Every citizenship-by-investment programme lives or dies by its due diligence. Programmes that are perceived as rigorous attract sustainable long-term demand and maintain their standing with international counterparts. Programmes perceived as loose attract short-term volume but pay for it later in restrictions, sanctions, and revoked visa waivers. São Tomé and Príncipe's CIU has, from launch, positioned the Programme in the first category. The Year One rejection rate of 3.3% published in the CIU's First Year Report is one indicator. This piece explains what sits behind that number, the actual process a São Tomé and Príncipe application goes through, from initial engagement with a Licensed Marketing Agent through to the issuance of a passport by the Government of São Tomé and Príncipe.

Advance Citizenship operates as a Licensed Marketing Agent designated by the Government of São Tomé and Príncipe under Decree-Law No. 07/2025. What follows is a transparent explanation of how the CIU's due diligence process actually works, and what a serious applicant should understand about it before initiating an application.

The four-stage architecture

The CIU's due diligence process operates across four sequential stages. Each stage has a distinct actor, a distinct purpose, and a distinct standard. An application must satisfy each stage to progress to the next.

The full DD architecture — Decree-Law No. 07/2025 framework

Stage 01

Pre-screening by Licensed Marketing Agent

Advance Citizenship

Before any file is submitted to the CIU, the Licensed Marketing Agent conducts an internal assessment of the applicant's suitability, the completeness of documentation, and the coherence of the source-of-funds narrative. This is the stage at which most avoidable problems are identified.

A responsible Licensed Marketing Agent will decline to submit files that will not pass CIU due diligence. Doing so protects the applicant from a rejection that becomes part of their record with international immigration authorities, and protects the CIU from application volume that would not add to its integrity. The CIU's Year One rejection rate of 3.3% is low partly because Licensed Marketing Agents filter appropriately at this stage. If the pre-screening filter were absent, the rejection rate would be materially higher, and every rejection would create an international immigration record that follows the applicant.

Applications that pass pre-screening are formally submitted to the CIU's Dubai Head Office through the CIU's designated submission channels.

Stage 02

Internal review by the CIU

CIU Head Office, Dubai

The CIU's Head Office in Dubai reviews the submitted file for completeness, consistency, and internal coherence. This is not yet the substantive due diligence stage, it is a gatekeeping review to ensure the file is complete and ready for external DD.

Files with missing documentation, unclear translations, or inconsistent statements are returned to the Licensed Marketing Agent for remediation before proceeding. Files that pass internal review are referred for third-party due diligence.

The CIU's operational location in Dubai, the first CIU established outside its home country, supports this stage because it provides access to a sophisticated compliance ecosystem and to the international documentation networks that a small-jurisdiction domestic office would find harder to service.

Stage 03

Independent third-party due diligence

External compliance firms

This is where substantive due diligence occurs. The CIU engages independent international compliance and due-diligence firms to conduct comprehensive checks on each applicant. These firms operate independently of the CIU and the Licensed Marketing Agent network, providing an external check on each file.

The third-party firms conduct source-of-funds validation, sanctions screening across all major international lists, Politically Exposed Person (PEP) screening, adverse media checks, criminal record verification across all countries of residence, and biographical verification. The findings are compiled into a formal due diligence report submitted to the CIU.

This third-stage report is the primary input to the CIU's decision on whether to recommend approval to the Government of São Tomé and Príncipe.

Stage 04

Government review and sign-off

Government of São Tomé and Príncipe

The final stage is the sovereign act: the Government of São Tomé and Príncipe reviews the CIU's recommendation and either approves the citizenship grant or declines it. This stage takes place through the CIU's São Tomé and Príncipe office, working with the relevant national authorities under the framework established by Decree-Law No. 07/2025.

Approval at Stage 04 results in a formal citizenship grant. Following the January 2026 legislative amendment enabling remote issuance of National Identity Cards and passports, the post-approval documentation process proceeds without requiring the applicant to travel to São Tomé and Príncipe.

What actually gets checked

Across the four stages, but concentrated in Stage 03, the following elements are examined in every application:

Source of funds, the hardest test

If a file is going to fail due diligence, it will almost always fail on source of funds. This is the single most rigorous element of any credible CBI due diligence process, and it is where the most time and attention is spent, both at pre-screening and at Stage 03.

A satisfactory source-of-funds explanation requires more than a bank statement showing the requisite balance. It requires demonstrating how those funds accumulated, over what period, from what income sources, through what tax treatment, and with what supporting documentation. The standard is not that the applicant proves their wealth in totality. The standard is that the funds used for the CBI contribution can be traced to identifiable, lawful sources.

