Manuals · Compliance Officer Compliance Officer
ROLE GUIDE

Compliance Officer Guide

Screen every applicant and client against sanctions and PEP lists, decide what each match means, monitor live transactions, and evidence every decision you take inside the Compliance Hub.

Compliance Hub · RTRA · Risk Based Approach
Watch: screening, deciding, and scoring in the Compliance Hub

This guide is written for compliance officers, heads of compliance, and money laundering reporting officers who use the Digital Experience Platform (DXP) to screen applicants, clear flagged clients, monitor live transactions, and evidence the decisions they take.

About this guide

You screen applicants and existing clients, clear the ones the engine flags, monitor live transactions, and keep an audit trail regulators can read. Three surfaces carry most of your work.

Compliance Hub

Screen and adjudicate. Holds Workspace, Client Clear, Audit Hub, and Status.

Settings, AML Management

Tune the Screening Profile, weights, lists, and the two global toggles.

Settings, Client Profile

Set the Risk Based Approach and the re-screening schedule per profile type.

The two-part Compliance Engine

The Compliance Engine has two main parts that run against different moments in a client's life.

Static screening

Runs on every new application and on every existing client on a schedule. It compares a person or business against the AML, sanctions, and PEP lists.

Real Time Risk Assessment

Runs against ongoing client transactions after onboarding. Rules fire when a live transaction breaches a condition you set.

Both parts surface inside the Compliance Hub and inside the inline review you see on flagged interactions.

Signing in and around the platform

  1. Open the DXP URL provided by your administrator.
  2. Enter your work email, then press Sign In.
  3. Enter your password, then press Login.
  4. If two factor authentication is on, enter the 6 digit code from your authenticator app.

You can only sign in with a work email that ends in your tenant domain. Once signed in, the left side menu shows Dashboard, Interactions, Clients, Compliance Hub, and Logs. As a compliance officer you will mostly use Interactions, Clients, and Compliance Hub.

TipYou can keep multiple tabs of the DXP open in the same browser. Signing in from a different browser ends your previous session.

Inline review on a flagged interaction

Where Interactions > expanded rowPanel Inline Compliance Hub

When an application is flagged for AML, the Inline Compliance Hub appears inside the expanded row in the compliance Backend Block step. Open the row from your Interactions queue.

  1. Open Interactions and expand the flagged row.
  2. Read every list searched. A green check means no match on that list. A red triangle means at least one possible match.
  3. Open a list that shows a match. The panel reveals the matched record.
  4. Read the matched record fields: source name, aliases, source list metadata, country, date of birth where present, and a match score from the AI engine.
Inline Compliance Hub with the list matrix
Inline Compliance Hub on a real interaction. Each list shows a green check when clean or a red triangle with a match count.
Agentic AI name variationsAt the top of the panel, the Agentic AI Generated Name Variations show the aliases the engine also searched, for example "ali el chawiche", "Ali El Chaouichi", "Ali El Chachewe". You can edit a variation, add another with the plus, then press Run Again to re-run the search. The AML Outcome badge shows the current disposition, for example No Action.

Pill view and table view

The inline screening has two layouts. Toggle between them with the gold tab on the right edge of the panel.

Pill view

The default. Every list appears as a pill with a green check when clean or a red mark when it has a possible match. It is the fastest read for a single interaction: scan the pills, open the ones with a match, and decide.

Table view

Switches the matches into a table with Name, Schema, Alias, Score, Country, Address, and Actions, plus Filters for Schema and Country and a search. A checkbox on each row lets you select many matches and action them together, which is how you make bulk AML decisions.

Inline screening pill view
Pill view: each watch list as a pill with a check, the Agentic AI name variations, Run Again, and the flow decisions.
Inline screening table view
Table view: Name, Schema, Alias, Score, Country, and Address columns with filters and row checkboxes for bulk AML decisions.
  1. Press the gold table tab on the right edge to switch to table view.
  2. Use the Filters (Schema, Country) and search to narrow the matches.
  3. Sort by any column, for example Score, to work the strongest matches first.
  4. Tick the checkbox on each row you want, then apply the action to all selected at once.
  5. Press the tab again to return to pill view.

Actions on a match

Click a list that has matches (for example UsOfacSdn) to open the matched record. The record shows the possible match with its score, the name, the full alias list, and the country. Page through matches, then choose one action.

