Free guide: How to use AI in compliance

AML Software

AML Software with every decision explainable, every rule testable, live in days not quarters

Most AML platforms ask you to trust a model you cannot inspect and a rollout that takes two quarters. Zyphe is a deterministic rules engine: every Allow, Review or Block shows exactly which rules fired and why, any rule can be dry-run against your own history before it goes live, and the fastest customer went from contract to production the same day.

AML ScreeningLive
EntityStatus
James MitchellClear
Viktor SokolovSanctioned
Li Wei ZhangPEP
Klaus MüllerClear
Omar Al-RashidClear
Park Jin-hoSanctioned
Marie LeclercClear
Carlos MendozaPEP
Alistair PembertonClear
Hassan RouhaniSanctioned
James MitchellClear
Viktor SokolovSanctioned
Li Wei ZhangPEP
Klaus MüllerClear
Omar Al-RashidClear
Park Jin-hoSanctioned
Marie LeclercClear
Carlos MendozaPEP
Alistair PembertonClear
Hassan RouhaniSanctioned
100K+ lists monitoredReal-time

What is AML software?

AML software automates the controls a regulated firm must run to detect and report money laundering: screening customers against sanctions and politically exposed person lists, monitoring transactions for suspicious patterns, generating and managing alerts, and producing the reports and records regulators require.

Every vendor detects something. What separates AML platforms in practice is whether you can explain a decision to a supervisor eighteen months later, and whether you can change a rule without waiting a quarter to find out what it does.

Trusted by those who trust no one.

Bondex
ETHDENVER
EBSI
Filecoin
XEurope
Protocol Labs
Supra
Yescoin
Twotixx

Built to be examined

100

Sanctions, PEP, watchlist and adverse media lists screened, re-checked daily and on event-driven triggers.

0

Black-box scores. Every Allow, Review or Block returns the list of rules that produced it.

1

Fastest contract-to-production go-live to date. A couple of days is typical.

Deterministic, not a black box

Zyphe's monitoring is a deterministic rules engine, not machine learning. Every payment event is evaluated synchronously against your organisation's rules. Each rule that fires contributes a probability; those combine into a single P(risk) using a noisy-OR, compared against your review and block thresholds to return Allow, Review or Block with the fired rules attached. Rules are versioned, so when a supervisor asks who set a threshold, on what basis and when it was last validated, the answer is a changelog. Any rule can be backtested against your stored transactions before it goes live, and backtests are free.

Deterministic, not a black box

The controls, and where they live

The hub summarises; each spoke page goes deep. These are separate purchases and separate searches, so each has its own page.

Real-time transaction monitoring

Every payment is evaluated synchronously and the decision returns before funds move. Not a batch job that tells you about it tomorrow.

Sanctions screening

Customers screened at onboarding and on re-screening, and payment counterparty names screened per transaction against sanctions lists.

PEP and adverse media screening

Politically exposed persons, watchlists and adverse media, for individuals and companies, with fuzzy matching, a 0 to 100 risk score banded Low, Medium, High and Critical, and a count of contributing sources on every match.

Ongoing and perpetual KYC

Periodic re-screening on list refreshes plus event-driven triggers, delivered by webhook as PRODUCED, REFRESHED or MODERATED.

Regulatory reporting

Agents draft the SAR narrative and the evidence pack in FinCEN SAR, UK NCA SAR and goAML formats. Filing responsibility stays with your MLRO under AMLR Article 18(3); in Auto-pilot, filing can be executed once the deterministic guard passes.

KYC and AML together

Monitoring without customer context produces alerts nobody can assess. The KYC risk score is a field your rules can use.

What the rules can see

You do not start from an empty page. The rule catalogue is jurisdiction-tagged and cites its sources, UIF indicatori di anomalia for Italy, FCA and JMLSG guidance for the UK, so a new rule arrives with the reason it exists attached.

Amount, currency, direction, counterparty and country; managed block lists, country-risk sets and keyword packs; the customer's KYC risk score and account age.

Sums and counts over 1 hour, 24 hours, 7 days and 30 days, 24-hour net flow, and counterparties shared across identities. That last one is the quiet workhorse: shared counterparties across supposedly unrelated identities is one of the more reliable signals of a mule network, and most rule builders do not expose it.

Dry-run any rule against your stored transactions to see what a threshold change does to alert volume before your analysts feel it. Tuning happens against your history in an afternoon instead of against your team over a quarter.

