Second-line AML, done in hours instead of days.
finaml.ai is an AI case agent for UAE-regulated VASPs and fintechs. It triages alerts, builds the case file, drafts the narrative and prepares goAML STRs, with every step logged for VARA, ADGM and CBUAE audits. Your MLRO approves. Nothing is filed without a human.
The problem
Screening tools raise the alert. Everything after that is still done by hand.
Gathering KYC, transactions and screening hits from five systems, then writing the narrative and preparing the filing, is manual work on every case.
Analysts spend the bulk of their time closing false positives, while the cases that matter wait in the same queue against the same SLA.
UAE supervisors increasingly test the quality, sourcing and timeliness of suspicious transaction reports, not just whether they were filed.
What finaml.ai does
From alert to filed report, one case file.
Triage
Groups related alerts and pulls KYC, transactions and screening hits into one case. Suggests a priority and SLA.
Agent · analyst can overrideInvestigate
On-chain and fiat flow analysis across wallets and IBANs. Matches activity against typologies mapped to UAE regulator guidance.
Analyst + agentDraft
Writes the case narrative and a disposition recommendation. Every sentence carries a citation; every recommendation carries a confidence level.
Agent · analyst edits, edits stored as a diffFile & respond
Builds the goAML STR with schema validation and prepares regulator RFI response packs. Filing requires MLRO approval.
MLRO · four-eyes on every filingProduct
Built around the case, not the alert.
Follows one case through all 25 screens, from sign-in and data sources to the regulator's request and the audit record.
Built for UAE supervision
Aligned to the regulators you report to.
Typologies, filing formats and record-keeping follow the rulebooks your MLRO is examined against.
Typologies mapped to UAE guidance
Each typology cites the VARA, FSRA, DFSA or CBUAE rule or guidance note it derives from. Custom typologies can be added for the entity's own risk assessment.
goAML XML schema validation
STRs are validated against the current UAE FIU goAML schema before an MLRO sees the submit button. Gaps are flagged per field.
Arabic / English documents
Trade licences, IDs and bank letters are read in either language and cited in the original.
Audit trail by design
Every recommendation can be replayed and explained to a supervisor.
Each AI action writes a log entry with the exact prompt version, the sources it read, the raw model output, the analyst's edits as a diff, and who approved it. Auditors and regulators get read-only access to the same record.
sha256:9b1f…e42a- Action
- AI draft Case narrative generated
- Prompt version
narrative/v2.3.1 · model finaml-v2.3- Sources used
- [1] Ledger · 4 inbound txns[2] Chainalysis KYT alert 88213[3] Sumsub KYC file 11 Mar 2025
- Model output
- “…61% of which traces within 2 hops to a mixer designated by OFAC [2]…” (412 words, stored verbatim)
- Human edit
- - Pattern is consistent with layering.+ Pattern matches VARA typology T-07 (layering via mixer exposure).
- Approver
- S. Haddad (MLRO) · second approver after R. Ahmed (Analyst)
- Timestamp
2026-09-09T15:12:44+04:00
Integrations
Works with the tools already generating your alerts.
CSV and API import are available from the first day of a pilot. Vendor connectors are enabled per entity, and every connected source becomes a citable reference in the narrative.
Security
Customer data stays in the UAE and out of the model.
Separation of duties is enforced by the system, not just documented. What the agent may do unattended, and what always needs a person, is a written policy that is versioned like code.
Pricing
Priced by case volume, not by alert.
Pilot pricing on request · billed monthly · excl. VAT
Starter
For a first compliance hire and an MLRO.
- Up to 300 cases / month
- 2 seats
- Triage, investigate, draft
- Full audit log
Growth
For licensed VASPs filing STRs monthly.
- Up to 2,000 cases / month
- 10 seats
- goAML STR filing
- Regulator RFI module
Enterprise
For groups, banks and multi-licence operators.
- Unlimited cases and seats
- Private deployment
- Custom typologies
- Dedicated compliance engineer
Pilots for VARA-, ADGM- and CBUAE-licensed entities are open now.
One case file, one reporting entity, four weeks. We set up the workspace, connect your alert sources and run alongside your team before anything is filed.