CoreCompliance
Deterministic Compliance Execution Platform

Compliance screening that doesn't guess.

Upload your data — run screening + ownership intelligence + structured adverse media signals — get auditable review cases with complete evidence lineage and hash chain provenance. Self-serve or embed via API.

Batch screening results — Total Records, Clear, Review, Match Candidates
Interactive Demo

See CCAI screening in action

Screened Entity
Banco Nacional de Cuba
BLOCKED
Matched Name
BANCO NACIONAL DE CUBA
Confidence
100%
Resolution Layer
L1 Exact Match
Source
OFAC SDN
Decision Evidence Receipt(demo)
decision_state: BLOCKED
resolution_layer: L1_DETERMINISTIC
confidence: 1.0000
package_hash: sha256:9f4a2b...7c8d
snapshot_version: deterministic
Reproducible · Tamper-evident · Full decision path recorded

Every screening produces a verifiable decision package with integrity hash and full provenance chain.

How it works

Full transparency from input to resolution.

Step 1

Upload

Your data is versioned and frozen. Every result is traceable to an exact snapshot.

Step 2

Screen

Same canonical input, rules, and snapshot produce the same output. Full ownership chains with risk paths and commercial intelligence correlation.

Step 3

Intelligence

Raw hits become structured signals with justification, evidence snippets, severity, and full provenance including hash chain.

Step 4

Cases & Clearing

Flagged entities become structured cases. Analysts disposition with predefined types + required justification and notes.

Step 5

Webhooks

Instant webhooks on batch.completed, batch.failed, and case.status_changed. Full retry + dead-letter handling.

Execution and verification flowCCAI flow from tenant-scoped intake through deterministic screening, evidence assembly, human review, and independent attestation.EXECUTION AND VERIFICATION FLOW01Intake

Tenant-scoped input and schema normalization

02Screen

Deterministic waterfall and enrichment signals

03Evidence

DecisionEventPackage with lineage and hashes

04Review

Human-owned disposition and review-quality gates

05Attest

Independent receipt binding through IA

Boundary

Screening signals are not final legal determinations.

Every stage produces bounded evidence. CCAI executes screening; human review owns disposition; IA attests the resulting package independently.
Graph Intelligence with Commercial Correlation

See the ownership chain. Not just the name.

  • Depth control: 1–5 levels of traversal
  • Risk path analysis: shell chains, unknown UBOs, deep structures
  • Adverse media + commercial intelligence correlation (World-Check & Dow Jones adapters ready)
  • Snapshot-scoped: every query is reproducible
Ownership graph — resolved chain with ROOT/INTERMEDIATE/UBO nodes, risk path badges
Adverse Media Intelligence

From noisy vendor hits to explainable signals.

Raw adverse media data is noisy. CCAI's intelligence layer deduplicates, categorizes, and structures raw hits into explainable signals — each traceable to source evidence, each defensible in front of a regulator.

Raw Vendor Output

"Gazprom linked to sanctions evasion" — Reuters — HIGH

"Gazprom sanctions evasion scheme" — BBC — MEDIUM

"Russian energy company faces EU sanctions" — FT — HIGH

"Gazprom Export revenue drops amid sanctions" — Bloomberg — LOW

"Gazprom PJSC annual report controversy" — local media — LOW

5 hits. 3 duplicate the same event. 2 irrelevant. No structure.

CCAI Intelligence Signal
{
  "entity_name": "Gazprom Export",
  "category": "SANCTIONS_EVASION",
  "severity": "HIGH",
  "signal_count": 3,
  "deduplicated_from": 5,
  "top_source": "Reuters",
  "source_references": ["Reuters","BBC","FT"]
}

One structured signal. Categorized. Severity-ranked. Traceable.

Alert Clearing — One of Our Strongest Features

Structured alert clearing that actually reduces manual work.

Every screening hit becomes a structured case with full provenance. Your analysts review evidence, not raw data. Every resolution is auditable.

Automated Case Creation

Every BLOCKED or REVIEW decision automatically generates a structured review case with full evidence attached. No manual ticket creation.

Full Evidence Lineage

Every case includes the complete DecisionEventPackage with hash chain and provenance — matched name, confidence, resolution layer, adverse media signals, ownership graph context.

Structured Disposition Workflow

Analysts disposition with predefined types: True Positive, False Positive, Escalate. Required justification and notes fields. No free-form ambiguity.

Immutable Audit Trail

Every status change, disposition, and override is recorded with timestamp, analyst ID, and justification. Fully defensible under regulatory review.

Status Workflow

Open → In Review → Resolved. Pre-attached evidence eliminates manual data gathering. Analysts review decisions, not raw data.

Export-Ready Audit Bundles

Regulator-readable exam package views and JSON exports connect decision packages, case histories, disposition records, and reliance boundaries for internal audit review.

Case package

Northstar Maritime Ltd.

REVIEW
Review timeline
1

Screened

Evidence recorded

2

Case created

Evidence recorded

3

Analyst review

Human-owned step

4

Disposition pending

Human-owned step

decision

REVIEW

resolution_layer

L2 fuzzy

matched_list

OFAC SDN candidate

snapshot_age

5h 18m

Review-quality gate

Structured reason

required

Evidence acknowledged

pending

Human review owner

assigned

PI can draft. Humans approve.

Draft language is review support only; disposition and send execution stay behind human-owned gates.

Try the Live Sandbox

See how alert clearing works in the live sandbox

Self-serve

API key in 30 seconds. No sales call required.

Create a tenant, generate an API key, upload your first list, and screen it — all through the self-serve provisioning surface. No procurement cycles. No vendor lock-in.

Self-serve provisioning

Evaluation tenant ready

Active

Tenant

Bluewater Logistics

created

Region

US primary

selected

Key

prod_screening_...7f42

issued
Key handling

scope: screen:batch

expires: 90 days

secret: shown once

The raw API key is returned only at creation. Browser surfaces route through the BFF; server-only credentials stay off the client.

Try the Live Sandbox
Transparency by Design

Built for the audit that's coming.

Immutable Snapshots

Every screening run is bound to a frozen, versioned, content-hashed snapshot. Results can be replayed against the same data.

Hash Chain Provenance

Every decision includes a verifiable DecisionEventPackage with SHA-256 integrity hash and full decision path.

Signal Provenance

Full provenance on every intelligence signal — traceable from structured output back to raw vendor hit.

Deterministic

Same canonical input, rules, and snapshot produce the same output. No probabilistic drift. No model retraining surprises.

Tenant Isolated

Tenant-scoped persistence, API key authentication, and explicit boundary checks reduce cross-tenant exposure risk.

Single Entity + Batch

Single entity screening available via real-time API, or batch-process thousands. SOC-2 evidence preparation tools and audit exports.

Enterprise Readiness

Production-grade from day one.

Rate Limiting

60 requests per tenant per 60 seconds (operator-configurable via code constants). Fair usage enforced per tenant, not globally.

Redis-Backed Shared Limiting

Redis-backed rate limiting in production for multi-instance deployments. Graceful fallback to per-process limiting if Redis is unavailable.

Webhook Delivery Guarantees

Bounded retries with backoff. Dead-letter queue for exhausted deliveries. Full delivery audit log per tenant.

Trusted by compliance teams who need to defend their decisions.

72,859Sanctions entries across 15 source lists
656KPEP records (OpenSanctions)
<17s100K entities screened
6,000+Rows/second sustained throughput

Ready to replace noisy vendors and manual review?

A transparent, auditable platform. No procurement. No integration project. Upload a list and get results.