AML/KYC for non-resident accounts: Standard practice vs. actual application?

I've been looking into setting up a non-resident corporate account for a small e-commerce venture, thinking about places like Mauritius or UAE given some of the benefits. On paper, the AML/KYC requirements are pretty clear – beneficial ownership, source of funds, activity, etc. – and seem robust. My question is, how much does the actual application of these rules vary between jurisdictions and even between different banks within the same jurisdiction? Are there common pitfalls or specific red flags that new applicants often stumble over, even when they're operating legitimately? Trying to understand if there's a practical 'difference' between what's written and what's experienced during the onboarding process, especially for a new, relatively low-volume business.