ActionMeaningEffect on client
Confirm MatchThe list record is the same person or entity.Maps to Suspend. The client is suspended and the interaction is blocked.
Confirm and AllowSame person, the business absorbs the risk.Maps to Set Risk to High. Interaction proceeds.
Clear MatchDifferent person or entity, a false positive.Maps to No Action. Match dismissed. Interaction can proceed once every red list is cleared.
The three verified dispositionsEach decision maps to an exact outcome the engine records: Confirm Match to Suspend, Confirm And Allow to Set Risk to High, and Clear Match to No Action for a false positive. These are the outcomes the audit log shows against your name.
Matched record with the three decision buttons
The matched record shows a match score, name, full alias list, and country, with Confirm Match, Confirm and Allow, and Clear Match.
When you cannot tellOpen the full record. If still unsure, escalate inside your tenant procedure. Common cases: twins with valid IDs, common Arabic name spellings, and PEPs who share a first and last name with the applicant.
TraceableEvery action is recorded in the audit log with your user name, so decisions stay traceable.
Every match must be actionedYou cannot decide an interaction until every surfaced match has been cleared, confirmed, or confirmed and allowed. The platform blocks the Approve, Reject, and Confirm buttons until then, so no match is ever missed. Choosing Confirm and Allow onboards a confirmed match at supervisor discretion and automatically raises the client to High Risk.

The biometric panel above the lists

Above the lists in the expanded row sits the biometric panel. It gives you context for the adjudication.

FieldWhat it shows
Captured selfieThe live selfie the client captured.
Captured ID document imageThe document image the client submitted.
Match PercentageHow closely the selfie matches the document face.
Device name, user agentThe device and browser used for the capture.
Time started, time endedThe capture window for the interaction.

Use these together with the list result. A confirmed sanctions match with a high biometric match is a clear stop. A possible match with a poor biometric match is a candidate for additional review.

Compliance Hub Workspace, ad hoc search

Where Compliance Hub > Workspace

Workspace is the standalone surface. Use it for ad hoc searches, bulk file based searches, and reportable sessions outside of any incoming interaction.

  1. Open Compliance Hub. You land on the Workspace.
  2. Set Entity Type to person or business.
  3. Type the name in the Search box, then press Enter to turn it into a pill. This commit step is required. Pressing Search without committing the pill returns nothing. Add more pills to screen several names at once, or use the plus by the box.
  4. Open Filters and narrow by Lists, Country, Address, Date of Birth, Industry, Document Number, and From / To dates.
  5. Set Apply Transliteration To for switching between Arabic and Latin script handling.
  6. Set the Compliance Search Focus. The default is AML. Switch it to PEP to surface politically exposed person results.
  7. Turn on Show Only Hits to hide green check lists from the result.
  8. Turn on Advanced Search for a wider net that uses more name combinations. It is slower.
  9. Press the search control to run the session.
  10. Press Export Report to download the full session for audit and regulator submission.
AliasesThe engine generates AI name variations and transliterations, so a search for one spelling catches the record filed under another.
A common officer pitfallThe default Compliance Search Focus is AML. A name that comes back clean under AML can still return results under PEP. Switch the Focus to PEP to check for a politically exposed person before you clear the entity.

Client Clear, the continuous screening queue

Where Compliance Hub > Client Clear

Client Clear shows every existing client that the background screening engine has flagged since their last clear. The platform reruns screening on the Run AML Check cadence, configured in Settings, Client Profile, per profile type. The page has tabs at the top for each Client Profile Type, Person, Verified Person, and Verified Business, each with a count badge.

Re-screen and list freshnessThe Compliance Engine background worker re-screens approved clients on the Run AML Check cadence you set per profile type, against watchlists that refresh every six hours from each source.
ColumnWhat it shows
Client IDThe internal client identifier.
FaceA thumbnail for quick recognition.
NameThe primary name.
Risk LevelLow, Medium, High, or any custom tier you configured.
RBA ScoreThe numeric Risk Based Approach score from the engine.
Client StatusActive, inactive, or suspended.
Last Cleared, Last MatchThe dates that drive how aged the case is.
HistoryOpens the full action history for this client.

Working a flagged client, step by step

  1. Open Client Clear. Pick the tab for the affected profile type.
  2. Sort by Last Match, newest first.
  3. Open the client. The biometric panel and the Inline Compliance Hub appear inside the profile.
  4. Press View More on each match to read the full record.
  5. Choose Confirm Match, Confirm and Allow, or Clear Match. Add a note for the audit trail.
  6. If confirmed, follow your institution's suspension or enhanced due diligence procedure.

Screening Profile and algorithm weights

Where Settings > AML Management

Open Settings, then AML Management. Two tenant level toggles sit at the top, and below them is the Add New List area where you maintain custom lists.

ToggleWhat it does
Perform Background Check On All ClientsRuns static screening against every client, not only flagged ones.
Flag Client Application On AML MatchFlags the application for inline review when screening returns a match.

