underwriting infrastructure for hard KYB cases

Every compliance team has a queue of cases it can neither approve nor refuse.

Evix works those cases to a documented outcome — one your MLRO can sign and a supervisor can verify without asking us.

250+ registries in scopeSeychellesBVIBelizeUAE free zonesand more

synthetic company · demonstration file · every figure computed, none real

Orion Trading LtdSeychelles
caseC-DEMO-SC-ORION
requirements map · 15 elements
  • 8 closed
  • 5 open
  • 2 documented outcome
ownership · the branch that ends in a hollow
Orion Trading Ltdsubject
60%DRCOR
Meridian Nomineesnominee
?
principal
undisclosed
eight days in the queue · approved with conditions · 06.09corporate-onboarding 1.8.0 · rules 5a72191b · no model in this path
the model

One requirements map. Every counterparty measured against it.

Your obligations do not come from one place. They come from FATF and industry practice, from the regulator where you are licensed, from the regulators and sanctions regimes your partners answer to, and from your own internal policies. Today that lives in twenty signed PDFs and in the heads of three people.

Evix reads those policies and assembles one requirements map — versioned, dated, and the same for every counterparty you assess. A counterparty closes it with facts from their own documents and registers, the way a puzzle closes. What is closed, what is still open, and what has been checked and cannot be established are three different things, and the map keeps them apart.

Regulators

functional · regional · partner regulators

Sanctions regimes

UN · FATF · national authorities

Internal policies

risk and compliance · security and privacy · operations and governance

Your company

the obligated party

The requirements map

requirements-map 4.2.0 · dated 29.08 · 15 elements
the single set of requirements every counterparty is measured against
  • Counterparty A

    3 of 15 closedcoverage insufficient · decision unavailable
  • Counterparty B

    8 closed · 5 open · 2 documented outcome5 elements still openthe two dashed cells — checked. no lawful route.
  • Counterparty C

    15 of 15 closedReady to work with you
Onboarding opens when every element of the map is closed.
the assistant

It prepares. You decide.

corporate-onboarding 1.8.0 · rules 5a72191b · no model in this path

The assistant works twice. It reads your own policies — usually ten to twenty signed PDFs — and assembles them into the requirements map. Then it reads the counterparty's pack: 312 pages of apostilled documents in four languages, and it tells you what is in them.

A model is good at reading. It is not good at being cross-examined. So it extracts, proposes and drafts, and every stored fact carries the page, the character span and the quote it came from. Coverage is computed after that, by versioned deterministic rules, with no model in the path. Same map and same confirmed facts return the same answer today and in a year.

the assistant may

  • assemble the requirements map from your signed policies
  • classify and read the counterparty's documents
  • extract facts with their provenance
  • propose ownership edges as hypotheses
  • draft the rationale for review

the rules compute

  • how much of the map is closed
  • which decisions are available
  • which outcomes are documented
  • what the client should be asked for, and what they should not
rules 5a72191b · no model in this path

only a person may

  • record a decision
  • countersign one
  • accept residual risk
  • choose a lighter set of requirements
four eyes · named account · written grounds
the problem

The stuck cases are the expensive ones.

A trust in one jurisdiction, a nominee in another, a register with no obligation to answer. The case cannot be approved as it stands and there are no grounds to refuse it, so it sits. Every week it sits, it costs an analyst's attention and a merchant's patience.

Evix exists for that queue.

fit

Keep your KYC provider.

Evix does not replace the screening stack you already run. Identity checks, PEP and sanctions screening stay where they are, and their results enter the file as sources like any other.

What Evix takes is the queue that stack cannot finish — the multi-jurisdiction structures, the nominees, the registers that cannot lawfully answer. Route those cases here; everything else runs exactly as it runs today.

ownership

Three layers of nominees, drawn as three layers of nominees.

the three edge types
  • evidenced — a register or document, with its date
  • cannot be established — the chain stops visibly
  • derived — computed from the edges, never verified

Beneficial ownership is usually the hardest element of the map to close, and it is where a case dies quietly.

