DataFab · Financial Crime Utility

The whole FCU, on one resolved institution.

A Monday inside a financial crime function running on the Utility. The data stays where it is. The institution becomes resolvable.

For a bankFor a managed-service partner
Before the day

Not whether a platform can. What has to happen first.

THE COPY synchronise · forever BUILD ANOTHER REPRESENTATIONRESOLVE THE INSTITUTION IN PLACE ingest · map · transform · integrate · synchroniseattach · discover · resolve · derive · operate

One architecture creates another representation of the institution that must continuously remain aligned with it. DataFab resolves the authoritative estate in place and operates over that resolved context.

The Knowledge Fabric

Seven functions. One motion.

KnowledgeFabric01Acquire02Discover03Resolve04Derive05Extract06Encode07Govern

Acquire in place and from open sources · discover and catalogue · resolve with evidence · derive the model · extract the knowledge · encode it in the Studio · govern execution — then it is Monday.

Resolve

Twelve records. Nine systems. Six names. One node.

CORE BANKINGNORDVIK SHIPPING ASPAYMENTSNordvik Shipping A/SCRMNordvik ShippingSCREENINGNORDVIK SHIPPING ASDOCUMENTSNordvik Shipping ASTRADE FINANCENORDVIK SHIP. ASREGISTRYNordvik Shipping ASMARKET DATANORDVIK SHIPPING ASCORE BANKINGNordvik Shipping AS (2)PAYMENTSNordvik Shipping ASCRMNordvik Shipping (UK) LtdDOCUMENTSNordvik Shipping (UK) LtdNordvik Shipping ASC-0001 · LEGAL ENTITY · NO evidence per matchregistration no. · IBAN · LEI · registered seat QUEUENordvik Shipping (UK) Ltd · similar, not the same · reason retained
WHAT THIS REMOVES pre-built canonical customer model · manual reconciliation

Eleven resolve on evidence. The twelfth is similar, not the same — it stays in the queue with its reason. Never forced. Always reversible.

08:31 · the morning push

Thirty-seven overnight. Six need a person.

ILLUSTRATIVE DEMO SCENARIO

Thirty-one were handled by the platform itself — updated, re-screened, review date untouched. Six arrive as cards: what changed, where from, what is proposed, what happens if nobody acts. One is restricted.

One graph · governed views

What a person may not see is absent. Not dimmed.

Marcus · MLROTomasz · senior analystSophie · relationship manager
Aurelia FintechCaspian Ventures · inferredTrident · Majuro · shared address Helios Trade GmbHIlona Vaitkus · director Helios Holding AG · sanctions match

Marcus sees the book. Tomasz sees Helios without its sanctioned parent. Sophie sees her client and one sentence. No count of what was withheld; the exclusion appears only in the authorised audit.

08:45 · retail onboarding

Is Ade Balogun new? No.

2023 · CARD APPLICATION · DECLINED ON AFFORDABILITYAde Balogun · DOB · NI number · device DORMANT SAVINGS ACCOUNT“A. Balogun” · DOB · NI number TODAY · 08:45 · ONBOARDING REQUESTAde Balogun · passport · council-tax bill · device One person3 RECORDS → 1 NODE CARRIED FORWARD2023 PEP near-matchnamesake · discountednot re-litigated 11 minend to end3human minutesCDDprohibition first · sources classified · screened · scored · sufficient

The cheapest investigation is the one the institution already performed.

09:18 → 09:27 · the investigation agency

It builds its own plan. Then re-plans.

PLAN v1 · 09:18 · 15 STEPSprohibition checkdeclare scoperegulated status · regulatorownership · level 1ownership · level 2screen partiesFCRR · proposePLAN v2 · 09:22 · REGISTER SAYS LAPSEDprohibition ✓scope ✓regulated status · LAPSEDmisleading-documents testownership · level 2screen partiesFCRR · proposePLAN v3 · 09:27 · NO REGISTER AT LEVEL 3prohibition ✓scope ✓re-score entity risklevel 3 · no public registerrequest certified registerPEP confirmed → 2LoDEDD · source of wealth
WHAT THIS REMOVES hard-coded workflow redesign · configuration backlog

Not a workflow somebody drew: a plan from the rules and their dependencies, re-planned when the world answers back. Every version kept. The case replays exactly as it ran.

11:00 · the overnight run

The entity, not the string.

