The Engine
Three layers, executed in sequence on every event. Sub-200ms p99.
LAYER 01
Identity & Device Fingerprint
We assemble a deterministic signature from IP, ASN, user-agent, screen geometry, timezone, language, and verified ID data (Persona/Plaid). Mismatches trigger downstream scoring.
LAYER 02
Behavioral Risk Scoring
An ensemble model evaluates velocity, geo-mismatch, transaction anomaly, ACH return rate, and historical patterns. Output is a 0-100 score and a decision: allow / review / deny.
LAYER 03
Cryptographic Audit
Every score is SHA-256 hashed with the previous score's hash, forming a tamper-evident chain. Optional ECDSA signatures with your key for legal-grade proof.