Every investigation in one workspace

Every investigation in one workspace

Every investigation in one workspace

Case Queue

Live

218

Open

37

In review

5

SLA due

Priority order

Alert · Bluepeak Retail

L2 review

Screening · Vantage

Escalated

KYB · Orchard Labs

Open

Review · Northgate

New

Zoven turns every alert, screening hit and merchant review into a case your team can work, track and close, with a full record behind each decision.

Bluepeak Retail

Pending L2

6h

Left in SLA

Identity match

92

Velocity spike

71

Adverse media

40

Device history

58

Sanctions match

12

AI agent · draft ready

Trusted by risk and compliance teams

One case, the whole story in front of you

Open a case and everything is already there: the entity, the signals that raised it, linked and past cases, notes, documents and the decision waiting to be made.

Bluepeak Retail

TM alert

84

High priority

Velocity

72

New payee

88

Amount vs history

54

Geography

41

Device risk

63


Everything about the case, in one view

Entity profile, the triggering alert or hit, linked cases and full history, side by side with the workspace.

Notes, documents and requests in place

Log investigation notes, attach evidence and raise information requests without leaving the case.

A decision, not just a status

Close each case with a clear disposition: dismiss, escalate, request info, or offboard.

The reasoning stays on the record

Every action on the case is timestamped and attributed, so any decision is easy to explain later.

From alert to closed case, in three steps

A signal opens a case on its own. Your team investigates, decides, and the record writes itself as they go.

A case opens

An alert, a screening hit or a review becomes a case, with the entity, the trigger and the context already attached.

01

from alerts, hits, or reviews

Your team investigates

Work the case in one place: read the signals, check linked cases, add notes and evidence, and raise information requests.

02

one workspace, full context

Decide and sign off

Pick a disposition and close it. A maker decides at L1, a checker signs off at L2, and the trail records who did what.

03

sign off with maker-checker

Everything the investigation needs, on one screen

When a case needs a closer look, the workspace already holds the context. No jumping between tools to piece the story together.

Entity profile

The customer or merchant behind the case, with identity and account details.

Triggering signal

The alert, rule or screening hit that opened the case, in full.

Linked cases

Related open cases tied to the same entity, grouped together.

Case history

Every past case on this entity and how each one was resolved.

Investigation notes

Timestamped notes from every reviewer who touched the case.

Documents

Evidence and files attached directly to the case.

Information requests

Raise an RFI and track the response without leaving the case.

Activity log

A running record of every action, assignment and status change.

What sits in the workspace depends on the case type and the modules you run.

Built for the way real investigations run

The details that turn a pile of alerts into cases your team can actually clear, defend and learn from.

Grouped by entity

Grouped by entity

Several alerts on the same customer collapse into one case, so no one works the same entity twice.

Priority that means something

Priority that means something

Risk, ageing and SLA feed a priority order, so the case that matters most sits at the top.

Nothing closes silently

Nothing closes silently

A maker-checker step means a second reviewer signs off before any case is final.

Every touch on the record

Every touch on the record

Notes, assignments, requests and decisions are all logged against the case, in order.

Activity · Bluepeak Retail

Case #4821

Priya R. approved at L2

just now

Mehul K. added a note

3h ago

Case assigned to Mehul K.

6h ago

Sent for L2 sign-off

8h ago

Case opened from a TM alert

Mar 27


Every action on the case, on the record

From the moment a case opens to the moment it closes, every note, assignment, request and decision is logged in order, with who did it and when.

Who did what

Every action carries the reviewer’s name and a timestamp.

In strict order

The trail is chronological and cannot be edited after the fact.

Notes and decisions

Investigation notes, dispositions and sign-offs sit on one record.

Export for audit

Hand a regulator the full history of a case in one export.

One queue for everything your team has to clear

Alerts, screening hits and reviews from across Zoven land in one place, each as a case with an owner, a deadline and a record. Nothing sits in an inbox.

Every case in one queue

Cases from transaction monitoring, screening, merchant risk and onboarding all land in the same worklist, sorted by priority and SLA.

One queue

for every case type you run

Nothing slips the queue

Owners, due dates and SLA timers keep each case moving, and saved views mean an analyst always knows what to pick up next.

SLA

timers on every open case

A record you can defend

Every note, document and decision is stamped to the case, so an audit or a regulator can see exactly how the call was made.

Full trail

behind every decision

A platform built for a case desk

The parts that make Case Management fit how your team already works, not the other way round.

AI case agent

Every case starts with a draft, not a blank page

Every case starts with a draft, not a blank page

The agent reads the signals behind the case, drafts the narrative, and cites each source, so a reviewer starts from a written summary.

Drafts the case narrative automatically

Cites the exact signals behind each point

Leaves the disposition and final call to your team

Case draft

Bluepeak Retail

HIGH

Sanctioned-region exposure

Registered address and payment routing trace to a jurisdiction on the sanctions blacklist. Recommend EDD before onboarding.

Business identity · Compliance

MEDIUM

Young domain, thin contact

Domain registered 41 days ago with no verifiable phone. Common in shell setups, though not conclusive on its own.

Domain & security

Draft ready for review

6 signals cited

Priority & routing

Set how cases are prioritised and where they go, so the right owner gets the right case with the right deadline.

Priority bands

Low

72h SLA

Medium

48h SLA

High

24h SLA

Critical

4h SLA

Routing per band

Low

Standard queue, any analyst

Medium

Assigned to a named reviewer

High

Senior reviewer, maker-checker

Critical

Escalated to compliance lead

Case workflow

Every case runs the same path. A maker investigates at L1, a checker signs off at L2, and the decision lands on the audit trail.

Case opened

Bluepeak Retail · TM alert

L1 review · maker

Investigate & propose

Approve for review

Reject

L2 review · checker

Awaiting sign-off

Approve

Reject

Return to L1

Case closed

Decision recorded to the audit trail

Fits the way your team already works

Cases arrive from the modules you run and reach your team through the channels they already watch. Decisions and records flow back out.

Cases from every module

Transaction monitoring, screening, merchant risk and onboarding all open cases here.

Saved views

Each analyst shapes the queue with their own columns, filters and sort order.

Assignment & queues

Route cases to the right owner or team and track them to close.

Maker-checker

Built-in L1 and L2 review so no case closes on a single pair of eyes.

SLA & prioritisation

Due dates and timers keep ageing cases from slipping.

Notifications

Owners hear about new and breaching cases where they already work.

Audit trail

Every action stamped and attributed, ready to export.

API & webhooks

Open, update and close cases programmatically from your own systems.

Available case sources and channels vary by market and plan.

What a case lost in an inbox really costs

An alert nobody owns is a decision nobody made. The case that stalls is the fine, the chargeback, or the audit finding you explain later.

An alert with no owner is a decision no one made

When alerts pile up in a shared inbox, the urgent ones look the same as the noise. The case that mattered is the one that sat untouched.

A case is only as good as its record

If the notes live in chat and the evidence lives in email, you cannot show how a decision was reached. That gap is what an audit finds.

One reviewer is a single point of failure

Without a second pair of eyes, a rushed call closes a case for good. Consistency needs a checker, not just a maker.

Good to know

Where do cases come from?

Cases open from across Zoven: transaction monitoring alerts, screening hits, merchant risk assessments and onboarding reviews. Your team can also open one by hand.

Can each analyst set up their own queue?

How does maker-checker work?

What gets recorded on a case?

Does the AI agent help with cases?

See Case Management on your own cases

See Case Management on your own cases

Bring a handful of real alerts to a walkthrough and watch them open, route, investigate and close, with the trail behind each one.