The most important block is the Screening Profile. The profile defines how the engine searches every time you press search in Workspace, Client Clear, or inside an inline review.

  1. Pick the Profile Name from the picker, for example Default.
  2. Set Apply On to the surfaces this profile drives: Interactions, Client Clear, Workspace.
  3. Tune Traditional Matching Algorithms, which carry 40 percent of the score weight. Each algorithm has its own toggle and weight slider, and the enabled sliders must sum to Total Weight 100 percent inside that 40 percent envelope.
  4. Leave AI Matching to carry the remaining 60 percent of the score weight.
  5. Press Save to commit the profile.

Traditional Matching, 40 percent

Four algorithms you can toggle and weight: Leverage Double Metaphone, sound based name matching for spelling drift across languages; Leverage Soundex, basic phonetic grouping of similar sounding names; Leverage Skeleton, which removes vowels and normalizes a name to a consonant structure; and Leverage Phonetics, which weights phonetic matches when spelling varies significantly.

AI Matching, 60 percent

Handles cultural and geographic variants, common typos, and transliteration. It carries the larger share of the score.

Weights sum to 100 percentEach enabled Traditional algorithm carries its own weight, shown as a percentage of the Traditional Algorithms, and the enabled ones must sum to Total Weight 100 percent inside the 40 percent traditional share. An observed example set Double Metaphone to 30 percent, Soundex to 30 percent, Skeleton to 40 percent, and Phonetics off.
How the search is keyedAML search is Solr-backed. It is keyed on a First Name and Last Name only, matched against Alias and Weak Alias. Any middle or compound names in between never break a match. The Min AML Smart Search Score control drops results below the score you set. Raise it to cut noise, but be aware that weaker true matches can then be hidden.

Advanced Features, the sensitivity knobs

Below the algorithm weights sit the Advanced Features. These are the core controls you adjust to balance catching every alias against generating false positives.

ControlWhat it does
Perform Agentic AI VariationsA numeric intensity, for example 7. AI generates realistic name variants and aliases from linguistic patterns. Higher values generate more variants but more false positives.
Apply TransliterationConverts names between writing systems before matching, set per list type. This is key for matching across Arabic and Latin script.
Fuzzy MatchingThe maximum character differences allowed when comparing names, for example 2. Higher means a wider net and more false positives.
Max AML Smart Search ResultCaps the number of matches returned per screening, with Truncate if exceeded keeping the highest scored.
Min AML Smart Search ScoreIgnores results scored below this threshold. Raise it to cut noise.
AML Management with Screening Profile and weights
AML Management with the Screening Profile, the two global toggles, and the Traditional Matching weights.

RTRA, Real Time Risk Assessment

Where Settings > RTRA Engine Configuration

RTRA monitors live client transactions after onboarding. Configure it in Settings, RTRA Engine Configuration.

SettingWhat it does
RTRA Engine Life SpanHow long, in days, a rule lives if marked Temporary.
Base CurrencyThe 3 letter code the engine normalizes amounts to.
Transaction StructureThree entity types out of the box: Sender, Receiver, Transaction. Add more with the plus icon.
Include Realtime AML Screening CheckTies RTRA decisions to a live AML check on the parties involved.

Defining a rule, step by step

  1. Set Rule Name and Rule Span in days.
  2. If the rule is short lived, turn on Temporary Rule.
  3. Build the Rule Structure: pick the Entity, Attribute, Operator, and Value. Add more conditions with the plus icon.
  4. Pick the Action that fires when the rule matches.
  5. Write the Output Message that the system attaches to the action.
  6. Press Add. The new rule appears in the Defined Rules table at the bottom with Status, Type, and Remaining lifespan.

Risk Based Approach, RBA

Where Settings > Client Profile

The Risk Based Approach produces an RBA Score per client. Configure it in Settings, Client Profile, per profile type.

  1. Turn on the Risk Based Approach toggle for this client profile type.
  2. Set the Risk Levels. Low, Medium, and High are the defaults. Add more tiers if your policy needs them.
  3. Drag the Thresholds on the 0 to 10 strip to mark the boundary between tiers. Defaults: Low 0 to 3.00, Medium 3.00 to 8.00, High 8.00 to 10.
  4. Press Save to commit the bands.

The RBA Score column in Client Clear and the Clients section uses these tiers to color and rank clients.

Risk Based Approach tiers and thresholds
Risk Based Approach with Low, Medium, and High tiers mapped to a 0 to 10 strip with draggable thresholds.

Where the RBA Score comes from

The bands set the tiers, but the score itself comes from Configure Risk Profile, which opens the Clients Risk Scoring Configuration screen. There you add a card for each data point you want to score, and each card sets a Risk Behaviour.