412ALERTS OVERNIGHT96parties190carried forward on lineage151cleared with fresh corroboration beyond the name3re-opened — new evidence contradicts a prior clear71to a person · ranked · reason stated · 40 s each
WHAT THIS REMOVES repeated adjudication of already-known institutional context
ILLUSTRATIVE DEMO SCENARIO

Four hundred and twelve alerts resolve to ninety-six parties. Nothing is cleared on a name alone; nothing decided is decided twice; three the platform refused to clear because the evidence changed.

13:20 · perpetual KYC

Whole-customer risk, recomputed by neighbourhood.

Baltic Components UABRiga Freight SIATallinn Metals OÜNemunas Energy UABOstsee Logistik GmbHElbe Kreditbank AGprincipal operations → High-risk country · country factor 15 → 30 · special factor · one band up · full review on the 90-day clocktwo counterparties shared214reviews due this month148already reviewed by the graph inside the cycle66need work

An event on one customer reaches its counterparties, their counterparties, and the other customer that shares them. Continuous risk should reduce reviews, not trigger them earlier.

14:06 · REM-2026-UBO

2,412 legacy files. Seventy percent closed before a letter.

WHAT THIS REMOVES analyst capacity purchased before existing evidence is exhausted
ILLUSTRATIVE DEMO SCENARIO

1,471 on primary evidence already in the estate · 212 on evidence found on a related node · 729 specific requests on the regulator’s cadence · one refusal, to a person. £210 → £9 a file, illustrative — ask for their number.

10:31 · 15:46 · incident and quality

A later clearance never cures a breach. A repeated defect becomes a rule.

CASE STATE · MB-26-11407 INSUFFICIENT-DATA CLEAR-EDD · 10:48 10:31 · FX trade €2.1m executedagainst case state → INC-26-0088 · separate record · 2LoD · stop instructedstill open at 17:00 — a later clearance never cures it 09:1509:4510:1510:27 refused10:4811:3017:00 QUALITY · EVERY CLOSURE CHALLENGED 94FAIL · major · no screening edge 100PASS · re-gated · both scores kept nine occurrences in fourteen days RULE CHANGE · v2026.2.1screen connected parties at capturereplayed over 30 days: 9 fewer fails, 0 newreleased by the canon owner
IMPLEMENTATION DEPENDENCY DOES NOT END AT GO-LIVE. If every policy change still requires the same translation layer that implemented the platform, that implementation team has become part of the permanent operating model.

The cost of a platform is not only the cost of running today’s rules. It is the cost of changing tomorrow’s.

The model the estate proposed

Derived, not drawn.

core_bankingcust_nopaymentsparty_refcrmaccount_idscreeningsubject_iddmsclient_codetrade_fincounterpartyregistrycompany_nomarket_dataleiCustomerLegal entityBeneficial ownerAccountCounterpartyTransactionCaseWatchlistFIELDS · PROFILED AND CLASSIFIED AT SOURCEONTOLOGY · DERIVED FROM 61 JOIN PATHS · TWO SME SESSIONS · ELEVEN EDGES RENAMED · NONE DRAWN
WHAT THIS REMOVES blank-page ontology programme · specialist modelling bench
The modelling programme is not moved from the SI to DataFab. Much of it ceases to be a programme.

The join paths the systems already share become the entity types and their relationships. Processes are generated from the model. When the next source arrives it proposes its own mapping — a connector and an approval, not a programme.

Knowledge & Agentic Studio · Layer 2 · the builder

Two hands on the same tool. Agents, agencies, utilities — not rules.

WHAT GETS BUILT · AGENTIC ASSETS, NOT RULESAGENTdata-driven · a model paired with a schema-bound query plan · draft → test → publishamodel + instructionsquery plan · datasets · connectors · sub-agents · scriptsAGENCYa coordinated team of agents · one purpose · a person at the gateaRetrieveaExtractaReasonaCheckaDraftaReviewGATECHAIN · GRAPH OF AGENCIESsequential with a gate · branching · hierarchicalAAAAAAgate at any nodeAGENTIC UTILITYpublished · reusable · composed by anyone entitledScreening utility · agencies + widgets + datasets + connectorsruns on the resolved estate the moment it is published · exportableTWO HANDS ON THE SAME TOOLDEDomain expertbuilds it in language · no codeDescribe it in words“screen the counterparty, check the UBO, draft and cite”Upload the documents you run onpolicy · templates · forms → schemas derivedStart from a templatepre-built workflows, not a blank canvasPEPlatform engineerfull control · every node hers to shapeCompose in the visual builderlive validation · twelve node typesCustom logic and scriptsinside the query planAuthor connectors · MCPvalidated · published to the catalogueSchemas and plans in JSONbreakpoints · step tracesone artefact

A domain expert builds in language; a platform engineer builds with every node. The same governed artefact. What they build is agentic: agents, agencies with a person at the gate, chains and graphs of agencies, and published utilities that run on the resolved estate the moment they exist.

