"New client journey: discovery → demo → DPA → contract → first invoice. Five gates, no skips."
Every new obligated company entering the marketplace passes through a five-gate onboarding. KYB checks first, then technical demo of CVCaaS dashboard, then Data Processing Agreement, then commercial contract with EPR liability terms, then first invoice issued only after first dPRN cleared.
Client "Snack Major UK Ltd" entered Gate 1 (KYB) on 14 April 2026. Passed Companies House + sanctions screen in 6 hours. Demo booked 18 April. DPA signed 21 April. Master agreement countersigned 23 April. First dPRN tranche cleared 26 April for £14,850. First invoice raised 27 April.
▸ Triggers · When This Fires
Inbound enquiry via Compliance Checker
Outbound prospect added to CRM
White-label partner refers obligated brand
⚠ Consequence · If Broken
Skipping a gate creates legal exposure (no DPA = GDPR breach), commercial exposure (no contract = no enforceable price), or reputational exposure (no KYB = sanctioned counterparty). Every gate exists for a reason.
Every new obligated company entering the marketplace passes through a five-gate onboarding. KYB checks first, then technical demo of CVCaaS dashboard, then Data Processing Agreement, then commercial contract with EPR liability terms, then first invoice issued only after first dPR…