Rulesets & Templates
A ruleset is a DAG of compliance checks. Each simulation routes a payload through the graph until it hits a terminal pass or fail node.
What is a ruleset?
A ruleset is a directed acyclic graph (DAG) where each node is a compliance check. The graph has a single system (root) node and one or more terminal nodes. When you run a simulation, the payload flows through the graph until the engine reaches a terminal node — the final verdict.
Rulesets have two lifecycle states:
- ›Draft — editable, not accessible via the API. Test your changes here before going active.
- ›Active — promoted to Active, callable via API keys. Promoting a draft creates a versioned snapshot.
Node types
checkEvaluates a single condition on the payload (field comparisons, regex, range checks). Returns passed or failed.
conditionBranches the DAG. Routes to different sub-graphs based on a payload field value (e.g. user_region === EU).
systemThe root entry node. Every ruleset has exactly one system node as the DAG start point.
terminal_passTerminal node. Reaching this node sets the simulation result to passed.
terminal_failTerminal node. Reaching this node sets the simulation result to failed.
Built-in templates
All built-in templates are available on every plan. They are read-only — duplicate one to create a custom variant.
US KYC / FinCEN AML
BSA, 31 CFR § 1020
- Identity verification
- SSN validation
- OFAC sanctions screen
- PEP check
- Transaction threshold ($10k CTR)
EU GDPR / AMLD6
GDPR Art. 5, AMLD6
- Consent verification
- Data minimisation check
- Right to erasure eligibility
- CDD / EDD routing
- Cross-border transfer guard
UK AML / FCA SYSC
MLR 2017, FCA SYSC 6.3
- CDD identity match
- EDD trigger (£15k threshold)
- Sanctions list screen
- Suspicious activity flag
- MLRO escalation routing
Ghana MoMo KYC
AML Act 749, Bank of Ghana
- Ghana Card / Voter ID verify
- Mobile money transaction limit (GHS 1,000)
- Daily velocity check
- Suspicious transaction reporting
- Agent banking flag
Singapore PSD2 / MAS PSN02
MAS PSN02, Payment Services Act
- NRIC / FIN verification
- SingPass ID match
- Cross-border transfer flag (SGD 1,500)
- Transaction monitoring (rolling 30-day)
- MAS sanctions screen
Australia AUSTRAC AML
AUSTRAC Guidelines
- Source of funds validation
- Transaction thresholds
- Reporting obligations
- PEP screening
Canada PIPEDA Privacy
PIPEDA
- Consent verification
- Data minimization
- Purpose limitation check
- Cross-border data transfer check
India RBI KYC
RBI Master Direction
- Aadhaar verification
- PAN card presence
- Transaction monitoring threshold
- V-CIP routing
Global Sanctions Screening
OFAC, UN, EU
- OFAC list match
- UN sanctions list match
- EU consolidated list match
- High-risk jurisdiction check
US Open Banking (CFPB)
Dodd-Frank 1033, CFPB
- Data sharing consent
- Permissioned access scope
- Consent expiry check
- Account aggregation rules
EU PSD2 SCA
PSD2, RTS
- SCA exemption logic
- Dynamic linking verification
- Fraud rate (TRA) thresholds
- 3DS2 flow routing
Custom rulesets (Pro +)
Pro and Business workspaces can create custom rulesets from scratch or by duplicating an existing template.
Version history
Every time you promote a draft to active, a versioned snapshot is saved. Click the ruleset name in the control bar (top-right of the canvas) to see the version history dropdown. Each version shows its status badge and creation timestamp.
Click Restore as Draft on any archived version to clone it back for editing. Your active ruleset is never overwritten.