Schedule a demo

Pick a time with our team. The scheduler is provided by Calendly and sets its own cookies.

Prefer email? support@coriunder.com

We use your details to arrange your demo. Read our Privacy Policy.

Onboarding Platform

Your risk model, running itself.

Build the application form each type of account should see, score every applicant against your own weighted risk assessment, and let the rules engine act on the result. Onboarding stops being a queue of spreadsheets and becomes a process you configure.

KYC, KYB and AML providers you can connect

One platform, four moving parts

Application forms, risk assessment, rules and automation are one system. Change the model in the morning and the next applicant is measured against it.

4

Weighted risk pillars

34

Assessment questions

18

Automated rule actions

0

Lines of code to change

What you get

Configure the process, not the code

Every part of onboarding that usually needs a developer or a compliance spreadsheet is a screen in the admin console. Forms, questions, weights, rules and the actions they take are all yours to change.

1Choose what each form showsCorporate · step 2 of 5
Registered countryMandatory
Product typeMandatory
Adverse media tierAdmin only
2A fixed list becomes a dropdown
Product type *
Select an option▾
Digital services
Physical goods
Subscriptions
Marketplace
3Same values everywhereNo release
Merchant portalApplicationAdmin
Answer stored as
digital_services
rules can read it

Dynamic application forms

Decide which fields each application form shows, which are mandatory, and which are compliance fields only your team ever sees. Give any text or number field a fixed list of answers and it becomes a dropdown on the merchant portal, the customer application and the admin form at once - no release required. Because the options are the same values your rules read, the answers stay machine readable instead of turning into free text nobody can score.

See registration forms
1Four weighted pillars34 questions
Customer
30%
Geographic
30%
Product
30%
Delivery
10%
2Every answer carries a score
Country of incorporationNetherlandsLow
Product typeDigital servicesMedium
Bearer sharesYesTrigger
3A trigger overrides the arithmetic
42%→
Risk band
Very high
Set by bearer shares trigger

CRA management

A weighted Customer Risk Assessment built the way your MLRO already works. Questions sit in four pillars - customer, geographic, product and delivery - each with its own weight, and each answer carries its own score. The platform combines them into one percentage and a risk band, and a single answer marked as a high or very high trigger overrides the arithmetic outright. Weights, bands and questions are managed on screen, with a setup summary that validates the model before it goes live.

How scoring works
1Conditions on any fieldEU digital, medium risk
Countryin group
EU reputable
ANDProduct type
Digital services
ANDRisk band
Medium
2Then an ordered list of actions
1Assign fee templateDone
2Set rolling reserve 5%Done
3Request bank statementFailed
4Notify risk teamDone
3Every run loggedExplainable later
Run 48211 · 3 of 4 actions
Failure recorded, rest still ran
Log

Rules engine

Write conditions against any field on the application, combine them with AND and OR, and match countries against your own risk groups rather than a hard-coded list. One rule then runs an ordered list of actions instead of a single outcome, and each action is isolated - if one cannot complete, the rest still run and the failure is recorded rather than silently swallowing the whole rule. Every run is logged with the actions it took, so an approval from six months ago can still be explained.

Explore the rules engine
1Application submittedPortal or API
LU
Lumen Digital B.V.
KYC and KYB checks by merchant type
Checks passed
2The rules decide
Score
58% Medium
Approve
Review
3Ready to process, untouched
Terminal and fee templatesReserve 5%
Merchant emailedLive for processing

Automation that finishes the job

A decision is only useful if something happens next. Rules can move the account status, assign terminal and fee templates, set a rolling reserve, request a missing document, email the merchant, escalate to a reviewer or hand the application back for more information - and the merchant is notified automatically when they do. Standard cases reach a configured, ready-to-process account without anyone opening the file, so your team spends its day on the exceptions instead of the queue.

