One platform for the whole compliance lifecycle
From first touch to ongoing monitoring, Certivo gives regulated teams a single, auditable system of record for every identity, business and decision — replacing a patchwork of vendor dashboards, spreadsheets and email threads.
Intake
A person or business enters onboarding through your app or the console.
Verify
Document, biometric, liveness and registry checks run as one step.
Screen
Parties are matched against sanctions, PEP and adverse-media data.
Decide
Clear results pass; anything ambiguous opens a case for human review.
Monitor
Approved subjects are re-screened on a schedule; changes reopen cases.
Identity verification
Capture and verify government IDs, run 1:1 face match against a selfie, and confirm liveness — orchestrated as a single step. Certivo normalises results across vendors, so your onboarding logic never depends on one provider's response shape, and a change of vendor never means a change of code.
Who it's for
Onboarding and risk teams that need a defensible identity check without wiring each vendor's SDK by hand.
- ✓Document authenticity & structured data extraction
- ✓1:1 face match against a captured selfie
- ✓Passive & active liveness detection
- ✓Reusable verification records with full provider payloads
How it works
- 1.A verification is created via the console or API with a subject and a type.
- 2.Certivo calls the configured provider adapter and normalises the result.
- 3.A clear result passes; a review or decline verdict automatically opens a case.
AML, sanctions & PEP screening
Screen individuals and entities against global sanctions, watchlists, PEP and adverse-media data. Tune match sensitivity to your risk appetite, auto-clear low-risk hits, and route everything else to a reviewer — with a record of exactly what was screened and why a decision was reached.
Who it's for
Financial-crime and MLRO functions that must show a regulator both the coverage and the reasoning behind every clear.
- ✓Sanctions & watchlist coverage
- ✓PEP & adverse-media signals
- ✓Configurable match thresholds & auto-clear rules
- ✓Ongoing monitoring with re-screening
How it works
- 1.A party is submitted for a sanctions, PEP or AML screen.
- 2.Hits are scored against your thresholds; low-risk matches can auto-clear.
- 3.Remaining hits open a case; approved subjects are re-screened on a schedule.
Know Your Business (KYB)
Verify a company's registration, resolve its ownership graph, and screen its beneficial owners — all tied into the same case and audit trail as your individual checks. KYB is not a separate silo in Certivo; a business and its people share one record.
Who it's for
Teams onboarding merchants, corporates or partners who must look through an entity to the humans who control it.
- ✓Registry verification
- ✓Beneficial-ownership (UBO) resolution
- ✓Owner & director screening
- ✓Company-level risk scoring
How it works
- 1.A business is verified against registry data and its ownership graph resolved.
- 2.Each beneficial owner is screened using the same screening engine.
- 3.Findings roll up into one company record with its own case history.
Workflow builder
Compose verification steps, branch on results, and set thresholds visually — no code required. Version every workflow, test it against simulated providers in sandbox, and promote it to production with an audit record of exactly what changed, when and by whom.
Who it's for
Compliance operations owners who need onboarding policy to be a configurable asset, not a ticket to engineering.
- ✓Visual step composition & conditional branching
- ✓Per-step thresholds and routing rules
- ✓Versioning & rollback
- ✓Sandbox → production promotion with an audit trail
How it works
- 1.Steps and branches are assembled in the builder and saved as a version.
- 2.The workflow is exercised in sandbox against deterministic simulations.
- 3.Promotion to production is recorded, and any later change is versioned.
Case management
Every decision that needs a human becomes a case with full context, notes and a resolution trail — so reviewers act quickly and regulators see a complete, unbroken record. Cases carry the evidence that created them, not just a verdict.
Who it's for
Reviewers and QA leads who need to clear work fast without losing the paper trail that proves the decision.
- ✓Unified review queue, most urgent first
- ✓Full context from every upstream step
- ✓Assignment, four-eyes review & SLAs
- ✓Immutable audit trail on every resolution
How it works
- 1.A review or decline verdict auto-creates a case with its evidence attached.
- 2.It is assigned, worked with notes, and (optionally) held for four-eyes review.
- 3.Resolution — approved, declined or escalated — is written immutably to the log.
Reporting & audit
An append-only audit log records who did what and when across the whole platform. Export audit-ready evidence for regulators, external auditors and internal assurance — and answer "why was this customer approved?" months later with the exact inputs, thresholds and reviewer on record.
Who it's for
Audit, assurance and reporting functions that must reconstruct any historical decision on demand.
- ✓Append-only audit logging on every mutating action
- ✓Decision history with inputs and thresholds
- ✓Audit-ready exports
- ✓Configurable retention
How it works
- 1.Every action across verification, screening, cases and workflows is logged.
- 2.Records are queryable and exportable for a given period or subject.
- 3.Retention is configurable to match your own regulatory obligations.
How evidence becomes a defensible decision
Raw signals from any vendor are normalised into one consistent shape, evaluated against your rules, and recorded immutably. The result is an evidence trail you can put in front of a regulator — not a screenshot from someone's inbox.
Capture
Documents, biometrics and business data collected at the point of onboarding.
Normalise
Every provider response is mapped to one consistent Certivo result shape.
Evaluate
Workflow rules and thresholds turn raw signals into a decision.
Record
Inputs, outputs and the decision are written immutably to the audit log.
The case lifecycle
Certivo is built around the reality that machines cannot clear everything. Ambiguous results become cases with full context, worked to a resolution that is recorded for good.
Auto-created on a review/decline verdict
Assigned · four-eyes · notes
Platform architecture
A layered architecture keeps the compliance engine independent of any single vendor. Your team and systems connect through the console and a versioned REST API; the orchestration engine holds workflows, decisions, cases and the audit log; external providers sit behind reviewed, swappable adapters; and everything runs on managed, EU/UK-region infrastructure.
Interfaces
How your team & systems connect
Orchestration
The compliance engine
Provider adapters
Swappable, normalised vendors
Platform & data
Managed, EU/UK-region infrastructure
Every request is tenant-scoped; every mutating action is written to the audit log.
Built on
Next.js & React on Vercel, with a managed Neon Postgres database.
Isolation
Every record is scoped to its organisation; there are no cross-tenant reads.
Auditability
Every mutating action is written to an append-only audit log.
Certivo is a technology vendor for compliance and certification management — not a licensed financial institution — and does not hold or imply any regulatory licence or authorisation.