Ownership is reconstructed edge by edge to the natural person. Each edge carries its percentage, the document or register it came from, and the date that source was current. Where the chain stops, it stops visibly — the node is a hollow in the surface, not an empty box somebody forgot to fill. Effective share is computed from the edges and marked as derived, never as verified.

Orion Trading Ltdsubject · SC · C-DEMO-SC-ORION
60% · DRCOR 06.0940% · agent cert.
Meridian Nominees LtdVG · nominee shareholder
Kestrel TrustCY · trustee holding
principal undisclosed85% · deed of trust
owner not established
ubo-registry:SC — no lawful route
individual beneficiarynatural person · CY
traced to a natural person: 34.0% · derivedunattributed: 60.0% — principal behind the nominee undisclosed6.0% — other beneficiaries of the trust, not traced
  • DRCOR · 06.09
  • registered agent certificate
  • nominee, undisclosed principal
  • control without shareholding
  • chain incomplete + blocking reason
  • effective 34.0% · machine-derived
sources

250+ registries in scope. Here is what four of them will and will not answer.

An element of the map is closed by a fact, and a fact comes from somewhere — a register, a document, an issuer that will confirm. Our scope is 250+ registries, through our own connectors and partners. What matters for a case is not the count: it is what the register in front of you answers, what it does not, and what closes the requirement when it answers nothing.

  • Seychelles

    what the register answers

    Incorporation and the agent’s licence. About a person: nothing, to a third party.

    what it does not

    Members, directors and beneficial owners — held by the registered agent, not the authority.

    what closes the requirement instead

    Certificate of incumbency dated within 90 days, plus an agent letter naming the beneficial owner.

    where neither is produced: documented outcome · ubo-registry:SC
  • British Virgin Islands

    what the register answers

    Existence and good standing, for a fee.

    what it does not

    Members, and the BOSS beneficial-ownership filings — held for the authorities.

    what closes the requirement instead

    Certificate of good standing, plus an agent confirmation of members and beneficial owners.

    where the agent does not confirm: documented outcome
  • UAE free zones

    what the register answers

    Licence status, trade name and activity.

    what it does not

    Shareholders and UBO declarations.

    what closes the requirement instead

    Licence extract, plus an attested share register.

  • Cyprus

    what the register answers

    Directors, shareholders and annual filings.

    what it does not

    Beneficial owners, since public access was suspended.

    what closes the requirement instead

    A certified UBO extract obtained by the company.

  • Cyprus
  • UAE free zones
  • Seychelles
  • British Virgin Islands
  • Panama
  • Belize
  • Marshall Islands
  • Curaçao
  • Cayman Islands
All jurisdictions and more →
how it works

Drop the pack. Get the position.

Six steps, run on the demonstration case C-DEMO-SC-ORION. A person appears exactly once, at the end.

  1. 01

    Drop the pack

    one field, any number of files, in any language.

  2. 02

    The structure assembles

    ownership to the ultimate owner, breaks drawn as breaks.

  3. 03

    Sources answer

    registers, sanctions and PEP lists, and the issuer itself where the issuer will confirm. Every answer stored whole, with its date.

  4. 04

    Coverage is computed

    against your requirement set, jurisdiction pack and risk matrix. Each versioned. Each stamped on the result.

  5. 05

    The limit is named

    with its reason and with the substitute the jurisdiction accepts in its place.

  6. 06

    A person decides

    recording a decision, and countersigning it, are human acts.

the fourth state

“Checked, and cannot be established” is a finding.

Every platform publishes met, not met and in progress. Evix adds a fourth: the requirement was checked and cannot be established — recorded with the source that was asked, why that source cannot answer, the substitute the jurisdiction accepts, and the date.

Seychelles keeps beneficial ownership with the registered agent. No third party can lawfully query it. A blank field says you didn't look. A documented outcome says you did.

Orion Trading LtdSeychelles
caseC-DEMO-SC-ORION
coverage · 15 elements
  • 8 closed
  • 5 open
  • 2 documented outcome
documented outcomeubo-registry:SC

Beneficial ownership is held by the registered agent. A third party has no lawful route to query it.