Knowledge & Agentic Studio · the autonomy you set

From deterministic to acting within a gate. A level, not a contract.

AUTONOMY · A DIAL PER STEP, NOT PER AGENCYL0L1L2L3L4L2acts within a gateL0Deterministicno judgement · rendering and rules onlyL1Proposesa person decides every outcomeL2Acts within a gateholds for approval where the gate saysL3Acts · escalateshandles the routine, escalates the exceptionL4Autonomousnot usedAUTONOMY REGISTER · VERSIONED · SET BY YOUR LEADERSHIPMonitoringL2gated for material changeInvestigationL2self-organising within a gateScreeningL2clears only with corroborationTriageL2routes · never decidesNarrativeL0renders from the recordQualityL1proposes · a person classifiesa level, not a contractGOVERNED BY CONSTRUCTIONevery agency runs in a sandbox with only the tools it is authorised to usecredentials injected at run time — never in the definitiona human gate blocks the pipeline until a person approvesevery step recorded in a hash-chained audit · replayablenothing an agency does becomes institutional truth on its ownwhat the Studio builds cascades back into the Fabric — governed schema · accepted relationship · published agency · human decision · execution outcome — with provenance, version and authority

Autonomy is a dial per step, recorded in a versioned register your leadership owns. Every agency runs sandboxed and tool-authorised, holds at the human gate, and writes a replayable audit — and what it builds cascades back into the Fabric with provenance, version and authority.

Governed inference

Inference you can replay, inside walls it cannot cross.

AureliaCaspian · inferredMajuro addressHelios Tradedirectorsanctions match PERMITTED SUBGRAPH ENDS HERE FOR SOPHIEno hint · no count · exclusion in the authorised audit MARKEDinferred · sourced · scoreda person confirms before sign-offWALLEDruns only within what the asker may seethe mosaic bounded, not claimed awayREPLAYABLEa path over a versioned graphthe same path for the same reason, a year later

Four times today the platform knew something nobody entered: a path over a resolved graph, followed. Marked, confirmed, walled, replayable.

17:00 · the day as numbers

Grounded. Attributable. Reproducible.

2,041cases closed
1,927by the agencies alone
114with a person, where the authority matrix required one
71 of 412human alert decisions
96%QC passed same day · 100% challenged
3findings only the graph could see
ILLUSTRATIVE DEMO SCENARIO

Decision record with six elements, evidence pack with every claim to source, factor trace reconciling to the arithmetic — on every one of the 2,041.

Time to value

The licence is day zero. What sits between day zero and value?

TRADITIONAL TRANSFORMATION · ten stages, four of them recurringDATAFAB · six stages, then Monday01ingest02map03canonical model04pipelines05configuration06specialist implementation07testing08business validation09production10ongoing synchronisationforever01attach02discover03resolve04derive05approve06utilityfirst operational outcome · weeks
The implementation organisation is part of the product’s economics.

Time to value is not simply how quickly software can be installed. It is how much engineering, modelling, configuration and specialist translation has to happen before the first operational outcome. The implementation organisation is part of the product’s economics.

The comparison that matters

The licence is not the TCO. Give us the whole number.

softwareinfrastructureintegrationdata engineeringcopied-data estateimplementationspecialist servicestestingupgradesinternal platform teamexternal supportpolicy changemodel changeoperational labourWHAT YOU ACTUALLY PAY · THE LICENCE IS THE BOTTOM BLOCKThe thesisthe first utility pays to resolve part of the institutionthe second inherits it · the third inherits moreutility 1utility nmarginal cost of the next outcome

Software, cloud, integrator, professional services, the people who exist to keep the platform working, every regulatory change, every new source, every next utility. The marginal cost of the next outcome falls — it does not reset.

The comparison that matters

Cost to serve is not licence plus salary. Architecture becomes margin.

