Skip to main content

Compliance System

OLIVE monitors transactions to detect fraud and ensure regulatory compliance.

System User Roles

RoleDescription
system_adminFull access to everything
sales_userSubscriber management, card linking
complianceMonitoring, blocking, rules
supportView only
auditRead-only access to all data

Role Permissions

system_admin

Full access to all permissions

sales_user

  • create_subscriber, view_subscriber
  • link_card
  • view_balance, view_transactions
  • view_reports

compliance

  • view_subscriber, block_subscriber
  • block_card
  • view_balance, view_transactions
  • manage_rules
  • view_reports, export_data

support

  • view_subscriber
  • view_balance, view_transactions
  • view_reports

audit

  • view_user, view_subscriber, view_agent
  • view_balance, view_transactions
  • view_reports, export_data

Alert Status

StatusDescription
openNew alert, needs attention
investigatingBeing looked into
resolvedIssue addressed
false_positiveNot actually suspicious

Trigger Actions

ActionDescription
alertNotification sent, transaction proceeds
reviewTransaction queued for manual review
blockTransaction rejected

Default Monitoring Rules

RuleTriggerActionNotify
High Frequency> 10 transactionsalertcompliance
Large Amount> 500,000 SLEreviewcompliance
Unusual Location5+ from new locationalertcompliance
Daily Limit Breach> 20 transactionsblockadmin

Risk Scoring

ConditionPoints
> 10 transactions+30
> 500,000 SLE+40
New location+20
ScoreRisk LevelRequires Review
0-29LowNo
30-49MediumYes
50+HighYes

PEP Access

For PEP subscriber accounts:
  1. Staff must have pep_access_authorized = true
  2. 6-digit OTP sent to staff
  3. OTP expires after 5 minutes
  4. OTP verified before access granted

Audit Logs

FieldDescription
event_typeWhat happened
actor_typeWho (user, system, api)
actor_idActor identifier
resource_typeWhat was affected
resource_idResource identifier
actionAction taken
statusResult status
before_stateState before (JSONB)
after_stateState after (JSONB)