Roadmap

Roadmap & delivery status

The PROOViD AML screening engine, back-office, and GDPR data-privacy are feature-complete and live in production. This page tracks what's shipped, what's left, and the MVP milestone status. See the architecture & system design for how the components fit together.

Shipped & live Remaining (buildable) Owner / ops Out of scope

Delivered live in prod

Screening engine

TP / PM / FP / Unknown classification + Pass / Review / Fail
Per-tenant risk-scoring engine (0–100 + band)
Fuzzy + phonetic + nickname + transliteration matching
Tunable matching: 3 presets (Recall-first/Balanced/Precision-first) + saved named profiles
PEP tiering derived from office jurisdiction (PEP1 Domestic / PEP2 Foreign / PEP3 Intl-org) vs per-tenant home country + per-request PEP-level filter
PEP4 family / close-associate (RCA): relatives of current heads of state / government ingested from Wikidata & screened as Family-or-associate
Published matching benchmark (95.1% recall vs an independent 1,736-name set)
Per-call & per-tenant watchlist selection

Watchlists & data

UN / OFAC / EU / UK sanctions + Wikidata PEP
Per-tenant bring-your-own commercial providers
Adverse media (GDELT + BYO) + neural NER relevance
Auto re-ingestion (self-host cron sidecar)

Screening API

Screen · re-screen · bulk · async batch (CSV/XLSX)
Full-text search over screening history
Idempotency keys · RFC 7807 errors

Monitoring & cases

Ongoing monitoring + turnover-threshold engine
Scheduled re-screen (daily-delta + monthly-full)
Case management + bulk actions + attachments
Regulator pack (JSON + PDF + Parquet) + decision explainability · audit log + hash-chain

GDPR / data-privacy

Data-subject rights: export · erase · restrict · object · rectify
Consent capture + versioned copy + withdrawal
Data-retention + automated purge (anonymize-in-place)

Platform & DX

Own IdP (OpenIddict) + Keycloak dual-authority · multi-tenancy · RBAC
Quota + rate limit · white-label branding + design-token theming · i18n (EN/ES/PT/FR/DE)
Dev docs + diagrams · TypeScript SDK · MCP server · marketing site
Turnkey self-host (Docker Compose, co-located NER)
WCAG 2.1 AA accessibility (axe-clean)

Remaining

Buildable polish contract-gated

WorldCheck / Dow Jones connectors (needs a commercial data contract)
Parquet export, design-token theming and PT/DE languages all shipped — the buildable engine/UI backlog is otherwise closed.

Owner / process owner

DPIA + ROPA
Penetration test + deeper SAST / DAST / SCA
UAT scenario playbooks
Pilot tenants + go-live sign-off
Vendor DPAs (if commercial connectors adopted)

Ops / infra ops

SLO dashboards + on-call + alerting / SIEM
WAF / HSTS / mTLS / EU data-locality at the ingress
Resize prod node (run NER first-class on prod, not via the staging link)

Out of scope separate product

Module B — enhanced KYC (docs / liveness / face-match)
Native Android / iOS SDKs + redirect embed
EnhancedCheck / PAD controls
Proof-of-address / offline-mobile / device fingerprinting

MVP milestones

Milestone	Status	Notes
M1 — Kick-off & sandbox	owner	Process/contract; the PROOViD-consumption premise is superseded (own engine).
M2 — Platform & security baseline	done	Tenant model, OIDC/RBAC, audit, secrets ✅; WAF/SIEM = ops.
M3 — Module A screening façade	done	Screening + webhooks + idempotency + daily-delta/monthly-full re-screen ✅.
M4 — Threshold engine	done	Turnover-threshold engine (opt-in) ✅.
M5 — Module B enhanced KYC	out of scope	Separate KYC product.
M6 — SDK wrappers	web done	TypeScript/Web SDK ✅; native mobile out of scope.
M7 — Back-office shell	done	Cases console + queues + review + CSV/regulator export + bulk + attachments.
M8 — Localization & white-label	done	Branding + design-token theming ✅ · i18n EN/ES/PT/FR/DE ✅ · consent-copy versioning ✅.
M9 — Compliance hardening & DPIA	owner	Runbooks ✅; DPIA / pen-test / UAT = owner.
M10 — Pilot & GA	owner	Pilot tenants + SLO + go-live sign-off.