Security and compliance
KYC cases with identity and sanctions checks, roles down to the permission, two-factor sign-in and single sign-on, and consent that every message keeps to.
Scroll to open a case
01 / 05·KYC cases
Open a KYC case on a person or a company and its policy sets the checklist, drawn from a catalogue of two hundred document types, with ready-made policies for Mauritius, South Africa and Australia. Upload, verify or waive each item, open cases for related parties, and reuse documents you have already verified.
02 / 05·Identity and AML checks
Connect your Sumsub account and run the checks from the case: the ID document and a selfie, sanctions, PEP and adverse media screening, and checks on companies. Your policy rules set the risk level, the people allowed to approve do so, every step stays on the case’s own trail, and an approval lapses on its expiry date.
03 / 05·Roles and permissions
Start from five built-in roles or build your own from the full list of permissions, and choose what a parent organisation shares with its child organisations. An agency works for a client through a service grant: the client approves exactly which permissions, once a data processing agreement is confirmed, until it expires or is revoked.
04 / 05·Sign-in and directory
Members sign in with a code from an authenticator app as well as a password, and can see and end every session from their security page. Connect your identity provider for single sign-on over SAML, keep members in step with SCIM directory sync, and find each sign-on and directory change in an audit log you can filter and export.
05 / 05·Consent and unsubscribe
Every email, SMS and messenger send is checked against the contact’s consent and your suppression list before it goes, campaigns included. Emails carry one-click unsubscribe and a link to a preference centre, and your site’s tags wait for the visitor’s choice in the cookie consent platform you already use.
Q, built in
Q works as the person asking. It sees what their role allows, and it asks before it changes, sends or publishes anything.
Show me this quarter’s pipeline
Q answers from the deals your role lets you see, and no others.
Mark the Hillcrest deal as won
Q sets out the change and waits. Nothing is saved until you confirm.
Publish the spring market post
Q asks you to confirm before anything goes live.
Approve the Ellis KYC case
Q leaves that to you. Decisions on a case stay with the people whose role allows them.
Draft a campaign for the spring open homes
Q drafts it for you to check, and when it goes, anyone who has opted out is left out.
Text Sam that the keys are ready
Q sends it once you approve, unless Sam has opted out of texts.
Connect them in one click. They work with the permissions of the person who connected them, and an agency’s AI can act for a client only through an active service grant, with only the permissions it gives.
The full set
Twelve modules on one platform, so every check, role and consent sits on the records your team already works from.
KYC cases
KYC cases on people and companies, with related parties, notes, assignees and every status from draft to approved.
Policies and risk
Policies that set the checklist and the risk level, with ready-made ones for Mauritius, South Africa and Australia.
Document catalogue
Two hundred document types, from passports to proof of address, source of funds and beneficial ownership.
Identity and AML checks
ID, selfie, sanctions, PEP, adverse media and company checks, through your own Sumsub account.
Roles and permissions
Five built-in roles, and custom roles built from the full list of permissions.
Group data access
Choose, for each type of data, what a parent organisation and its child organisations share.
Service grants
Service grants that let an agency work for a client, with chosen permissions, a data processing agreement and an expiry.
Audit log
Sign-on, directory and booking changes in a log you can filter and export, and a trail on every KYC case.
Two-factor sign-in
Two-factor sign-in with an authenticator app, with every session in view and one click to end it.
Single sign-on
Single sign-on over SAML 2.0 with your identity provider, with new members set up on first sign-in.
Directory sync
SCIM 2.0 directory sync for users and groups, with a log of every change.
Consent and unsubscribe
Consent for each address and channel, a suppression list, one-click unsubscribe and a preference centre.
One operating system
Security and compliance works on the same records as everything else Route Royal runs, so the checks, the roles and the consent go wherever the work goes.
Know your client
Identity and screening checks run through your own Sumsub account, only an Admin or Owner can approve, and every step stays on the case’s trail. See it on your own clients in a demo, or start a free trial.
Viewing as
Switch role to see who can approve.
Case trail
