FRAML · fraud and AML on one platform
Fraud and AML compliance,
on one entity record.
Every entity is a story. Amara opens an account in Singapore at 21:41. Meridian Logistics applies the next morning. The check, the owners, the risk tier, the signal, the case, the filing all of it happens on Youverify. Scroll to follow both.
Independently attested
- SOC 2 Type II
- ISO 27001
- ISO 27018
- ISO 42001
- GDPR
Trusted by 1,400+ businesses and tier-1 banks.
Singapore, SG · 18:10
01Individual onboarding · KYC
Identity, unwrapped
in seconds.
Document, anti-deepfake liveness and enhanced due diligence resolve on the screen they started on. They never leave the app. You get a decision, a risk tier scored on the same evidence, and a trail you can defend.
- 145
- jurisdictions covered
Secure · AES-256Step 2 of 3
Take a quick selfie
Anti-deepfake liveness
Center your face · hold still
0.0% match
- 21:41
Passport matched
ICAO chip
- 21:42
Anti-deepfake liveness passed
No replay, injection or synthetic face
- 21:43
Address verified — Singapore
Global address
- Account opened · YV-2418
Entity risk score
Low risk0.0%
Standard due diligence · 24 month refresh. Same scoring model as a business, fewer inputs.
01BBusiness onboarding · KYB
Unwrap the business
to the people behind it.
Meridian Logistics Pte applies at 09:12. Cowork resolves the entity against the registry, unwraps ownership past the holding company, and puts every owner above 25% through the same check Amara Chen took. Amara Chen is one of them.
- 3
- shareholders
- 3
- owners at 25% or above
- 2
- registries checked
RC 1489203 · Registry · applied 09:12
- 40%Meridian Holdings BVCorporate · unwrap
- 35%Amara ChenIndividual · owner
- 25%Daniel KimIndividual · owner
Meridian Holdings BV · one owner behind it
KvK 68112094 · Sofia Rossi 100% → 40% effective
- Amara Chen35% · Passport, anti-deepfake liveness · company registryCleared
- Sofia Rossi40% via Meridian Holdings BV · PEP match, confidence 87%Review required
- Daniel Kim25% · BVN, anti-deepfake liveness · client attestedCleared
Entity risk score
Medium risk0.0%
- PEP on a beneficial owner
- Cash-intensive sector
Medium risk puts the business in Tier 2: enhanced due diligence, tighter monitoring thresholds, six-month refresh set before the first transaction.
02Fraud insights
See what the selfie
cannot show.
Every session gets a fingerprint: device and browser traits, IP and geolocation, incognito and Tor, device and account velocity, behaviour over time. Five signals agree. One says somebody else is driving and on a Tier 2 customer that surfaces before the first transfer, not after the chargeback.
- 140+
- signals per session
- <300ms
- to score
- Profile fingerprintknown
- IP geolocationSingapore, SG
- Incognito & Tornone
Amara C.
UBO · Meridian Logistics
session risk 34 · Tier 2
- Device velocity1 device
- Behaviour patternconsistent
- Remote desktop tool driving the sessionSIGNAL · REMOTE-TOOL-01
03Transaction monitoring
Watch every
transaction move.
$2.4m leaves at 02:17. The Tier 2 threshold set at onboarding fires mid-flight, Cowork opens the case against the same entity record, and the audit trail starts writing itself.
Request a Demo →Cowork · Transaction monitoringlive · 02:17 WATOutbound transfer, $2,400,000
- 02:17
Velocity rule breached
4 transfers · 38 minutes
- 02:17
Linked to remote-tool signal
Same device fingerprint · session 4471-A
- 02:18
Assigned · Lucas Moreau
SLA 71h 12m remaining
- Hold funds
- Escalate
- Draft STR
04Regulatory reporting
Regulator-ready before the regulator asks.
The STR drafts from the case file with evidence attached and every decision timestamped. your FIU on Tuesday, FATF returns on the fifth and a baseline-standards roadmap the circular already asked you for.
