Risk Radar · Financial Crime Operating Surface

One radar.
Every signal.

RiskSonnar ingests your bank, fintech, or insurance backbone into a single canonical model. TM scenarios catch the suspicious flows. WLM screens every party against sanctions, PEP, and adverse-media. SAR filing, DSAR pipelines, and the hash-chained audit trail are first-class — regulators replay every decision byte-for-byte.

Free tier · No card · EU residency by default

Three signal bands

one canonical model
band 1

TM · Transaction Monitoring

Scenarios watch streaming + batch transactions. LME stitches customer / account / transaction / wallet into one graph with rings, shortest-path, risk-flow queries.

  • 100+ scenarios
  • LME betweenness
  • Three-engine recon (pandas + Flink + Spark)
band 2

WLM · Watchlist & Screening

Sanctions, PEP, adverse-media against every party. Native OFAC / EU / UN / UK HMT / Refinitiv / OpenSanctions / internal PEP + adverse-media. 4-eyes diff publish.

  • 19 check primitives
  • Internal PEP + AM
  • Per-tenant overlay overrides
band 3

Compliance & Reporting

DSAR pipeline with redacted-export bundles. SAR drafting + MLRO step-up + 4-eyes co-sign. Hash-chained audit every regulator can replay byte-for-byte.

  • GDPR Art. 12 §3
  • MLRO step-up gate
  • Reproducible to the byte

Every action carries a named control

Full control matrix →

FATF / AMLD6 / OFAC / DORA / NIST / SOC 2 — every mutation in the cockpit emits an audit event tagged with the controls it satisfies. Auditors filter by id; regulators replay byte-for-byte.

RS-CTRL-FATF-0010RS-CTRL-FATF-0011RS-CTRL-FATF-0012RS-CTRL-FATF-0020RS-CTRL-AMLD6-0008RS-CTRL-OFAC-0001RS-CTRL-NIST-AC-007RS-CTRL-DORA-0017RS-CTRL-SOC2-CC6.7

Why teams pick RiskSonnar

Hash-chained audit

Every mutating action lands in an append-only chain referencing the previous hash. Tampering breaks the chain visibly.

Three-engine recon

Same scenario yields byte-identical output across pandas, Apache Flink, and Apache Spark. Switch engines without re-tuning.

GOV-006 4-eyes

Promote scenario, publish sanctions diff, close account, decommission source — every prod-state change requires a second signer.

Open OIDC

Auth0, Keycloak, Entra ID, Google, Okta. One-click bootstrap wizard for Auth0; self-host Keycloak in 15 min on Railway.

Pay only for what fires

Metered alerts / screens / SARs / DSARs. Hard-cap on seats + integration sources. Soft-cap overages bill — never block regulators.

EU residency by default

Free + Starter land tenant data in EU West. Multi-region on Pro+. Cross-region moves refused at the orchestrator boundary.

Try it in 60 seconds.

The cockpit ships with realistic mock data — sign in, open /today, click through TM / WLM / Compliance. No card, no commitment.