01 / Identity access
Authentication
SSO, MFA, least privilege, privileged access controls and restricted case permissions.
Doc · 04 / Technology
— Technology · controlled AISheet 04 / 11
Five layers.
No black-box answers.
Springwood uses controlled AI, OSINT, deterministic checks, mathematical risk models and workflow governance to produce analysis that is faster, more consistent and better documented — without losing the audit trail.
- Approach
- Controlled AI
Deterministic checks - Layers
- 5 operating layers
1 control substrate - Rule
- No statement
without a source
§ 01 / Output contract
01.Section one
The contract
AI with guardrails
The contract
AI with guardrails
No material statement without a source.
§ 01 / Body
In Springwood, AI is not allowed to become an unsupported decision-maker. AI can help read documents, compare fields, connect entities, summarise case facts and draft reports — but every material statement points back to the input used to produce it.
The contract is enforced by construction. The product cannot return a value that does not carry a reference. The analyst can always click through from the conclusion to the evidence.
- Document extractionLinks to the uploaded file, registry result or chip data.
- Risk scoresPoint to the variables, rule version and model version used.
- Case summariesReference transactions, checks, documents and analyst notes.
- Report narrativesGenerated from the investigation record, not free-form.
- High-risk & low-confidence outputsRouted to human review by default.
§ 02 / Technology layers
02.Section two
Five layers
Built upward
Five layers
Built upward
Five layers create
the Springwood control model.
§ 02 / Register
| Ref. | Layer | Scope | Marker |
|---|---|---|---|
| L.01 | Verified input | Biometric documents, liveness, address checks, business records, registry data, transaction feeds, OSINT sources and watchlist results. Every input arrives with provenance. | Source-bound |
| L.02 | Operating profile | Structured customer, business, ownership, role, expected activity, jurisdiction, counterparty and source-of-funds records — the live baseline used by every downstream check. | Structured |
| L.03 | Risk-state intelligence | Third-generation financial-intelligence models use mathematical techniques to identify sudden changes, pressure points and instability patterns in customer, ownership and transaction risk. | Adaptive |
| L.04 | AI assistance | Extraction, entity resolution, OSINT analysis, anomaly explanation, case summarisation and report drafting with visible provenance — speed without losing the trail. | Source-linked |
| L.05 | Control & assurance | Versioned rules, approvals, retention, QA sampling, audit packs, redaction, legal holds and management information. | Reconstructable |
§ 03 / AI in product
03.Section three
Layer 04 in operation
Case sheet
Layer 04 in operation
Case sheet
AI aggressively,
never blindly.
Fig. 03.ALayer 04 in operation · transaction case sheet
Caption ▸AI sits underneath the panels, not in front of them. The radar score is decomposable into the rule, the model version, the variables and the source values. Every alert in the table points to the rule clause that triggered it. No statement on this sheet is unsupported.
Layer 04Source-linked AI
§ 04 / Security
04.Section four
Security model
Regulated data
Security model
Regulated data
Designed for sensitive
compliance data.
§ 04 / Grid
Springwood is structured for regulated environments where privacy, resilience, access control and traceability are operational requirements — not aspirational ones.
02 / Data protection
Encryption
Encryption in transit and at rest, field-level protection, key management and data minimisation.
03 / Segregation
Approvals
Maker-checker controls, MLRO approval, QA review and restricted SAR / STR access.
04 / Auditability
Records
Timestamped records, source references, versioned decisions, exportable audit packs and retention.
CTA / Technical briefing
Use AI aggressively.
Never blindly.
Springwood is built for banks that want AI speed without losing source control, governance or accountability. Schedule a technical briefing with the team.