For an applicant with a straightforward profile, a salaried professional with documented income and savings, or a business owner with audited financials, this is not a difficult exercise. For applicants with more complex profiles, significant crypto exposure, cash-heavy business histories, inheritance across multiple jurisdictions, sale-of-asset events with limited documentation, this is where careful preparation matters.

The CIU is not asking whether the funds are large. It is asking whether the funds can be traced to identifiable, lawful sources. Those are different questions, and the second one has much less to do with wealth than most applicants assume.

What documentation is expected

The core documentation package for an STP CBI application typically includes:

Certified copies of passports for the main applicant and all dependants. Criminal record certificates from every country of residence over the past ten years. Certified proof of address. Source-of-funds documentation, bank statements, tax filings, business records, sale contracts, inheritance documents, or other supporting evidence as applicable. Bank references. Professional references. Marriage certificates and birth certificates for family applications. Medical certification. A CV or professional biography for the main applicant. Photographs meeting the CIU's specifications.

Documentation must be original, certified as required by the CIU, and translated into Portuguese or English where the original is in another language. The CIU's documentation checklist is precise, and files that arrive with incomplete or non-compliant documentation are returned for remediation before progressing to Stage 02.

Common reasons applications fail

Based on Year One patterns across the CBI industry, including the CIU's own published rejection data, the most common reasons for application failure are:

Inadequate source-of-funds documentation. By far the most common failure mode. The funds exist, but the documentary trail explaining their origin is incomplete or inconsistent.

Undisclosed material information. A criminal record matter, a prior visa refusal, an ongoing legal proceeding, or a business relationship that the applicant chose not to disclose. Discovery of undisclosed information during Stage 03 due diligence is almost always fatal to an application.

Adverse findings on international screening. Sanctions hits, adverse media in specific languages, or PEP findings that materially change the risk profile of the applicant.

Unresolved criminal record matters. Pending criminal proceedings, unresolved charges, or convictions that fall within the CIU's applicable policy on criminal history.

Nationality or profile factors. In a small number of cases, applicants from specific nationalities or with specific profile factors may fall outside the CIU's applicable policy for the current period. The CIU exercises sovereign discretion on this dimension.

What the 3.3% rejection rate signals

A 3.3% rejection rate is worth interpreting carefully. It is low in absolute terms, but the appropriate comparison is against what it would be without pre-screening.

Licensed Marketing Agents pre-screen files against known CIU standards before submission. A file that would obviously fail due diligence is either remediated to compliance before submission or, if it cannot be, declined by the agent at Stage 01. What arrives at the CIU has already been through a first filter. The 3.3% CIU rejection rate reflects that filtering combined with the CIU's own additional rigour.

If the entire pipeline, pre-screening plus CIU review, is considered, the true rejection or non-progression rate is materially higher. Applicants whose profiles are not suitable are identified and declined at Stage 01, before any formal CIU record is created. This protects the applicant, and it is one of the reasons choosing a diligent Licensed Marketing Agent matters. A Marketing Agent that submits inappropriate files creates records that follow the applicant across future immigration processes globally.

What Advance Citizenship does at pre-submission

Our own pre-submission process is designed to identify the issues most likely to fail at Stage 03, before Stage 01 is complete. It includes:

An initial confidential consultation covering the applicant's profile, objectives, source-of-funds narrative, and any known complications. Preliminary conflict-check against major sanctions lists and adverse-media indicators. A documentation review to identify gaps in the source-of-funds trail, criminal record certification, or supporting documentation. An honest conversation about the strength of the application before we begin formal preparation.

Applications we progress to submission have, by that stage, been assessed for likely approval. This is not a guarantee, the CIU's Stage 03 due diligence firms have access to data we do not, and the final decision is the Government of São Tomé and Príncipe's. But it is the reason our own experience with submitted files has aligned closely with the CIU's Year One approval pattern.

How STP compares in the DD picture

Across the CBI industry in 2026, due diligence standards are trending toward greater rigour under sustained international pressure from the EU, the UK, and the US. The Caribbean is moving toward the ECCIRA framework, with 30-day physical residency requirements, mandatory biometrics, and application caps. Vanuatu has strengthened its compliance framework substantially in the past two years. The recently launched programmes, STP, Nauru, and (pending) Botswana, have all been designed with the current regulatory expectations built in from the start.

STP's four-stage architecture, its use of independent third-party due-diligence firms, and its willingness to publish its rejection rate transparently in Year One are consistent with the broader industry direction toward higher standards. For applicants who value the credibility of a programme's due diligence framework, because credibility affects visa waiver decisions and international acceptance over time, this is a positive signal.