For regulator notification |
| Offboarding | Policy Attestation · Outsourcing Concentration · Regulatory Exam Response | Tech/Security · Operations · Compliance | For regulator-facing reference |
What each role sees / does in this Centre
Full lifecycle view
Reads the full 12-stage ledger; approves Tier-1 transitions; standing risk acceptance for founder-root applies (DEC-005). Dual sign-off required on suspension/offboarding.
Counsel-bound view
Counsel countersigns every external-facing artefact (CTL-010); reviews jurisdiction / perimeter alignment; locks counterparty wording. Approves classification and MNPI binding.
Workflow operator view
Operates the 12-stage workflow; manages KYC partner flow; provisions per-pilot tenant; coordinates entitlement matrix. Approve on activation; dual sign-off on suspension.
Evidence-bound view
Writes the evidence-pack updates per stage (KYC, classification, docs, activation, offboarding); per-file limitation footer enforced (CTL-006).
Per-tenant view
Per-pilot tenant view only; reads onboarding status · entitlements · documentation; signs NDA / pilot template / MSA; never sees other tenants.
Investor-room view
Read-only on aggregated, redacted, counsel-approved "pipeline" view; no counterparty names; no MNPI; no auditor representation. Per-recipient link signing required.
Regulator-room view
Read-only on counsel-locked, redacted aggregate posture only; never sees Internal Only material; per-share TTL; per-recipient watermark; audit-logged access.
Engagement-scope view
Reads engagement-scope evidence on revenue / classification / billing only; engagement letter required before any production access; counsel-bounded scope.
IAM & tenant view
Provisions identity (Entra OIDC target) · per-pilot tenant · link signing keys; JIT elevation for break-glass; owns access-review cadence and consent records.
Workflow · accountable · approver · SOD pair · compensating control
| Workflow | Accountable | Approver | SOD pair | Compensating control | Linked policy / control |
|---|---|---|---|---|---|
| Onboarding decision (Eligibility → Classification) | Compliance | Founder/Admin + External Counsel | Triage ≠ Approver | Counsel countersign · CTL-010 | POL-002 KYC/KYB · POL-005 Perimeter |
| MNPI binding for client | Compliance / Tech/Security | External Counsel + Tech/Security (dual) | Operator ≠ Approver | Per-share access review · audit log | POL-003 MNPI · CTL-003 |
| Entitlement grant (Docs → Entitlements) | Operations | Tech/Security + Compliance | Author ≠ Approver | Dual sign-off + entitlement ledger | POL-019 Product Governance · CTL-004 |
| Per-pilot tenant provision | Tech/Security | Operations + Tech/Security | Build ≠ Sign-off | Tenant manifest hash · audit log | POL-007 Partner Route · CTL-005 |
| Billing activation | Operations · Finance | Finance + External Counsel (for material) | Booking ≠ Approval | External Auditor + audit binder | POL-008 Revenue · POL-009 Tax · CTL-009 |
| Suspension (Review → Suspended) | Operations / Tech/Security | Compliance + Tech/Security (dual) | Single-party ≠ Suspension | Counsel-bounded resumption path · retention hold | POL-015 Complaints · POL-012 Incident |
| Offboarding (Suspended → Offboarded) | Tech/Security · Operations | Compliance + Tech/Security (dual) · Finance for billing close | Custodian ≠ Approver | Per-recipient key rotation · ledger freeze | POL-018 Attestation · CTL-006 |
| Complaint escalation to regulator | Compliance | Compliance + External Counsel | Operator ≠ Submitter | Counsel countersign + audit-logged decision | POL-015 Complaints · POL-014 Reg Change |
Cadence · owner · break-glass · client-support rules
| Review | Cadence | Last review | Owner | Open exception / gap | State |
|---|---|---|---|---|---|
| Active client tenants | Quarterly | 2026-04-30 | Tech/Security · Compliance | KYC contract pending for new tenants | Under Review |
| Investor-review rooms | Per share | n/a · awaiting counsel | Compliance · Founder | Locked until counsel rule-pack countersign (2026-05-19) | Counsel Pending |
| Regulator-review rooms | Per engagement | n/a · counsel-bounded | Compliance · External Counsel | Counsel session 2026-05-19 | Counsel Pending |
| Auditor engagement scope | Annual · interim | n/a | Finance · Compliance | External auditor engagement letter pending | Docs Pending |
| Break-glass client support | Quarterly drill | 2026-02-12 | Tech/Security · Operations | Drill overdue (target 2026-05-12); JIT elevation only · dual approver | Break-Glass · Overdue |
| Stale prospect intake | Monthly sweep | 2026-05-15 | Operations · Compliance | 2 prospects > 60d without KYC start — auto-archive flagged | Sweep |
| Stale classification | Quarterly | 2026-05-09 | Compliance · Tech/Security | None outside cadence | Healthy |
Four gates · all green before any client-facing artefact leaves internal scope
Counsel countersign
External counsel countersigns every external-facing client-lifecycle artefact (NDA · pilot · MSA · DPA/SCC · billing); per artefact, per audience.
