An anti-money-laundering platform for regulated professions that industrialises KYC collection, screening and risk scoring.

The context

Regulated professions — accountancy, notaries, real estate, fintech — have to evidence documented due diligence on every business relationship. In practice, documents travelled by email, checks were done by hand and progress was tracked in scattered places, which makes an inspection hard to defend.

What we delivered

  • Due diligence files for both companies and individuals, with document requests and automatic reminders
  • Token-based KYC collection: the client uploads documents without having to create an account on the platform
  • Automatic reading of identity documents through Google Cloud Document AI, removing re-entry and flagging expired paperwork
  • Regulatory screening: FATF lists, politically exposed persons and national business register checks
  • Money-laundering risk scoring, recomputed from the analyses and the due diligence questionnaire
  • Hexagonal architecture on Rails — domain entities, use cases and repositories kept apart — so compliance rules are written once
  • Next.js and React front-end separate from the API, both deployed on Google Cloud Run with Cloud SQL and continuous delivery through GitLab CI
  • Production errors pushed to the team's messaging tool by a dedicated serverless function

Outcomes

  • The risk level of a case becomes computable, reproducible and defensible under inspection
  • Progress of every case traceable by status, from opening through to approval
  • Compliance rules centralised in the domain rather than duplicated across screens
  • Expired identity documents flagged automatically instead of caught on review

Tech stack

Ruby on Rails · PostgreSQL · Next.js · React · Google Document AI · Google Cloud Run · Cloud SQL · GitLab CI · DDD