Outsourcing KYC is standard practice. There are expensive systems you can license that do this as correctly as possible, ensuring banned persons (due to sanctions, international most wanted lists, whatever) are not allowed to transact with your system.

Yes, they are black boxes, but they work pretty well considering banks all over the world use them.