Overview
Risk Rules is a premium governance layer that runs inside Legl, grounded in your firm's own risk policy. Once you are live, the right checks fire automatically without manual triage, agentic remediation chases and resolves issues with your client in real time, and you get a defensible, auditable record of how every client was assessed and why.
This guide sets out what to expect as you adopt Risk Rules, what we will need from you, and how your rules are agreed and kept up to date. We run it as a white-glove experience, so you reach your outcomes with as little effort as possible.
Your journey, step by step
Adopting Risk Rules follows one guided journey, from a single kickoff call through to a value review at 30 days.
Kickoff. We agree your go-live date and walk your team through everything to prepare, so the sign-off call is a quick review rather than a build from scratch.
Configure and sign off. We match a master list of rules to your policy and give you a checklist to approve or comment on, not a blank page. We then configure the approved set and review it together on a 45-minute call, where your sign-off lead approves the rules.
Training. We train the teams who will use Risk Rules on the new review experience, so they are ready to handle results and remediation the moment you go live.
Live. Your rules are active and running on real clients, with agentic remediation working in the background.
Check-ins. We check in at 7 days and 14 days to see how you are getting on and to catch anything early.
30-day value review. A 45-minute call where we share your value report: time saved, faster completion, and less drop-off.
Complete. Risk Rules is fully rolled out and settled into how you work, with your ongoing support in place.
If you are short on time, there is a strong default rule set we can apply now that we have seen work well for other firms. You can go live on the default and refine your rules over the following weeks, so Risk Rules never needs to delay your go-live.
What we'll need from you
Your risk policy or configuration preferences, or agreement to launch on our recommended default set and refine later.
Written confirmation that your firm is adding Risk Rules.
Your named sign-off lead: your MLRO, COLP, Director of Risk and Compliance, or Managing Partner, whichever fits your firm.
A decision on how many times we should try to resolve an issue with your client before a report passes through with a "consider" result.
Availability for two short calls: a 45-minute sign-off, and a 45-minute review at 30 days.
How your rules are agreed and recorded
We start from a checklist, not a blank page: we match a master list of rules to your policy, and you approve or comment on each one.
Everything you approve becomes your rule set, applied consistently across your firm.
If you need something we do not yet offer, we log it and feed it to our product team.
After go-live, every change to your rules is recorded in an audit log, so you always have a defensible record of how your rules were agreed and how they have evolved.
The new review experience
At sign-off, your review flow changes for the better:
Issues are surfaced first, so your reviewers go straight to what needs attention.
Clear results are cleared automatically, so only items needing attention appear.
Reviewers add comments as they go, building a full audit trail.
When an application is marked as reviewed it is signed off, the CDD report is filed, and re-screening is scheduled for 12 months. You can download the report as a PDF at any time.
How we prove value
We report value, not raw activity. At your 30-day review we come back with:
Time saved internally, measured by the manual touch points removed.
Speed of client completion, with clients onboarding materially faster.
Conversion, with fewer clients dropping out of onboarding.
Important information
You decide how many times Legl attempts to remediate an issue with your client before a report passes through with a "consider" result, confirmed in writing before you go live.
Rules are configured firm-wide, giving you one consistent governance layer rather than a separate setup for each workflow.
Existing "consider" routing is unchanged for now: for example, a failed biometric check still shows as "consider".
If you want a rule we do not have yet, tell us and we will feed it into our product roadmap.
You do not need a documented policy to start: our recommended default set means nothing blocks your go-live.
If you have any questions about Risk Rules, contact our Support team.