KYC, KYB and onboarding, Automated.
Client portal, document collection, provider checks and risk scoring in one no-code workflow, with your team approving the cases that need a human.
Configure the path. Guide each customer. Review the exceptions.
Choose the information, evidence, provider checks, rules and decision points for each operating path. Straightforward cases can follow configured routes while your authorised teams retain exceptions and higher-risk decisions.
Set up your KYC, KYB or onboarding workflow
Build a repeatable AML/CTF, customer onboarding or internal approval workflow around the information your team actually needs. Choose the questions, documents, identity and business checks, decision rules and escalation paths for each customer type.
- Onboarding template: Customer Onboarding & CDD
- Customer type: Individual · Company · Trust
- Checks to run: PEP · Sanctions · Adverse media
- When to escalate: EDD → Compliance approval
Send your customer a secure link
Invite each customer to a branded, secure portal to complete only the relevant steps. They can provide company and contact details, add beneficial owners, answer declarations and upload the supporting documents your workflow requests.
- Company details: Done
- Beneficial owners: Current step
- Source of funds: Requested
- Documents: Uploaded
Review document information with AI assistance
Optional AI can extract and compare configured information from uploaded documents, prepare a structured result and flag discrepancies for human review. Your implementation defines supported document types, validation, thresholds and the reviewer path.
- Passport scan: Verified · Name match
- Company extract: Verified · ABN confirmed
- Utility bill: Verified · Address match
- Trust deed: Translated · Extracted
- AI mode: Shadow · learning
- Discrepancy flag: Name mismatch · Review
Review checks and missing information
Bring screening results, registry extracts, submitted documents and incomplete answers into one review queue. Your team can resolve exceptions, request further evidence and route higher-risk customers to the appropriate compliance or due-diligence reviewer.
- PEP check: Review required
- Sanctions check: No match
- Adverse media check: Review required
- Enhanced due diligence: Assigned
- Company registry extract: Received
Calculate risk and route the outcome
Apply your risk methodology consistently across every onboarding case using customer, ownership, jurisdiction and check-result data. Low-risk cases can proceed automatically, while incomplete, unusual or higher-risk cases are sent to the right team for a documented decision.
- Customer profile: Matched
- Ownership: 2 UBOs verified
- Jurisdiction: Standard risk
- Risk score: 32 / Low
- Outcome: Auto-approved
Streamline approvals with AI assistance
AI prepares an approval checklist by summarising the case evidence, extracted document data, screening results and risk assessment. Reviewers get a structured recommendation they can accept, modify or reject — with every decision and rationale preserved in the audit trail.
- Documents verified: 4 of 4 passed
- Screening clear: No PEP or sanctions hits
- Risk score: Low · Auto-qualifies
- AI mode: Shadow · observing
- AI recommendation: Approve with standard monitoring
- Reviewer decision: Approved · 2 min
Record the decision and keep the evidence
Keep an auditable record of the decision alongside the workflow used, customer answers, documents, check results and reviewer actions. Schedule the next review or request more information without separating the case history from the evidence behind it.
- Decision: Approved
- Workflow used: Retained
- Documents and checks: Retained
- Next review: Scheduled
Review every client and screening match in one workspace
Each client has one record holding their cases, documents, verification results and screening matches. Reviewers work through possible matches in a single queue, add notes and reasons, and every decision is kept in the audit trail.
- Screening matches: 3 to review
- Verification: Complete
- Cases: 2 active
- Audit trail: Recorded
Run periodic reviews and chase what is missing
Schedule reviews by risk level and ask customers only for what has changed or expired. Email and SMS reminders follow up automatically, and anything past its deadline is escalated to your team.
- High risk: Every 12 months
- Standard risk: Every 36 months
- Reminders: Email · SMS
- Past deadline: Escalated
Generate a workflow with AI
Describe the jurisdiction and process you need, and AI drafts an editable workflow as a starting point. Use it for AML/CTF onboarding, client intake, document collection, declarations, matter opening, service delivery or internal approvals — then adapt every step to your firm.
- Your prompt: Periodic review for active UK clients
- Jurisdiction: United Kingdom
- AI mode: Auto · drafting
- Generated workflow: 8 steps · ready to edit
- Other processes: Client intake · Documents · Approvals
Connect Swootle to the systems you already use
Start workflows from your CRM, portal or policy system through the API with the data you already hold, and send results back automatically when a case completes. Use the branded Swootle portal or keep your own front end.
