A client risk score you can show the workings for
FigsFlow scores every client against coded rules — eight weighted factors, each one traceable back to the record it came from. Nothing is inferred. So when your MLRO, your professional body or an HMRC supervision visit asks how a client came to be rated medium-high, the answer is already on the screen.
FigsFlow evidences the assessment. Your MLRO makes the decision. The obligations under the Money Laundering Regulations 2017 sit with the practice, and nothing here changes that.
Partner or practice manager, start with the live ledger below. MLRO or compliance, the eight factors and the band triggers are what you want.
The ledger runs in your browser. No form until you want one.
- BasisMoney Laundering Regulations 2017
- ScoringCoded rules, not inference
- RecalculatedNightly, and on any change
- EDD triggerFrom 60 · set by your practice
- Included inAML and CDD plans
every number opens onto its record
Recalculated whenever an input changes. Crossing 60 opens enhanced due diligence and blocks approval until it is complete.
Each factor is scored against its own rule set, then weighted. Select a factor to see the rule behind it and the record it drew on.
Eight weighted factors68.0 / 100
A score nobody can reconstruct is a score nobody will sign
Plenty of tools will hand you a rating. Far fewer will tell you where it came from. FigsFlow scores from rules your practice has written down, so the rating is repeatable: the same client facts produce the same score today, next quarter and in front of a reviewer who was not in the room. Change a weighting and the file records who changed it, and when.
A director is added, a sanctions list updates, turnover shifts to a new jurisdiction? The score moves overnight and the file records what moved it.
Eight factors, each scored on its own rules
Weightings below are the defaults. Your practice sets its own — the point is that whatever they are, they are written down, applied the same way to every client, and visible on the file.
Illustrative figures. Every band carries a word as well as a colour, so nothing on this page depends on telling red from green.
What the practice does at each band
A score on its own changes nothing. Bands are what turn it into work: a review cycle, a monitoring level, and the point at which enhanced due diligence stops being optional.
Thresholds shown are defaults. Your practice sets the bands, the review cycles and who signs at each one.
What a practice notices in the first quarter
Not a new dashboard. Six things that stop happening, and one document that starts writing itself.
Ratings stop being arguments
Two reviewers looking at the same client reach the same rating, because the rules did the rating rather than the mood of the afternoon.
Reviews land in the right order
The book sorts by score, so the riskiest files are reviewed first rather than whichever renewal date happens to be nearest.
EDD triggers itself
Passing the threshold opens the enhanced workflow and assigns it. Nobody has to notice a score moving to start the work.
Fewer surprises at renewal
Scores move when the facts move, so a client's rating is current at the point you look at it, not as at the last annual review.
A file that reads well
Score, evidence, recommendation and decision sit in one place with dates against them — which is roughly what a supervision visit asks to see.
Practice-wide risk from the same data
Client scores aggregate into the practice-wide risk assessment, so the firm-level document is drawn from the book rather than written from memory.
The evidence sits next to the decision
The reviewer works from one screen: the score and its factors, the verification results behind them, the enhanced due diligence still outstanding, and the decision itself. No switching to a folder to find out whether the passport was ever checked.
Every recommendation names the factor that raised it and what clearing it is worth. Every decision is recorded with the reason given at the time, against the name of the person who gave it, and cannot be edited afterwards.
Clearing both outstanding items brings the score to an estimated 54 — out of the EDD band.
Illustrative example. Client and figures are fictional.
What feeds the score, and what it feeds
Risk assessment reads the client record other parts of FigsFlow build, and hands its result to the parts that act on it.
Companies House
The entity, directors and PSC register data the ownership picture starts from.
See Companies House →Client due diligence and AML
Identity verification, screening and the CDD file the score is built on.
See AML and CDD →HMRC deadlines
Periodic risk reviews are dated obligations too, tracked on the same calendar.
See HMRC deadlines →Proposals, pricing and engagement letters
Where the risk rating shapes what you agree to take on — and on what terms.
See the platform →Risk assessment in FigsFlow — common questions
Yes. The factors, their weightings and the band thresholds are configured to your practice's documented risk assessment methodology. The defaults shown on this page are a starting point, not a fixed model, and changes are recorded with the date and the person who made them.
No. The score is produced by coded rules applied to the client record, so it is repeatable and can be explained line by line. AI is used elsewhere in FigsFlow to draft, summarise and suggest — the rating itself is deterministic, and the decision is always your MLRO's.
Screening and register data refresh nightly, and the score is recalculated whenever an input changes — a new director, a sanctions list update, a change in transaction pattern. You are alerted when a client moves band rather than every time a number moves.
Crossing your practice's threshold, which defaults to 60. Crossing it opens the EDD workflow, assigns it and blocks approval until it is complete, so the trigger does not depend on someone spotting it. High-risk jurisdiction and PEP rules can also trigger EDD on their own regardless of score.
Client scores aggregate into a practice-wide view, giving you the client, geographic, sector and delivery-channel picture that the Money Laundering Regulations 2017 require a practice to document and keep current.
For any client: the score, the factors behind it, the evidence each factor drew on, the recommendations raised, and the decision recorded with its reason and its author. Entries cannot be edited or removed after the fact.
A reviewer cannot silently change the number, but can approve, escalate or decline against it — recording why. An override is a documented decision rather than an edit, which is the distinction that matters on review.
Bring the client your team argued about
Thirty minutes, one real client, and the whole sequence run in front of you — factors, weightings, band, the EDD trigger and the decision record.
30 minutesA walkthrough, not a scripted pitch
A practice specialistSomeone who has sat the supervision visit
The checks the score is built on run inside onboarding. AML and client due diligence