Hong Kong family offices: how to stop KYC and suitability checks slipping

Hong Kong's family office threshold is plain enough. Under the single family office tax concession, a qualifying family-owned investment holding vehicle generally needs assets under management of about HK$240m to be eligible to apply — the figure given in the Family Office Plan's September 2026 assessment guide. Below that scale, the fixed cost of an in-house team often exceeds the value it creates.

What is actually growing is the multi-family and virtual family office: several families sharing compliance, tax and risk teams, spreading cost and standardising service. The trade-off is direct. One team carrying more than twenty families at once means KYC reviews, suitability assessments and dual approvals all depend on people watching carefully — and in busy season, something will slip.

This article is about that gap: what to use when people cannot keep watch.

1｜Write down what the family fears before choosing any system

One line in that guide is worth copying out: a family office's first step is not to ask "which one is better" but "what is our family actually afraid of".

The common anxieties are concrete. If the founder runs into trouble, equity and cash flow are pursued by creditors; if the next generation divorces, assets are split with an outsider; if children stake out separate positions, control tears apart at succession. These three problems call for entirely different structures — asset isolation against creditor claims, trust beneficiary design against marital division, a family charter and equity arrangements against control disputes. Mix up the needs and no amount of paperwork later will help.

A workable approach is a four-question stocktake: which jurisdictions the assets sit in and whose names they are held under; which three things the family fears most; who holds decision rights and who is merely a beneficiary; and what form the wealth should take in ten years. Lay out the answers and you can see whether you need straightforward wealth planning or a top-level design that includes governance.

This is also the first test of whether a family office is professional — does it ask you questions first, or push products first.

2｜How many families a team carries decides how fine compliance can be

Then comes capacity: how many families are served at once, and how many people are assigned to each. A team carrying twenty or thirty families at the same time gives you a different level of attention from a single family office. This is not to say multi-family offices are bad, but you should be clear about what you are buying.

For the operator, the point cuts deeper. If your own team is carrying more than twenty families, you have to accept that compliance actions resting on human vigilance will eventually miss something.

Watch for another type — the "assembled" family office, where legal, tax and trust work is outsourced to different firms that blame each other when something goes wrong. One sharp question to ask: when the tax arrangement conflicts with the trust structure, how do you coordinate? A vague answer usually means they have never worked on it together.

3｜Compliance is worth what it leaves on record, not what gets "done"

The full KYC/CDD/EDD process, suitability assessment for financial products, and dual review and approval share one trait: they are all process evidence.

If a client runs into trouble ten years later, what matters is not who did the work back then but whether there is a record of who judged what, when, and on what basis. Suitability assessment especially — if a client's asset structure and risk tolerance change, does the conclusion get updated? Once that is dragged into a dispute, a verbal explanation means nothing.

So "dual review" has to live in process design, not in a policy manual.

4｜Put AI into operations first, not investment research

A TMF Group white paper notes a pattern: market interest in AI has risen sharply, but family offices still lag large institutions in actual adoption. They mainly use AI for early-stage investment research and operational efficiency, while staying cautious about the accuracy of AI-generated information and about privacy and cybersecurity risks, and requiring partners to provide sound governance and control mechanisms.

For small and mid-sized family offices, operations are the steadier starting point. An AI error in investment research lands directly on the client's account; an AI error in operations is felt by the client as either "fast" or "risky", with room to adjust.

The external environment is also moving towards efficiency. At the Securities and Futures Commission's media briefing on 23 September 2026, chief executive Julia Leung said the regulator plans to consult the market in the first half of 2027 on streamlining prospectus disclosure requirements, and is considering a central database, with the aim of having listing applicants follow a single set of standards, reducing duplication and improving efficiency.

McKinsey's "Five priorities for wealth management CEOs in the next decade" points the same way: as AI, data integration and platform automation deliver hyper-personalised and cost-effective service, family office services once reserved for ultra-high-net-worth clients will open to a broader high-net-worth and affluent base. That scale cannot be built by adding people.

How to act

SHEYU AIFO 家办 is an integrated wealth management platform built for Hong Kong Type 9 family office firms — the asset management licence in the SFC's licensing regime. The capabilities matching the actions described above are: the full KYC/CDD/EDD compliance process, suitability assessment for financial products, and dual review and approval. If a client's assets are spread across several jurisdictions and asset classes, an 11-class asset look-through view brings the whole picture into one place.

It addresses the concrete problem raised at the start: when a team is carrying more than twenty families at once, how do compliance actions stop depending on memory?

A family office's moat is never how handsome its reports look, but whether every compliance judgement can be traced. People cannot keep watch over that. A system can.