Compliance operations automation, run from your procedures
Most compliance teams already have their procedures written down. Verkflo turns each one into a versioned agent that does the routine steps and asks a named reviewer for the rest.
Works with
- Custom REST
and any system with an API via Custom REST
What compliance operations automation means here
Compliance operations is the daily casework of a financial crime team: onboarding reviews, screening hits, alert triage, periodic reviews, complaints and account closures. The steps are written in procedures, the work is done by hand, and the evidence ends up spread across inboxes, spreadsheets and case tools.
Verkflo runs that casework as reviewed agents. A procedure goes in as a document and comes out as a spec with steps, rules and review points your team can read. The spec is checked with evals, tried in the sandbox, then published to live. Published versions stay readable, so a file reviewed in March can be read against the procedure that applied in March.
This is casework automation. Verkflo does not run security certification audits, keep a policy library or test controls; GRC tools cover that work.
Who does what in compliance operations
The procedure
Your procedures say which checks run, in what order, which rules decide the branch and which decisions belong to a reviewer, a team lead or your MLRO or compliance officer.
What the agent does
Runs the steps of a published procedure version for each case
Collects documents and data from Sumsub, ComplyAdvantage, Google Drive and REST systems
Applies CEL rules to choose the next step
Drafts notes, requests and summaries for review
What your team decides
Which procedures become agents, and when a version goes live
Decisions the procedure reserves for a named reviewer
Who holds the Admin, Author, Reviewer and Auditor roles
Changes to the rules after an eval or QA finding
Compliance procedures you can run today
A mix of onboarding, screening, monitoring and operations work.
-
KYC onboarding reviewCheck documents, screen the applicant and apply your risk rules, with a reviewer where the procedure asks.
-
Sanctions screeningScreen counterparties before the first payment and send each possible match to a person.
-
Transaction monitoring alert triageGather the alert, customer profile and history, apply your disposition rules and route what needs a person.
-
Periodic KYC reviewFind the reviews that are due by risk rating, refresh the file and route changes to a reviewer.
-
Complaints triageCategorize each complaint on arrival, apply your response timelines and route sensitive cases to a person.
-
Account closure reviewCheck each closure request against your list of holds, open items and alerts before anyone closes the account.
Review requests and reporting
Reviews happen in the Verkflo review queue today. Review requests in Slack, Microsoft Teams and email are Coming soon. Reporting shows runs, outcomes and review times by procedure, so a team lead can see where files wait.
For the detail by area, see KYC automation, KYB automation and AML automation.
Controls your auditors will ask about
These controls apply to each agent you build. Sample data
Admin
Author
Reviewer
Auditor
Role-based access
Admin, Author, Reviewer and Auditor roles, scoped to each workspace.
- 41
7c2e… - 42
a91f… ← 7c2e - 43
03d8… ← a91f
Hash-chained audit log
Each entry carries the hash of the one before it. Verifying the log recomputes the chain and flags entries that no longer match.
- 41
- v1.1v1.2v1.3Published
Versioned specs
Each run records the exact version it followed; old versions stay readable.
- vault/sumsub/key
Secrets in a vault
Steps point to a vault path, and the key stays in the vault.
- Signed delivery accepted
- Unsigned delivery rejected
Signed webhook triggers
Unsigned or stale deliveries are rejected before a run starts.
- SandboxLive
Sandbox before live
New versions run on test data first. Going live is a separate step.
Compliance operations questions
Do we need to rewrite our procedures first?
No. Upload the document you have. Verkflo compiles it into a spec, and your team edits the steps and rules before anything runs. The from-scratch workflow builder is Coming soon.
Is this a GRC or certification audit tool?
No. Verkflo runs operational casework such as reviews, screening and triage. It does not track policies, map controls to frameworks or prepare certification audits.
Who can change a procedure once it is live?
Access is by role: Admin, Author, Reviewer and Auditor, scoped to each workspace. A live procedure changes only when a new version is published, and its evals run before that.
Pick one procedure to start with
Bring the procedure your team spends the most hours on and we'll show it running as an agent.
Book a demo