Web Compliance Infrastructure Build

This project covers the end-to-end compliance layer for our web-based RegTech platform. The work spans user and business verification through to real-time transaction oversight, and every module must interoperate cleanly so auditors can follow a single, transparent trail. Scope The build must include: • KYC – onboarding flow, ID document capture, liveness checks, sanctions & PEP screening • KYB – business registry look-ups, UBO discovery, document management • AML Screening with ongoing monitoring – nightly batch re-screening plus instant alerts on match escalation • Transaction monitoring – rule engine able to flag velocity, amount, pattern and geo anomalies in real time • Risk logic – configurable risk scoring that blends KYC/KYB outputs with transactional behaviour • Threshold setting – admin UI for business users to tweak rules, weights and alert tiers without code deploys Key expectations – Modular, API-first micro-service architecture so future mobile clients can reuse the same endpoints – Dashboard showing alert queues, case management workflow and downloadable audit reports (CSV, PDF) – Role-based access control, full audit logging, GDPR-compliant data retention toggles – Integration hooks for common data providers (e.g. ComplyAdvantage, Dow Jones, SumSub) but no vendor lock-in; a clean adaptor layer is required – Unit and integration tests covering happy paths and edge cases; CI pipeline must block merge on coverage regression – Documentation: sequence diagrams, API reference (OpenAPI), deployment guide for Docker/Kubernetes Acceptance criteria A sandbox demo will be provisioned. Passing criteria are: 1. All mandatory components deploy cleanly via CI to the sandbox. 2. Synthetic users and transactions trigger the expected alerts at the configured thresholds. 3. Risk scores are reproducible across identical data sets. 4. Audit report exports match the sample template exactly. Code ownership transfers on final payment, GPL-free, with commit history intact.