PEP Detection
Screen politically exposed persons
Sanctions Lists
OFAC, UN, EU lists checked

2 suspicious matches found

Webhook Alert
Instant notification sent
AML Results Only
No PII retained
GDPR-Compliant
By design · auto-delete
Audit Ready
Fully traceable records

Alerts your analysts can clear

Transaction monitoring generates false positives, and rates above 90 percent are ordinary. Zyphe's answer is agent triage on screening alerts, with a hard constraint: in Auto-pilot an agent's decision is enacted only if a deterministic guard also passes, every action is audited, and missing configuration fails closed. You choose Disabled, Suggest or Auto-pilot. In practice around 90 percent of screening cases close automatically, and one customer's go-live cleared 120 false positives immediately. Agent triage of transaction-monitoring alerts is planned and not yet shipped; TM agent mode is currently fixed to Disabled, and we would rather say so than let you discover it in week three.

Where data is stored, what is retained, and the audit status: the security and trust page

Live in days, not quarters

AML implementations are notorious: data integration, rule configuration, then a tuning period before alert volume is usable at all. Six months is normal. Zyphe's fastest customer went from contract to production the same day, and a couple of days is typical.

Two things make that possible. The jurisdiction-tagged rule catalogue means you start from a configured baseline rather than a blank engine, and free backtesting means tuning happens against your history rather than against your analysts. If you are replacing an incumbent, this is the number to put in front of your steering committee.

Who it is for

Banks
BSA/AML programme obligations, examination exposure, and volume.
Payments and PSPs
High throughput, thin margins per transaction, and a monitoring bill that has to scale sub-linearly.
Crypto and digital assets
On-chain and off-chain activity, Travel Rule obligations, and counterparty exposure conventional monitoring was not designed for.
Gambling
Source-of-funds and affordability signals sitting alongside AML monitoring.

Backtest it against your own transactions

Every rule can be dry-run on your history before it goes live, and backtests are free. Bring a period of real transactions and see what Zyphe would have flagged, and what it would not.

Book a demo →

Better compliance in 190+ Countries

Banking Secrecy Act

Enforces strict record-keeping and reporting requirements for financial institutions to prevent money laundering and financial crimes in the United States.

Anti-money Laundering Act

Establishes measures and responsibilities for financial intermediaries in Switzerland to prevent money laundering and terrorist financing.

Proceeds of Crime

Canadian regulation requiring financial institutions to detect, prevent, and report suspicious transactions related to criminal proceeds.

Terrorist Financing Act

Legislation enforcing measures in Canada to detect, prevent, and report financial activities linked to terrorist financing.

Anti-money Laundering

Australian regulation mandating financial entities implement robust compliance measures to detect, prevent, and report money laundering activities.

Counter-Terrorism Financing Act

Australian law ensuring financial institutions identify, monitor, and report activities related to financing of terrorism to maintain national and global security.

Integrate in as little as 15 minutes

curl -X POST https://verify.zyphe.com/v1/login_sessions \
-H 'Authorization: Bearer <API_KEY>' \
-H 'Content-Type: application/json' \
-d '{"auth_type": "email"}'

Frequent Questions

Software that automates anti-money-laundering controls: sanctions and PEP screening, transaction monitoring, alert and case management, regulatory reporting, and record-keeping.

No, deliberately. It is a deterministic rules engine. Every decision returns the rules that fired, rules are versioned, and any rule can be backtested against your stored transactions before it goes live. That is a materially easier story to tell a supervisor than a model score. How the monitoring engine works

KYC software verifies identity at and after onboarding. AML software monitors behaviour and transactions on an ongoing basis. They are complementary, and in Zyphe the KYC risk score is a field your monitoring rules can use. KYC and AML in one platform

The controls are required; the software is not. AML regulations are technology-neutral. In practice, meeting monitoring and screening obligations at real volume requires automation, and supervisors expect systems proportionate to the firm's risk.

More than you would like; rates above 90 percent are common across the industry. The meaningful questions are whether the rate is trending down, whether tuning decisions are documented, and whether analysts have what they need to clear alerts quickly. Around 90 percent of screening cases close automatically on Zyphe.

Your MLRO. Zyphe drafts the narrative and evidence pack; filing responsibility stays with your firm under AMLR Article 18(3). In Auto-pilot mode, filing can be executed automatically once the deterministic guard passes.

Days, not quarters. Our fastest customer reached production the same day; a couple of days is typical. The jurisdiction-tagged rule catalogue and free backtesting remove most of what usually makes these projects long.

The US Bank Secrecy Act framework and its anti-money-laundering obligations: customer identification, due diligence, monitoring, and suspicious activity reporting, which US financial institutions must implement as a written programme. The Bank Secrecy Act explained

AML & Sanctions Readiness Score

Evaluate sanctions screening, PEP coverage, transaction monitoring and SAR-readiness across your AML programme.
Take the AML Readiness check