Classification + MNPI scope set
Internal classification recorded, MNPI binding scope explicit, jurisdiction tags applied; never an external suitability claim.
Entitlement ledger
Every product / venue / data-room / reporting / billing entitlement bound to client classification with named owner and audit-event tag.
Revocation readiness
Single-action revocation pulls per-pilot tenant keys + entitlements; offboarding runbook proven on most recent rotation drill.
Audit log of lifecycle / entitlement events
| Timestamp (UTC) | Actor | Event family | Action | Evidence hash | Limitation recorded | Next step |
|---|---|---|---|---|---|---|
| 2026-05-08 09:00 | Operations · Compliance | Lifecycle model | CCLE-LIFE — 12 stages published | sha256:ccle…aa01 | "Internal readiness only." | Quarterly review |
| 2026-05-09 11:14 | Programme · Compliance · External Counsel | Acceptance criteria | CCLE-ACC — 11 transitions defined | sha256:ccle…aa02 | "No suitability determination." | Apply on next intake |
| 2026-05-10 09:22 | Operations · Tech/Security | Entitlement matrix | CCLE-EM — 10 entitlement classes | sha256:ccle…aa03 | "Internal." | Refresh on classification change |
| 2026-05-11 14:08 | Head of Evidence · Compliance | Evidence map | CCLE-EV — 12 stages mapped to packs | sha256:ccle…aa04 | "Internal." | Refresh on pack change |
| 2026-05-12 09:50 | CoS · CISO · Compliance | Stakeholder views | CCLE-SV — 9 views scoped | sha256:ccle…aa05 | "Counsel-bounded for external." | Lock per-share counsel sign-off |
| 2026-05-13 11:42 | CISO · External Counsel | SOD & approvals | CCLE-SOD — 8 workflows scoped | sha256:ccle…aa06 | "Internal." | Re-test on workflow change |
| 2026-05-15 09:00 | Tech/Security · Compliance | Access reviews | CCLE-AR — 7 review streams logged | sha256:ccle…aa07 | "Internal." | Close break-glass drill |
| 2026-05-15 11:30 | External Counsel · CEO · Tech/Security | External visibility gates | CCLE-VG — 3 of 4 gates met | sha256:ccle…aa08 | "No external bundle without all 4 gates." | Close Gate 1 post 2026-05-19 |
| 2026-05-16 07:55 | CEO · CISO · Compliance | Centre attestation | CCLE-ATTESTATION — monthly attestation | sha256:ccle…aa09 | "Internal; not regulatory approval." | Re-attest monthly |
What this Centre is — and is not
- Staging / simulated lifecycle data. All client IDs, stage records, entitlement ledger entries, evidence hashes, dates, and audit events shown here are seed values for an internal readiness workflow. They are not a live CRM, not a live KYC system, and not a live audit log.
- Internal readiness workflow only. This Centre captures BLACKSWAN's internal client-lifecycle posture. It is not legal advice, not regulatory approval, not certification, not an audit opinion, and not authorization for external launch.
- Not a suitability determination. Eligibility and classification stages are internal posture only. No artefact in this Centre constitutes a regulator-recognised suitability assessment, client acceptance, or onboarding decision.
- Counsel-bound by default for external surfaces. Every client-facing artefact requires external counsel countersign (CTL-010) before any external visibility gate is opened. Approve never implies external sign-off without counsel countersign.
- Founder-root is a standing accepted risk. Per Programme Decision Log DEC-005, founder-root permanence carries MFA + re-auth + monthly attestation as compensating controls.