Overview
Risk rules are part of Governance in Legl. They apply your firm's own risk policy to every client automatically, so the right checks run without manual triage and issues are resolved with the client in real time. The result is a consistent, defensible record of how each client was assessed and why.
There are two types. Universal rules are free for every firm. Custom rules are built from your firm's risk policy and are a paid add-on.
✨ Interested in Custom Risk Rules?
Speak to our team to find out what Custom Risk Rules could do for you.
Where to find Risk rules
Select Governance in the left-hand menu, then Risk rules.
How Risk rules work
A rule is made up of three parts:
A data point: a fact about the submission, such as the client's country, whether a passport is signed, or the age of a Proof of Address document.
A condition: the value or threshold that makes the rule fire, for example an unsigned passport or a document older than 90 days.
An action: what Legl does when the rule fires. It can mark the result for consider, mark it as clear, or ask the client to put something right.
Rules are configured firm-wide rather than per workflow, so the same policy applies consistently across your onboarding. Custom rules are built from your risk policy and signed off by your compliance stakeholder before they go live, so the platform reflects how your firm assesses clients.
What triggers a rule
Rules are evaluated against the information on a client's request as it is completed, including identity verification, Proof of Address, Watchlist screening, and Source of Funds. When the data matches a rule's condition, the rule's action is applied automatically.
What you will see
Clear or consider outcomes: checks that pass are cleared automatically, and only items that need attention are flagged for consider.
Automatic remediation: when something is wrong, for example the wrong document, an unsigned passport, or a blurry image, Legl asks the client to resubmit and resolves it in real time, so your team does not have to chase.
Issues surfaced first: in the review experience, the items that need attention are shown first, with a full audit trail of every action and decision.
ℹ️ Further guidance
Important information
Rules are configured firm-wide, not per workflow.
Each time a client resubmits a document, an additional check runs. You set how many times a client can submit a document on a single step in Configure > Document retry attempts. The first submission counts, and the default is 3.
Existing consider routing is unchanged. Results that already require review, such as a failed biometric, continue to behave as they do today.
The set of available rules grows over time. If there is a rule your firm needs that is not yet available, let us know.
If you need more help
If you have a question about Risk rules, contact our Support team.