Questions, answered

Click Get started, then use Proto to configure Anti-Money Laundering for your business. Begin with a business unit, a defined assessment period and a control whose evidence the team can inspect. Name the Independent Reviewer and rehearse a returned decision before the first operating cycle.

It records the subject, business unit, owner, scope statement and period with planned testing and a revision. Linked samples hold the control result and evidence, while review decisions identify which revision was considered.

The Control Tester keeps the result unresolved until the evidence supports a conclusion. Every performed sample needs an inspectable evidence reference before review, including a failed or inconclusive result. Missing evidence cannot establish Pass, and the exception count cannot exceed the sample tested. Independent Reviewer checks the evidence before accepting the assessment result.

Independent Reviewer decides on the submitted revision and records Approve, Reject or Return with a reason. AML Program Manager prepares the package and handles corrections. A changed scope needs a decision that applies to the current information.

AML Program Manager links the alert to its assessment and prepares the provider context. Independent Reviewer approves or rejects the submitted disposition and records the decision time. A risk score helps organize attention; it does not establish wrongdoing.

Remediation Owner submits completed work with evidence. Independent Reviewer records a retest and accepts a passing outcome before the action is Verified and the finding is Closed. Failed or inconclusive retests keep the finding open for further work.

Inspect the original operation key, expected revision and receipt result before retrying. Pending, Failed and Needs review outcomes need investigation. Reconcile the recorded business decision with the action result so the team does not repeat an already accepted effect.

Data Custodian records access purpose, retention and legal-hold context. Access grants identify the person, purpose, expiry and approver. A disclosure has its own recipient, scope and authority reference. Agree and test those access boundaries during setup.

No. The date prompts a review of continued handling. Data Custodian checks the hold and the customer’s approved policy before any retention action is considered. The date alone does not authorize deletion.

Arrange the surveillance-provider connection if alerts will arrive from another service, and confirm access to any external evidence repository. Map user identities to team members and agree ownership of subject authority references. Reconcile each connection in the pilot before widening its scope.