AML controls that follow every customer and transaction.

Start with a complete customer profile

Customer due diligence is where AML begins. Identity, customer type, occupation, source of funds and — for a business — beneficial ownership are captured on the customer record, so screening and monitoring run against a real profile rather than a bare name.

Risk-based AML assessment

Not every customer carries the same money-laundering risk. Ustawi records the factors that matter — customer type, PEP exposure, jurisdiction, cash intensity, behaviour and ownership complexity — and rolls them into a classification that drives review frequency, the depth of due diligence, and when a case should be opened.

Screen customers before risk becomes exposure

PEP and sanctions screening runs against the customer record and lands in a queue an officer works through. Crucially, a potential match is not proof of anything — it is a prompt to look. The officer decides whether it is a false positive or a genuine concern, and that decision is recorded.

A match is not automatically a case

Every alert goes through adjudication before it can become a case. The officer sees the match detail alongside the customer's own history and the evidence to hand — then either clears it as a false positive or escalates it into a documented case. The page you see is a decision, not a raw match list.

Monitor activity, not just identities

Screening checks a name; monitoring watches behaviour. Ustawi compares a customer's activity against their own historical profile and surfaces the transactions that don't fit — so an officer can investigate an unusual pattern the same way they work a screening alert.

Compliance doesn't stop after onboarding

A customer cleared at onboarding can change. Ustawi re-runs PEP and sanctions screening on a schedule, prompts periodic customer reviews, and keeps monitoring activity — so a new match or a change in behaviour is caught during the relationship, not just at the start of it.

Rescreening frequency and review schedules are configured per institution and per risk band.

Turn alerts into documented investigations

When an alert is escalated, it becomes a case with its own reference, owner and history. Everything the officer needs is in one place — the customer profile, the screening result, the activity history, the documents and the notes — and the decision, with its next action, is recorded.

Every compliance decision leaves an evidence trail

A case is only as strong as the evidence behind it. Ustawi keeps the profile, the screening result, the transaction history, the supporting documents and the officer's notes attached to the decision — so the answer to a reviewer's question is one screen, not a hunt through email.

From suspicious activity to documented reporting

Where an investigation leads a reporting officer to form the required suspicion, Ustawi carries the case through to a suspicious transaction report — each step recorded, and the reporting deadline tracked from the point the suspicion is formed.

Prepare and export STR information for goAML

The STR workspace assembles the customer information, related transactions, the suspicion narrative and the supporting documents into a report a compliance officer reviews before it is prepared for goAML. Ustawi prepares and exports the report — it does not file it for you.