Integrations
Connect to Your Existing Stack.
A REST API, file and API connectors, watchlists you control, your choice of AI provider, and goAML and MASAK XML exports.
REST API
Score transactions, screen names and run cases and SARs through a versioned REST/JSON API.
REST / JSON
Transaction Scoring
Send one transaction or a batch. Each gets a risk score, the rules that fired and a recommended decision: approve, monitor, hold, block or escalate.
Screening
Name Screening
Check names against sanctions, PEP and adverse media lists, including near matches.
Workflow
Cases, Alerts & SAR Workflow
Look up alerts and cases, add analyst notes, draft SARs and move them through MLRO approval, rejection and filing.
Access control
API Key & IP Allowlist
Every endpoint needs an API key and only accepts requests from IP ranges you approve.
Data Ingestion
Bring in transaction and customer data by file upload, from your own API, or from core banking and ledger systems.
File import
CSV / Excel / JSON Upload
Upload CSV, TSV, Excel and JSON files for historical or end-of-day data.
Connector
REST / JSON Connector
Pulls data from your own API, with sign-in, paging and field mapping handled for you.
Connector
Core Banking & Ledger Connectors
Connects to core banking and payment ledgers. Reads ISO 20022, SWIFT MT/MX, SEPA, FAST, and database or graph exports.
Watchlists & Intelligence Sources
Screening against global sanctions, PEP and adverse media sources, with lists your compliance team controls.
Sanctions and PEP
Global Sanctions & PEP Feeds
Screens against OFAC, UN, EU, UK HMT and national lists, plus your own allow and block lists.
Connector
OpenSanctions & Commercial Feed Connectors
Ready-made connections to OpenSanctions and commercial watchlist providers.
Enrichment
Adverse Media & Threat Signals
Adds IP reputation, proxy and VPN detection, and counterparty risk to every check.
AI Decisioning Engine
AI analysts summarise alerts and draft SARs, and a person approves every call. Your customer data never trains public AI models.
Core
Deterministic Rule Engine
Your rules run in real time, each with a written reason for why a payment was flagged.
Enterprise
Dedicated Sovereign AI Analyst
A language model that runs inside your own private cloud, used to group alerts and draft narratives.
Optional
Enterprise Model Connectors (Optional)
Secure connections to AI models your institution has already approved, with personal data masked first.
Reporting Outputs
Export cases and SAR drafts for filing and internal audit. Every draft is reviewed by a person first.
XML
goAML XML
SAR export in the UNODC goAML format.
XML
MASAK XML
XML export for MASAK suspicious transaction reports.
Documents
PDF / DOCX / HTML / TXT
Investigation reports and SAR narratives written for your jurisdiction.
Deployment Options
Dedicated Sovereign VPC / Private Cloud
We run and manage Noctula in the cloud region your regulator requires: EU, UK or in your own country.
Private Tunnel Integration
Authenticated private tunnels connect Noctula directly to your core banking and payment systems.
Let's Map Your Data Schema Together
Work out with our technical team how your transaction and customer data maps to Noctula's fields.