When auditing this, I have typically seen evidence of a percentage provided by an employee of the business. A few banks will get the percentage in writing from the business with a signature from the business employee providing the information, but most will just have their employee document the conversation they had with the business customer, recording the percentage provided and the person they talked to.
As long as there weren't other facts or circumstances that made me question the credibility of the listed percentage, I have never had a problem with either of these approaches, especially for smaller financial institutions like yours.
_________________________
Adam Witmer, CRCM
All statements are my opinion, not those of my employer, and should not be taken as legal advice.
www.compliancecohort.com