Substitute accepted by the jurisdiction: registered agent certificate of incumbency, dated within 90 days. Asked 03.09. Answer stored whole.

corporate-onboarding 1.8.0 · rules 5a72191b · no model in this path
Every number here is computed by the coverage rules, on the case that ships with this build, on the day you are reading it.Open the full decision file →
proof

Verify the file without asking us.

The audit log is append-only and hash-chained. On signature, the root hash is signed with your instance key, so a supervisor can confirm the file is the one signed that day without contacting us. The day’s root is signed with our own key and published: keep a copy of one day, and every day after it can be checked against what you kept. Only the hash is published. The facts never leave your tenant. In this demonstration deployment no signing key is configured: the file ships as an unsealed draft, and the chain below is verified by recomputation alone.

  1. entry 001a41f…09c2verifies
  2. entry 0023c60…e2b9verifies
  3. entry 003 · altered98d4…40aahash no longer matches
  4. entry 004b7c3…5510stops verifying
change one entry and every entry after it stops verifyingwhere no signing key is configured, the product says so rather than implying a seal.
unsealed draft · no signing key in this deployment
constraints

Policy the database enforces.

  • Provenance is a constraint. A fact without a page, a span and a quote is not stored. The database refuses it, not the application.
  • The log is append-only. Editing any entry breaks every entry after it.
  • Four eyes is a constraint, not a checkbox. The account that prepared a recommendation cannot approve it.
  • Every decision stores what produced it. The policy, the jurisdiction packs, the prompts and the model.
  • A blocked action names its right. It says which right governs it rather than going quiet.
  • Tenants are isolated from one another. Row-level isolation is a database policy, not a query convention.
for agents

Compare coverage. Keep the files closed.

Over MCP, two counterparties can establish that each meets a shared requirement set without either seeing the other's case file. The tools that return findings and assessments are not filtered out of the counterparty's surface; they are absent from it. The boundary is the tool set, not a prompt asking nicely.

Tenant A

own surface · 19 tools · 6 shown
  • get_case
  • create_case
  • upload_document
  • get_coverage
  • get_findings
  • get_assessment
get_shared_coveragethe only bridge

Tenant B

surface exposed to the counterparty · 5 tools · 4 shown
  • open_shared_case
  • get_shared_request
  • list_shared_cases
  • get_shared_coverage
  • get_findings
  • get_assessment
the two dashed tokens are not present in this surface
What a person and a counterparty's program may do
actiona persona counterparty's program
Read a case and what it is measured byallowedtool not present
Open a caseallowedtool not present
Add documents and factsallowedtool not present
Read the coverage a counterparty exposesallowedallowed
Read a counterparty's findings and assessmentstool not present
Record a decisionallowedtool not present
Countersign a decisionallowedtool not present
Choose a lighter set of requirementsallowednot allowed
“not allowed” is a right withheld. “tool not present” is a tool that does not exist in that surface.Read the MCP tool reference →
limits

What this never does.

  • It never records a decision. Approval, conditions, refusal — each enters the record by a named human hand, and decision.record is offered to no program.
  • It never stores a fact it cannot point to by page, span and quote.
  • It never lets the account that prepared a recommendation approve it.
  • It never puts your data on chain. What goes there is a hash and nothing else.
  • It never runs a model inside the coverage computation.
  • It never returns your findings to a counterparty. The tools that could are not in their surface.

The MLRO

the record you will be asked for, written while the decision is made rather than reconstructed afterwards.

The head of compliance

the cases that have been open for eight days, closed with a reason either way.

The engineering lead

roles enforced in the database, a documented API, and a tool surface that cannot leak what it does not expose.

outcomes

Where this has already run.

Evix has run live cases with pilot clients, against their policies and their stalled queues. The first published metric will be a pilot's own figure — measured on their queue, named, dated and signed off by them. The slot for it is drawn and waiting.

first pilot case study — in preparation

the rule that keeps an invented fact out of a decision file keeps an invented figure off this page.

Bring us the case that has been sitting the longest.

Pick the pack your team keeps reopening. We will run it live against your policy, show every source, and show you exactly what can be established and what cannot. You keep the file either way.

Book a demoOnboarding is by hand — which is why we do the first case with you.