Applications
Queue of account applications by status.
Operations surface for KYC, AML, and audit
Internal workflow architecture for reviews, alerts, and provider events. Administrative money actions are not exposed on the public site.
Operations modules
KYC queue
Identity checks pending provider or manual review.
AML queue
Screens and match-review cases.
Sanctions / PEP
Hits requiring documented disposition.
Alerts
compliance_alerts lifecycle: open → assigned → resolved.
Audit log
Immutable event types for sensitive transitions.
Integration registry
Authentication
not_configured · AUTH_PROVIDER_URL, AUTH_PROVIDER_SECRET
Identity Verification
not_configured · KYC_PROVIDER_API_KEY, KYC_PROVIDER_WEBHOOK_SECRET
AML Screening
not_configured · AML_PROVIDER_API_KEY, AML_PROVIDER_WEBHOOK_SECRET
Sanctions Screening
not_configured · SANCTIONS_PROVIDER_API_KEY
PEP Screening
not_configured · PEP_PROVIDER_API_KEY
Audit events (selected)
APPLICATION_CREATED
Recorded with actor, object, before/after, request id when implemented on the server path.
APPLICATION_SUBMITTED
Recorded with actor, object, before/after, request id when implemented on the server path.
KYC_STARTED
Recorded with actor, object, before/after, request id when implemented on the server path.
KYC_APPROVED
Recorded with actor, object, before/after, request id when implemented on the server path.
KYC_REJECTED
Recorded with actor, object, before/after, request id when implemented on the server path.
KYC_REQUIRES_INFORMATION
Recorded with actor, object, before/after, request id when implemented on the server path.
AML_STARTED
Recorded with actor, object, before/after, request id when implemented on the server path.
AML_CLEAR
Recorded with actor, object, before/after, request id when implemented on the server path.
AML_MATCH_REVIEW
Recorded with actor, object, before/after, request id when implemented on the server path.
Server path
Webhook and provider calls belong on the server with secrets in Vercel env. Client UI never holds provider API keys.