Licences, profiles, per-list permissions and units decide what each person can see and do. Every sensitive change needs a second person, and every action lands in an audit log with the value before and after.
Illustrative — invented names and figures.
Profiles & permissions
Activev12Each layer can only take away. What is left is exactly what that person may use — and nothing else appears on the screen.
Who is signing in?
What this person sees
North branch
Screening
Lists
Work
Administration
A change to users, profiles, units, workflows, rules, channels, lists or notification rules waits for a second person. The person who made it cannot approve it.
Under four eyes
New user · J. Okafor
Waiting for approvalNo Approve button here. Someone else must approve.
New user · J. Okafor
Units split the work by branch or department. Each user works only the cases, channels and batches of their own units.
Open cases
116
Latest case
C-0411· Corporate banking
The main unit sees every unit, including units added later.
One or more units per user. Supervisors can tick “All units”.
A unit with users can be deactivated, never deleted. Your licence sets how many units you can create.
Each application keeps its own audit log, behind its own permission: who did what, when, and what changed. And every screening decision can be replayed exactly.
Decision D-118204
Held · score 0.91Multi-factor sign-in, encrypted secrets, data kept apart per company and API keys you control — on the infrastructure you choose.
A code from an authenticator app on top of the password, set up once with a QR code. New users must change their password first.
Authenticator
WICS · a.karim
482 913
New code every 30 s
Sign in
Authenticator code
New users change their password first
Channel passwords and keys are encrypted. Once saved, they are never shown again — you can only replace them.
Channel · Core banking SFTP
Each channel has its own key, with scopes, an IP allow-list and optional HMAC signatures.
Key · Core banking REST
wics_••••3f9aRow-level security in the database separates every company. A query only ever returns its own rows.
One database · one table
Signed in to Company A3 rows hidden by row-level security
Kubernetes on-prem, cloud SaaS or hybrid. On-prem, nothing leaves the bank.
Your data centre
Cloud
Nothing leaves the bank.
The whole application in English, French and Arabic, right-to-left included. Each user keeps their own language, time zone and look.
Change the language and the screen follows. Arabic reads right to left. Times show in each user’s own time zone.
Case C-0412
Level 1 reviewLanguage: English · Time zone: Europe/London
Each user picks colour style, corners, density, text size, shadows, motion, hover and font. The look is saved to their account.
Design studio
Colour style
Corners
Density
Text size
Shadows
Font