Risk BehaviourWhat it doesUse it for
Contributes to Risk ScoreThe value adds a weight. All weights sum to Total Weights, and the total lands in a Low, Medium, or High band.Cumulative, additive risk, for example nationality, occupation, or PEP status.
Auto Classify on ValueThe value directly sets the risk level and overrides the computed score.Hard rules, for example a sanctioned country goes straight to High.

Open Values Classification Mapping on each card to map every possible value to either a weight, for Contributes, or a target risk level, for Auto Classify. Watch the running Total Weights as you add cards.

  1. Press Configure Risk Profile.
  2. Press the plus to add a card, expand a flow on the left, then pick the data point.
  3. Choose the Risk Behaviour: Contributes to Risk Score or Auto Classify on Value.
  4. Open Values Classification Mapping and map each value to a weight or a risk level.
  5. Repeat for every risk relevant data point, then Save.
Where the data points come fromThe data points you score on are the fields your flows capture. They show as the Data Points Available For All Created Flows tree, grouped Engagement, Applications, and Clients. This is the same data relay that feeds the risk cards. See the Flow Builder guide to understand which fields a flow captures.

AML watchlists

Screening checks these lists. Custom lists you maintain run alongside them.

  • US OFAC SDN and Non-SDN, including FTM variants.
  • US Trade CSL.
  • UK OFSI Targets.
  • OCC Enforcement Actions.
  • Interpol Red and Yellow notices.
  • UN ISIS and Al Qaeda Sanctions List.
  • UN 1988 Sanctions List.
  • UN Security Council 1718, 1267 / 1989, Consolidated.
  • EU Consolidated Sanctions.
  • Politically Exposed Persons (PEPs).
  • Lebanon: ISF Leb 24 (Internal Security Forces).
  • Lebanon: SIC 18-26 (Banque du Liban Special Investigation Commission).
  • Custom lists maintained by the tenant (Demo in the sandbox).
FreshnessInternational lists refresh every six hours from each source. The Status sub-module shows the last update per list.

Audit and reporting

Every compliance action is captured in two places. The Compliance Hub Audit Hub gives the specialized view filtered by System User and Decision. The platform Logs section gives the complete platform audit by activity type.

ExportHow to produce it
End of session Workspace exportUse the Export Report button on each Workspace session. The Export Compliance Hub Report dialog offers Export To CSV and Export To Excel.
Audit Hub exportFilter by user, decision, and date, then press Export.
AML Screening HistoryPer client, exported from the client profile.
Custom List change logCaptured automatically for every add, edit, and bulk import.
Recommended practiceKeep a full evidence pack for every interaction. Include the document-capture audit video, the live-face image stream, and the eIDAS-signed KYC summary PDF. Add an activity trail that logs who did what, when, and why for every decision.

Open Logs to review the platform audit trail. Set the audit type to User Activities or System Audit, filter by date, and read Created, Activity Type, User Name, and Message. Press Export for a record.

Roles and permissions

The DXP supports custom roles built from claims dragged into a role definition. The recommended starting roles for this audience are below. Your administrator can adjust the claims to match your operating model.

RoleRecommended accessTypical tasks
Compliance OfficerCompliance Hub (all four sub-modules), Clients read and edit AML status, Logs export.Review inline matches, run Workspace sessions, action Client Clear, sign off RTRA flags.
Head of ComplianceAll officer rights, plus AML Management, RTRA Engine Configuration, and RBA setup.Manage lists, set thresholds, sign off policy changes.
MLROAll Head of Compliance rights, plus Reports export and Settings read.Sign off SARs, regulator submissions, and audit responses.

FAQ and troubleshooting

A 100 percent match on a PEP, what do I do?

Open View More. Choose Confirm and Allow only if your policy permits dealing with PEPs and the business case is documented. Otherwise choose Confirm Match. Either way the client moves to High Risk.

Same person but on a Weak Alias entry?

Weak Alias matches are scored lower. Use judgment. The View More record explains why the source list treats the name as a Weak Alias.

How fresh are the international lists?

Every six hours, refreshed from each source. The Status sub-module shows the last update per list.

An RTRA rule blocked a legitimate transaction, can I let it through?

Yes. The Action menu on a fired rule lets you allow the transaction this once and write a note. The fired rule stays in the audit trail.

What is the difference between AML in Workspace and in Client Clear?

Workspace is a manual search you control. Client Clear is the continuous engine showing which existing clients matched on the last refresh. Both use the same Screening Profile.

Can I add a custom list?

Yes, if you have AML Management access. Open Settings, AML Management, Add New List, upload the file, map the columns, then save.

NextSee the Flow Builder guide to understand where the data points you score on come from, and the guided demos for a click by click screening walkthrough.