Admins, Reviewers and Task Reviewers assess, finalize and assign investigations. Members can see them. See Roles.
Find investigations
The Investigations section in the sidebar gives you ready-made views:
Inside a review, the Screen step shows the same list, limited to that Connection.
Use Screening to work through investigations during active reviews, and Monitoring to assess investigations on Connections without an active review.
Assess the hit
Under Assess hit, the Screened entity and the Matched profile sit side by side: names and aliases, date of birth, nationality, countries, associates. Decide whether they are the same person or business, then click True positive or False positive. Compare the available details to decide whether the profile matches the screened person or business. Differences in names or dates of birth can help rule out a match. If the profile contains little detail, check the findings for additional identifying information, such as a position, city, or company mentioned in an article or list entry. Add a note and attachments to document your reasoning. They appear in the investigation’s log and in the Due Diligence Files.Assess the findings
A finding is information associated with the matched profile, such as a sanctions listing, a politically exposed person (PEP) role, or an adverse media article. After confirming the profile is a true positive, assess each finding as Relevant or Not relevant under Assess findings, according to your organization’s policies. Mark all as not relevant marks every finding in a group as Not relevant. For finding types that require an impact rating, marking a finding Relevant also prompts you to select its impact, such as low, medium, or high. Use your organization’s policies to decide relevance. Depending on the finding type, consider questions such as:- Sanctions: are the listings accurate, still in effect, and within scope for your business?
- PEP: what position does the person hold, are they still in office, and are they the exposed person or a relative or associate?
- Adverse media: is the source credible, is the topic financial crime or something that concerns you, and how far has it gone: investigation, prosecution or conviction?
- Regulatory enforcement: who issued it, what was the outcome, and how recent is it?
Finalize
Click Finalize to apply your assessment. What happens next depends on the outcome:- A false positive, or a true positive with no relevant finding, does not affect the Connection’s risk score or capabilities.
- A true positive with a relevant finding updates the Connection’s risk score according to your policies. A review opens automatically, unless the Connection already has an open onboarding or review. The button tells you beforehand: “Finalizing this investigation will request a review.”
During a review, Accept stays disabled while the Connection has an open investigation. Decline is always possible.
Clear false positives in bulk
A common name can produce many hits that are clearly not the same person or business. In the list, select the open investigations and click False positive. One note and one set of attachments apply to all of them, and they are finalized together.Assign
Use the assignee picker at the top of an investigation to hand it to someone who can assess it. Unassigned investigations stay in the Inbox.Logs
The Logs view of an investigation lists every action with who took it and when: opened, assigned, each profile match and finding decision, finalized, reopened. The same trail is part of the Due Diligence Files.FAQ
A business I already accepted got a hit. Did its access change?
A business I already accepted got a hit. Did its access change?
No. The hit opens an investigation without automatically changing the Connection’s capabilities. Finalizing it as a true positive with a relevant finding opens a review, unless the Connection already has an open onboarding or review. You can also click Create review before finalizing. Decisions about the Connection’s capabilities are made during the review.
The investigation says “Entity removed” or “Rejected capability”. What now?
The investigation says “Entity removed” or “Rejected capability”. What now?
The person or business is no longer part of that Connection, or the Connection was rejected. Monitoring has stopped for it. You can still finalize the investigation to close the record.