6 of 37events that reach a person — that ratio is your margin
4human judgements in a complex corporate onboarding
70%of a remediation cohort closed before a letter — fixed price, delivery date
No per-analyst licenceplatform priced per client deployment, not per analyst
ILLUSTRATIVE DEMO SCENARIO

Six of thirty-seven events reach a person. Four judgements in a complex onboarding. Seventy percent of a cohort closed before a letter. Platform priced per client deployment, not per analyst.

Mobilising a client

Weeks, not quarters.

WEEK 1boundarysources attached in place · raw egress 0 BWEEKS 2–3discoveryresolution · the estate proposes its modelWEEK 4package as versioned logicreplayed · 2LoD signs · autonomy setMONDAYthe service is liveconsumed: your delivery lead · the bank’s data owners in two sessions · the bank’s second line for one sign-off · no bench
ILLUSTRATIVE MOBILISATION PATTERN · actual timeline depends on estate and scope

What it produced is an asset for the second client, not a sunk cost trapped in the first: connector patterns, agency designs, the quality method — your method, in executable form.

Scaling across banks

Twelve sealed tenants. One method, carried.

BANK Aown tenant · own graph · own policy · own register method v3 BANK Bown tenant · own graph · own policy · own register method v3 BANK Cown tenant · own graph · own policy · own register method v3 BANK Down tenant · own graph · own policy · own register method v3 BANK Eown tenant · own graph · own policy · own register method v3 BANK Fown tenant · own graph · own policy · own register method v3 BANK Gown tenant · own graph · own policy · own register method v3 BANK Hown tenant · own graph · own policy · own register method v3 BANK Iown tenant · own graph · own policy · own register method v3 BANK Jown tenant · own graph · own policy · own register method v3 BANK Kown tenant · own graph · own policy · own register method v3 BANK Lown tenant · own graph · own policy · own register method v3 ONE METHOD · agency types · operating method · quality framework · evidence standard · mobilisation approach — yours, carried to every tenant the bank’s data, graph, policy and decisions never leave the dashed boundary

Each bank lights up faster than the last — the fifth mobilises in the time the first took to sign — because the method carries and the data never does. You do not standardise the bank’s risk appetite; you standardise how your service operates around it.

Your expertise · the Studio for a partner

Authored once. Validated inside every client’s governance.

Your SMEsdecisions → candidate logic → dossierthey sign Partner method · v nreusable · executable · yoursauthored once at partner level Bank A · replayed on its own estateits own impact · its own approval routeits own version releasedBank B · replayed on its own estateits own impact · its own approval routeits own version releasedBank C · replayed on its own estateits own impact · its own approval routeits own version released

A method change made Monday can be replayed across every client by Tuesday — each bank sees its own impact, follows its own approval route and releases its own version.

The close

What you did not see.

THE PROGRAMME A FINANCIAL-CRIME PLATFORM USUALLY REQUIRES · MONTHSM0M3M6M9M12M15M18M21M24Move the institution into another application9 monthsDesign a data model from a blank page6 monthsIntegrator and specialist bench before every change→ permanentRe-make yesterday’s decisions with the next analyst→ permanentTurn each rule change into a technology programme→ permanentStart remediation with a headcount calculation9 monthsLet an isolated agent rebuild context every time→ permanentweeks · then it is MondayWHAT YOU SAW INSTEAD
THE PROGRAMME A FINANCIAL-CRIME PLATFORM USUALLY REQUIRES · MONTHSM0M3M6M9M12M15M18M21M24Create a new analyst team for every change in volume→ permanentKeep a technology bench between your experts and the platform→ permanentLeave the first client’s method trapped in the first client9 monthsMix client data so that scale creates regulatory risk→ permanentRun quality as a retrospective policing function→ permanentStart remediation with a headcount calculation9 monthsBuy the same expertise again from the same SME→ permanentweeks · then it is MondayWHAT YOU SAW INSTEAD

Seven programme lines a financial-crime platform usually requires — none of them ran on this Monday.

Proof of value

Three or four of your sources. One utility. Weeks. Inside your estate.

The data stays where it is. The knowledge becomes usable. Resolved once. Read everywhere.
Your people on the screen. The bank’s data in the bank. Resolved once inside each client. Delivered better across every client.

Exit criteria written before it starts: sources catalogued and resolved with evidence · the derived model approved by your people · one utility in production on the live estate · raw egress measured at zero · the second utility named.

Financial Crime Utility · certified ISO/IEC 27001:2022 · SOC 2 Type II