- Start a case: API
- Customer data: Prefilled
- Case complete: Webhook
- Results: Returned to your systems
White-label the portal with your brand
Deliver the customer portal under your own name, logo, colours, typography and domain, with light and dark mode branding where needed. Your customers experience a secure process that looks like part of your firm while your team runs the same configurable workflow behind the scenes.
- Portal name: Asterion Corporate Services
- Logo: Light and dark mode
- Brand colours: Navy · Cyan
- Typeface: Plus Jakarta Sans
- Customer domain: onboard.asterion.example
Ready for your security review.
Swootle is built for regulated teams. We give your security, compliance and procurement reviewers what they need to sign off.
Cyber Essentials certified
Check our certificate in the IASME register. We are working towards ISO 27001, targeting certification in January 2027.
Your hosting region and retention
Hosting region and data retention are agreed for each deployment, with dedicated deployments available.
A full audit trail
Every case keeps its requests, evidence, reviewer actions and decisions together, ready for audit.
Help with your due diligence
We support DPIAs and vendor security reviews, and share our subprocessor list on request.
Common questions
What compliance and operations teams ask us most: integrations, providers, data, AI and getting started.
Can Swootle work with our existing portal, CRM or policy administration system?
Yes. Workflows can be started through the API with data you already hold, and results are returned to your systems when a case completes. You can use the branded Swootle portal or keep your own front end and run Swootle in the background, and automation steps can call your other systems during a workflow.
Can we keep our current verification and screening providers?
Swootle coordinates checks rather than locking you into one provider. Identity verification is built in, and other verification and screening services can be connected through their APIs, including where you already hold the contract. Where coverage differs by country, a workflow can use a different provider for each jurisdiction, confirmed during implementation.
Can our own team build and change workflows?
Yes, in a visual builder without code. AI can turn your existing forms and procedure documents into a first draft, which your team then refines: questions, sections, conditions, evidence requests, checks, reviewers and approvals. Templates are versioned so changes can be reviewed and rolled back, and we help set up your first workflows and train your team.
Can you use the client data we already hold so customers are not asked again?
Yes. Existing client data can prefill a workflow or ask the customer to confirm what you hold, and sections can be switched on or off so customers only see what is missing or out of date. Documents that are still valid can be reused, and client records can be loaded in bulk for remediation or periodic review.
Can Swootle match our existing risk methodology?
Your approved method is configured rather than replaced: your factors, weightings and risk bands. Risk can be scored from data you already hold before the customer is contacted and recalculated as answers arrive, with each result showing which factors contributed. Teams typically test the configuration against their current model before go-live.
How is AI used, and who makes the final decision?
AI reads uploaded documents, extracts and compares key details, flags discrepancies and prepares a summary and recommendation for the reviewer. Your people make the decision. AI can run alongside your existing reviews so you can compare results before relying on it, it can decline to give a view when evidence is unclear, and workflows still run with AI switched off. Customer data is not used to train AI models.
Can workflows handle companies, trusts and beneficial owners?
Yes. A workflow can collect entity information alongside the people connected to it, including directors, controllers and beneficial owners. When an ownership structure requires separate individual checks, each person can complete their own linked workflow for identity details, supporting documents and screening.
Can Swootle automate periodic reviews and re-checks?
Yes. Reviews can be scheduled by risk level, and a change such as a new address can trigger a targeted update instead of a full re-onboarding. Customers receive email and SMS reminders, and cases that pass a deadline without a response are escalated to your team.
How do customers access the portal?
Customers start from a secure invitation sent by email or SMS, and two-factor authentication can be required. The portal carries your name, logo, colours and domain, and asks only the questions, documents and declarations that apply to that customer.
Where is our data held, and how is it secured?
Swootle is Cyber Essentials certified and is working towards ISO 27001. Hosting region and data retention are agreed for each deployment, with dedicated deployments available, and we support DPIAs and vendor security reviews. Every case keeps a full history of requests, evidence and decisions for audit.
How does pricing work, and how do we get started?
Pricing combines a platform subscription with usage-based checks, scoped to your volume, jurisdictions, integrations and support needs, plus implementation. Most teams start with a proof of concept on synthetic data, then a pilot on one workflow before wider rollout.
See Swootle in action.
Book a demo to map your onboarding, evidence and review workflow with our team.