- SOC 2 Type II
- ISO 27001
- ISO 27018
- ISO 42001
- GDPR
- NDPR
- POPIA
- CCPA
your FIU/STR/2026-0417v1.0
Suspicious Transaction Report
Filed to your FIU
- Subject
- Meridian Logistics Pte
- Case
- CASE-2026-0417
- Evidence items
- 14
- Drafted by
- Vyra · reviewed by Lucas Moreau
FILED07 JUL 2026 · 09:04
05Vyra · AI compliance copilot
Half your compliance work, done.
Vyra sits on every entity, case and transaction in Cowork never on by default, always one tab away. It reads the file, opens with the finding, shows its working, and leaves the judgement to you.
Request a DemoVyra
● Online · Compliance copilot
Vyra, are we compliant today?
- Show the two breaches
- Open FATF returns
Vyra works from verifications in your workspace. No PII leaves Cowork.
The platform behind the story
One engine, one copilot, five workflows.
01 / 05Act 01 · the check
Customer Onboarding
Document, anti-deepfake liveness and government-source checks in one journey, scored to a risk tier. Business verification live in 145 jurisdictions across 48 countries.
Vyra
One entity record, one copilot
ACROSS ALL FIVE WORKFLOWS
VYRAAgent automation
Describe the control.
Vyra builds the agent.
Vyra
Agent builder
What compliance scenario would you like to monitor? I’ll build the full workflow — conditions, logic and actions.
Here’s the full path accept each stage, or tell me what to change.
- Deposit amount
- Deposits in 24h
- Account age
You describe the control
Plain language, the way you’d brief an analyst. No rule syntax, no query builder.
Vyra proposes the path
Variables, detection logic, the action and who gets told each stage separately acceptable.
It wires onto the canvas
A working draft you can open node by node. Nothing runs until you save it.
The agent never gets the last word
Agents run on your workspace data, inside your policy. Nothing files without a human approval, and every step is logged and reversible.
Compliance health · GRC for FRAML
Audit-ready, every day.
GRC, built for fraud and AML. Cowork scores your programme against the framework your examiner actually uses FATF 40 and FCA SYSC by default, plus the rulebook your own regulator opens with and keeps the evidence attached to every control.
Across 48 countries: FATF 40 as the spine, with each local overlay — CBN, FCA, FIC, SAMA, CBK — mapped onto the same controls and the same evidence.
Scored against the framework
Control areas, not vanity metrics the same pillars the examiner opens with, each one carrying the evidence behind its score.
Switch the lens, keep the evidence
Change framework and the same record re-maps to that regulator’s control set.
One export, both audiences
Board pack and regulatory return assemble from the same scored record.
Compliance Health
UPDATED 09:0412 week improvement streak
Export Wolfsberg report
Data residency
From Q4 2026
And it never leaves the country.
That record only holds up if it sits where your regulator says it must, and a growing number of countries require customer and payment data to be stored and processed in-country. From Q4 2026 you choose the region and change it when your footprint changes, not when your data allows.
In-region processing
Pick the region customer and payment data is stored and processed in, and switch as your licences change.
Bring your own datastore
Where data cannot leave your walls, point Cowork at your own datastore screening and monitoring run against it in place.
Every region sits in a country with adequate data protection regulation covering operations in Europe, the Americas, the Middle East, Asia, and Southern, East and West Africa.
Data region
Q4 2026Also available
- East Africa
- Southern Africa
- Europe
- Americas
- Middle East
- Asia
Moving region keeps case history, audit trail and evidence intact.
- businesses on the platform
- 1,400+businesses on the platform
- jurisdictions covered
- 145+jurisdictions covered
- of compliance work Vyra takes off your desk
- 50%of compliance work Vyra takes off your desk
- Certified
- SOC 2 Type II
- ISO 27001
- ISO 27018
- ISO 42001
- GDPR
- NDPR
- POPIA
- CCPA
Trusted by top financial institutions and fintech leaders across the EMEA region
One platform. One story.
Start now.
Onboard, monitor, investigate and report from one persistent record.
Compliance certifications
The only compliance platform in Africa holding SOC 2 Type II, ISO 27001, ISO 27018 and ISO 42001 at once, and registered with the data protection authorities in Nigeria, Kenya, South Africa, Côte d’Ivoire and the United Kingdom.
