Frequently asked questions

Data is processed in EU (Frankfurt) and UK (London) data centers, or inside your institution's dedicated environment, in line with GDPR, UK GDPR, and KVKK requirements. Our Privacy Policy lists our sub-processors and the safeguards that apply to international transfers.

Yes. Every action is cryptographically recorded into an immutable append-only audit trail, including rule executions, AI analyst recommendations, human approvals of AI calls, and SAR exports.

Yes. Compliance teams can add, modify, tune weights, or disable any of the 78 pre-built rules through our no-code rule builder, and backtest changes in shadow mode against historical transactions before pushing to production.

Noctula screens automatically against OFAC, UN, EU, UK HMT, and domestic sanctions and PEP watchlists, with native OpenSanctions integration and connectors for institutional watchlist providers. Your compliance team can add custom allowlists and blocklists, and screening uses phonetic and transliteration matching.