See configuration templates
1Completeness at a glanceMore info
72%
6Merchant
3Admin
2Docs
1Expiring
2Gaps grouped, one click to the field
Source of fundsFinancialsMissing
UBO 2 passportOwnershipMissing
Incorporation certificateDocumentsExpires 12d
3Ownership down to the UBOs
Lumen Digital B.V. UBO 1 · 60% UBO 2 · 40%

A review screen that shows the gaps

Reviewers open one application view that reads the same rules as the submission check, so what it calls missing is exactly what blocks approval. It shows a completeness score, the gaps grouped by section with a jump straight to the field, which items are waiting on the merchant against which are yours, where the file sits in its lifecycle, and the ownership structure drawn as a map down to the ultimate beneficial owners. Supporting documents carry an expiry date captured at approval, so a passport that lapses next month is visible today.

Inside the review workspace
How it works

From application to processing

1

Apply

The applicant completes the form built for their account type, on your brand and your domain. Fields, wording and required documents follow the form, not the developer.

2

Assess

Answers feed the weighted risk assessment while KYC and KYB providers verify identity and incorporation. The result is a score, a band and any triggers that fired.

3

Decide

Your rules read the score and the application data, then approve, ask for more information, escalate for review or decline. Reviewers only see what the rules could not settle.

4

Provision

On approval the account is configured from your templates - terminals, fees, limits and reserve - and the merchant is notified. Standard cases go live without a manual step.

In the box

Everything the onboarding team asks for

Forms per account type

Separate forms for merchants, customers and partners, each with their own visible and mandatory fields.

Fixed answer lists

Turn a free-text field into a dropdown the rules can read, per form or across all of them.

Weighted scoring

Pillar weights, question weights and per-answer scores, all editable and validated before they go live.

Override triggers

Mark an answer as a high or very high trigger and it sets the band whatever the arithmetic says.

Country risk groups

Your own jurisdiction lists, referenced by rules instead of copied into each one.

Multi-action rules

One rule, an ordered list of actions, each logged and independently recoverable.

Ownership map

Corporate shareholders drawn as a structure down to the ultimate beneficial owners.

Document expiry

Expiry dates captured at approval, with warnings before a file goes out of date.

Readiness panel

Completeness, gap list and lifecycle stage on the same screen as the application.

Merchant notifications

More-information requests and decisions emailed automatically when a rule fires.

API and SDK

Submit and track applications from your own front end through the onboarding service.

Full audit trail

Every rule run, action outcome and status change recorded against the application.

Bring us your risk model.

Send us the assessment you run today, in whatever spreadsheet it lives in, and we will show you the same model running as questions, weights and rules.

Frequently asked questions

  • Can we use our own risk methodology?

    That is the point of it. The pillars, their weights, the questions inside them, the score attached to each answer and the thresholds between risk bands are all configuration. Firms typically arrive with an assessment in a spreadsheet and we map it onto the engine as it stands, rather than asking them to adopt ours.

  • Can different merchant types see different application forms?

    Yes. Each form controls which fields appear, which are mandatory and which are internal compliance fields the applicant never sees. Fields can offer a fixed list of answers so the data stays consistent enough for the rules to score it.

  • What happens when an application is incomplete?

    A rule can move it to a more-information state, which notifies the applicant automatically and reopens the portal for the missing items. Reviewers see the same gap list the submission check uses, so nobody chases a field that was never required.

  • Does a high risk score always mean a decline?

    No. The score and band are inputs to your rules, not a verdict. Many clients auto-approve low risk, apply extra conditions such as a reserve or a lower limit at medium, and route high risk to a named reviewer. Trigger answers such as bearer shares can force the band up regardless of the total.

  • Which KYC and KYB providers are supported?

    Sumsub, GetID, ShuftiPro, Trulioo and others, with company data pulled from registry sources for corporate applicants. Provider choice is itself rule-driven, so a low risk local applicant and a high risk offshore one can be verified by different providers.

  • Can we prove why a decision was made?

    Each run records the rules that matched, the actions they took and whether each one completed, alongside the score and the answers behind it. An approval from last year can be reconstructed without reading the code.

  • Can we white-label the portal?

    Yes. The application portal runs on your brand and your domain, and applications can also be submitted from your own front end through the onboarding API and SDK.

Still have a question?
Watch it in the product

Short walkthroughs from the admin

All tutorials

Creating a merchant

CRA onboarding flow

Customer management and KYC

Stop onboarding by hand.

We will scope your application forms, your risk questions and your approval rules with you.

Compliance documentation is available under NDA. Talk to our team to request access.