Coming soon — Altores

Audit-ready compliance.
From day one.

KYC dossier management, multi-source sanctions screening, automated risk scoring, and a cryptographically protected audit trail — purpose-built for regulated professionals.

Get early access Deployment options
Hash-chainaudit trail
Multi-sourcesanctions screening
On-premisedeployable

Compliance Modules

Every compliance obligation, in one platform

Conformia covers the full AML/KYC compliance lifecycle — from initial dossier creation and document OCR through ongoing screening, risk scoring, regulatory reporting, and immutable audit trail maintenance.

KYC Dossier Management

Full lifecycle case management for individuals and legal entities. Dossiers track identity documents, UBO structures, source-of-funds declarations, and sector-specific checklists. OCR auto-fills fields from submitted documents. Completeness scoring shows exactly what's missing.

Natural persons and legal entities
UBO identification and ownership tree
OCR auto-extraction from passports and IDs
Configurable sector-specific checklists

Use Cases

Built for regulated professionals

Financial intermediaries

AML compliance without the overhead

Manage all KYC dossiers for clients and UBOs from intake to ongoing monitoring. Automated screening, STRIX questionnaire auto-fill, and STR workflow reduce the compliance team's administrative burden by over 60%.

KYC lifecycle automation
STRIX auto-fill from existing data
STR workflow with audit trail
Real estate & yachting

Transaction-level compliance documentation

Each high-value transaction triggers a KYC check automatically. Dossiers capture source-of-funds, UBO structures, and property/vessel details with sector-specific checklists. All decisions are auditable on demand.

Transaction-triggered KYC
Sector-specific checklists
Source-of-funds documentation
Corporate service providers

Portfolio-wide risk visibility

Manage dossiers across an entire client portfolio from one workspace. Risk dashboard shows portfolio-level exposure. Continuous re-screening catches sanction updates immediately without manual checks.

Portfolio-level risk dashboard
Continuous re-screening
Multi-client workspace

Frequently Asked Questions

Conformia is designed for any organisation with AML/KYC obligations: financial intermediaries, real estate agencies, family offices, law firms, notaries, corporate service providers, yachting brokers, and other regulated professionals. The compliance workflows and checklists are configurable per regulated sector.
Conformia runs parallel screening against multiple sources — including OFAC, UN, EU, and national sanctions lists, as well as PEP (politically exposed person) databases. Fuzzy matching with configurable thresholds handles name variations. Alerts are generated automatically and follow a structured workflow: Open → Under Review → True Match or False Positive → Closed.
The STRIX module manages the annual questionnaire mandated by Monaco's AMSF regulator for all regulated sectors. Conformia auto-fills 60–80% of STRIX responses from existing platform data — dossiers, screening results, risk scores, and decision records. All five STRIX sections are covered, with sector-specific modules per the official templates.
The audit log uses SHA-256 hash chaining — each record cryptographically links to the previous one. The underlying database role has no UPDATE or DELETE permissions on the audit table, making retrospective modification impossible. Integrity is verified automatically on a weekly schedule, and full inspection packs can be exported for regulator submission.
Yes. Conformia includes a parametric on-premise installer with scripted deployment in a single command. It supports Let's Encrypt, client-supplied certificates, or no-TLS modes; LDAP/Active Directory federation; S3-compatible or SFTP backup destinations; and offline Docker image delivery for air-gapped environments. Rollback to prior versions is supported.
The Conformia AI layer uses compliance-specific skills (screening analysis, EDD drafting, risk explanation, document analysis, STRIX assistance). All AI calls pass through a PII redaction proxy before reaching any language model. Sensitive STR (suspicious transaction report) files are never accessible to the AI without explicit MLRO authorisation. Three data tiers are supported: full on-premise, EU-sovereign partners, and cloud-global — with on-premise as the secure default.

Get early access to Conformia

Conformia is in active development for regulated professionals in Monaco and neighbouring jurisdictions. Contact us to join the early access programme and describe your compliance workflow requirements.

Get early access Deployment options