Frequently Asked Questions

Aurachain is the execution layer where regulated institutions turn obligations, risk signals, and fraud alerts into governed, audited action. In practice: an alert fires, an obligation lands, or a name surface in a screening, and Aurachain runs everything after it, the investigation, the decision, the remediation, and the record, as one governed process. AI agents do the analysis and drafting, a person holds every high-stakes decision, and each step is logged so the audit trail exists the moment a regulator asks.

Detection tools show what's happening and GRC platforms store what's required. Aurachain runs the work in between: investigation, decision, remediation, and the audit trail, as one governed operation. Detection and GRC are complementary; Aurachain runs the governed work between the signal and the record.

AI agents are embedded inside processes to analyze, draft, and coordinate, but they never operate unchecked. Every action is logged and traceable, AI is model-agnostic, and every high-stakes decision stays with an accountable human. That is what makes the platform deployable in regulated production.

Yes. Aurachain connects to core systems, legacy databases, existing APIs, and third-party services, and ingests signals from detection engines, via native connectors and open APIs, with governance applied at every integration point. No rip-and-replace.

Institutions build their own governed applications on Aurachain, including enhanced due diligence, AML monitoring, alert dispositioning, adverse media screening, risk assessment, internal and procurement fraud, and network fraud defense, and run them on one governed layer connected to their existing systems.

Compliance is a domain, not a fixed catalogue, so you build the processes your obligations demand. Common examples: enhanced due diligence, AML monitoring, alert dispositioning, adverse media screening, and KYC onboarding. Each runs as a governed process that is compliant by default and audit-ready from the first step.

Controls, role-based access, and the audit trail are native to every application, not added afterward. Every decision preserves the data, the policy, the AI agent's work, the human judgment, and the approvals. When a regulator asks how a decision was reached, the record already exists.

Risk is a domain, not a fixed set of tools, so you build for the exposures you actually carry. Common examples: risk assessment, limit and threshold monitoring, exposure escalation, and credit decisioning. Because these run inside live operations, a breach or an emerging signal opens the response as it happens: the exposure is assessed, escalated to the right owner, and mitigated inside one governed flow, with the decision and its basis recorded. Risk is visible as work happens rather than reconstructed after the fact.

Risk signals live inside the process. Anomalies, thresholds, and bottlenecks surface the moment they appear, so decisions are made on current exposure with full operational context, not on a quarterly export.

Fraud is a domain, not a fixed list of features, so you build whatever fits the pattern. Common examples: internal fraud management, procurement fraud, and network fraud defense. Whichever you run, a pattern or alert opens a case, and your team runs the whole response on one governed platform: assigning the investigation, gathering the evidence, tracking progress against SLAs, carrying out the remediation, and producing the report, with AI agents doing the legwork and people holding the decisions. The case closes with a complete record of what was found, who decided what, and what was done, ready for any auditor or regulator.

Fraud.Watch is an application built on Aurachain's execution layer: a collaborative fraud-defense network that gives community banks and credit unions shared, real-time fraud intelligence, with full auditability and no loss of institutional control.

Audit trails, permission controls, and support for GDPR, SOX, HIPAA, SOC 2, ISO 27001:2022, and CCPA are native to the platform. Every application inherits this compliance infrastructure automatically. Certification status by entity and deployment is confirmed during evaluation.

Aurachain deploys cloud, on-premises, or hybrid, to meet data-residency requirements. Institutions go live in weeks and adapt from there; a process can be changed in minutes, with full version control.

Aurachain serves regulated institutions that cannot afford to get compliance, risk, or fraud wrong: banks, credit unions, and financial institutions, as well as highly regulated organizations in supply chain. Swiss-based, Aurachain operates across Europe, North America, and the Middle East.