Blueprint · 10 AML alert triage

Alert to decision to SAR, with the analyst console banks actually want.

Workflow blueprint that bolts onto an existing bank. Trigger from sanctions screening or transaction monitoring → analyst escalation → decision tokens → SAR filing. Composable across multiple AML vendors with one analyst console. For compliance teams drowning in alerts from three different vendors.

The use case

Banks have AML vendors. Banks don’t have AML workflows.

Sanctions screening, transaction monitoring, adverse media — banks run two or three vendors and end up with two or three queues their analysts toggle between. The result is alert fatigue, missed escalations, and SARs filed late. The vendor count isn’t the problem; the absence of a unifying workflow is.

< 30 min
Median alert-to-decision target
Multi-vendor
Alert sources unified
Decision tokens
Replayable + audit-grade
SAR filing
Native, not a doc generator
The architecture

One analyst console. Multiple alert sources. Audit-grade decisions.

AML alert triage is fundamentally a workflow problem. Klyqo treats the triage queue as a journey: alert ingested → analyst dispatched → evidence gathered → decision recorded as a typed token → SAR filed if required → case archived. Multiple vendor alert streams flow into the same journey; the analyst sees one console.

Compliance railFINTRAC / FinCEN / UIF / NCA per jurisdiction; STR / SAR timeline tracking
Layer 5 · Channels
Analyst + supervisor + regulator-export surfaces
Analyst consoleSupervisor reviewRegulator exportCase archive
Risk railAlert source quality monitoring; false-positive ratio per vendor
ComplianceEvery analyst action signed + timestamped + replayable
Layer 4 · Klyqo · the Banking OS
Runtime + marketplace dispatch
ComposeDispatchRunObserveTriageEscalateDecideFile
RiskPer-analyst + per-cohort decision quality monitoring
CompliancePer-vendor format normalized into one alert schema
Layer 3 · Marketplace primitives & providers
AML-specific capabilities
Sanctions · ComplyAdvantage / RefinitivTransaction monitoring · Hummingbird / QuantexaAdverse mediaSAR / STR filing
RiskVendor-by-vendor true-positive rate informs alert routing
ComplianceDecision records anchored to the existing core; case archive immutable
Layer 2 · Existing bank infrastructure
Your existing core, ledger, customer records
Existing core (unchanged)Customer masterCase archiveAudit log
RiskPer-customer cumulative risk score updated by decisions
ComplianceBank’s existing AML programme + compliance officer
Layer 1 · Foundation (yours)
Bank licence · AML programme
Bank licenceAML programmeCompliance officer
RiskCapital + reputation exposure from missed SAR + regulator findings
The canonical journey

Alert → analyst → decision → SAR, with the audit log every regulator asks for.

Sanctions or transaction-monitoring vendor fires an alert. Klyqo routes it to the right analyst (by cohort, by case complexity, by language). Analyst gathers evidence inside the console; every action signed. Decision is a typed token (escalate / clear / file SAR). If SAR is required, the filing journey runs in the same runtime.

klyqo / journeys / aml-triage · LIVE
01
Alert ingestedfrom sanctions / TM / adverse-media vendor
real-time
02
Routing decisionKlyqo dispatches to analyst by cohort + skill + language
< 1 s
03
Evidence gatheringanalyst pulls customer history + counterparty + KYC docs
5–30 min
04
Decision token recordedescalate / clear / file SAR · typed payload · signed
user-driven
05
Supervisor review (if needed)auto-routed by decision type or threshold
< 1 h
06
SAR filing (if required)filed in regulator-mandated format · per jurisdiction
< 24 h
07
Case archivedimmutable record · regulator export-ready
< 1 s
The providers used

What you pick from the marketplace.

AML alert triage uses six marketplace providers. The bank typically already has the alert sources; Klyqo’s job is to unify them into one workflow.

Sanctions · screening
ComplyAdvantage / Refinitiv
Existing sanctions screening vendors. Klyqo normalizes the alert format.
Roadmap
Transaction monitoring
Hummingbird / Quantexa
Existing TM vendors. Alerts feed into the same console.
Roadmap
Adverse media
(per vendor)
Adverse-media feeds wired as alert sources alongside sanctions + TM.
Roadmap
Case management
Klyqo-native
Built into the runtime. Per-tenant case archive, immutable, regulator-export-ready.
Roadmap
SAR / STR filing
Per-jurisdiction format
Filing format per regulator (FinCEN, FINTRAC, UIF, NCA, BdP). Klyqo normalizes the journey.
Roadmap
LLM-as-binding
Anthropic / OpenAI
Operator Copilot drafts narrative for SAR + summarizes case evidence + flags pattern matches. Analyst approves.
Roadmap
What this blueprint is and isn’t

Honest about the build.

The work this blueprint represents

AML workflow is the unglamorous part of banking that costs more than anyone admits. Banks routinely run AML teams of 20+ analysts because the workflow isn’t engineered, the alert sources don’t talk, and the SAR filing is a manual doc-export. Klyqo doesn’t make the alerts smaller; it makes them workable. A 20-analyst team on Klyqo runs at the pace of a 35-analyst team on the status quo, with better audit trail and lower SAR-miss rate.

What you bring: the existing AML vendors, the analyst team, the compliance officer, the jurisdiction-specific SAR format requirements. What Klyqo brings: the runtime, the multi-vendor alert ingestion, the analyst console, the decision-token model, the SAR filing templates per regulator, the case archive. What we figure out together: the alert routing policy by analyst skill, the supervisor-review thresholds, the SAR filing cadence per regulator.

If you’re a bank, neobank, or PSP whose compliance team is drowning in vendor alerts and your audit trail is a spreadsheet: talk to us. AML triage is the highest-ROI Klyqo deployment per analyst-month saved.

Compliance team drowning in alerts?

If you’re running an AML programme on top of two or three vendors and your analysts are toggling between consoles, the first conversation is short. Tell us about the alert volume, the vendors, the jurisdictions, the SAR filing cadence. We’ll tell you what a Klyqo-shaped AML triage workflow looks like and where it shortens your analyst-month.

Email diogo@klyqo.com Response within two business days