SUPWM
Menu

Platform architecture

Seven engines.
One explainable record.

Each engine solves a different part of the merchant-risk problem. Together, they are designed to answer three essential questions: who is behind the business, what is happening online, and what should the risk team do next?

MD
Engine 01 of 07

Merchant Discovery

Which websites and domains are actually associated with this merchant?

What it does

Merchant Discovery begins with the identifiers a payment provider already has—such as a business name, address, phone number, email, MID descriptor or known URL—and searches for the merchant’s broader public digital footprint. It is intended to connect storefronts, alternate domains, social profiles and related commercial properties that may not appear in the original application.

Why it matters

Underwriting and monitoring are only as complete as the URLs being reviewed. If a merchant operates through an undisclosed site, changes brands, or routes customers to another storefront, a review limited to the submitted domain can miss the business that is really generating transactions.

Signals it is designed to analyze
  • Business names and trading names
  • Contact and address reuse
  • Domain registration and infrastructure
  • Analytics, advertising and storefront identifiers
  • Links, redirects and shared site elements
Intended evidence and output
  • Candidate domain inventory
  • Relationship type and strength
  • Source evidence for each link
  • Confidence and analyst status
Next engine
WI
Engine 02 of 07

Website Intelligence

What does the merchant sell, promise and require from its customers?

What it does

Website Intelligence converts merchant pages into a structured commercial record. It is intended to crawl accessible content, identify products and services, interpret business-model signals, and capture important policies and customer-facing claims. The engine preserves source context so an analyst can see the language that produced an observation.

Why it matters

A corporate registration rarely explains the actual online offer. Payment risk often appears in product catalogs, checkout flows, refund terms, fulfillment promises, subscription language or marketing claims. Understanding the website is necessary to understand the transaction.

Signals it is designed to analyze
  • Products, services and pricing
  • Checkout and payment flows
  • Refund, shipping and fulfillment terms
  • Subscription and continuity billing language
  • Health, earnings and performance claims
Intended evidence and output
  • Structured business-model profile
  • Product and service taxonomy
  • Timestamped excerpts and screenshots
  • Observed policy and disclosure gaps
Next engine
CA
Engine 03 of 07

Compliance AI

Which observable activities may conflict with policy, regulation or card-brand requirements?

What it does

Compliance AI evaluates structured website observations against a maintained risk taxonomy. It is intended to identify prohibited or restricted products, problematic claims, missing disclosures and other indicators that warrant review. Findings should state the observed fact, the relevant policy category and the confidence—not present an unexplained verdict.

Why it matters

Rules differ by product, geography, acquiring policy and card network. Manual reviewers cannot consistently compare every page against every applicable rule at portfolio scale. A policy-aware engine helps prioritize attention while leaving final interpretation and enforcement with qualified people.

Signals it is designed to analyze
  • Restricted and prohibited products
  • Regulated-product indicators
  • Deceptive or unsupported claims
  • Card-not-present disclosure risks
  • Customer-specific policies and thresholds
Intended evidence and output
  • Finding category and severity
  • Policy or taxonomy mapping
  • Supporting source evidence
  • Confidence and review rationale
Next engine
KY
Engine 04 of 07

Identity / KYB

Who appears to own, operate and control the merchant’s online business?

What it does

Identity / KYB is intended to connect the submitted legal entity with the people, brands and operational signals visible online. It compares application data with public website disclosures and other permitted sources, highlights inconsistencies and keeps unresolved identity questions visible for human follow-up.

Why it matters

A valid company record does not prove that the entity controls the website being underwritten. Mismatched operators, hidden beneficial relationships and recycled contact information can indicate impersonation, front companies or attempts to return after termination.

Signals it is designed to analyze
  • Legal and trading names
  • Operator and beneficial-owner signals
  • Addresses, phones and email domains
  • Licenses and registrations where relevant
  • Conflicts between application and web evidence
Intended evidence and output
  • Entity and operator profile
  • Matched and conflicting attributes
  • Source provenance
  • Questions requiring enhanced due diligence
Next engine
TL
Engine 05 of 07

Transaction Laundering

Is an approved MID being used to process transactions for a hidden business?

What it does

The Transaction Laundering engine is intended to combine relationship-graph signals, merchant history and investigator review to surface undisclosed businesses that may share payment access with an approved merchant. It distinguishes weak automated leads from stronger suspected relationships and, where a service process supports it, analyst-confirmed findings.

Why it matters

A merchant may appear acceptable at onboarding while processing for a prohibited or higher-risk business behind the scenes. This exposes acquirers and payment facilitators to losses, regulatory scrutiny and card-network action. Detection requires looking beyond the approved URL and following the surrounding network.

Signals it is designed to analyze
  • Shared infrastructure and identifiers
  • Redirect and checkout relationships
  • Product and brand overlap
  • Contact, ownership and fulfillment connections
  • Historical domain and merchant relationships
Intended evidence and output
  • Relationship graph
  • Suspected versus reviewed status
  • Evidence bundle for each connection
  • Investigation narrative and next steps
Next engine
CM
Engine 06 of 07

Continuous Monitoring

What materially changed after the merchant was approved?

What it does

Continuous Monitoring is intended to revisit merchant properties on a defined schedule, compare current observations with prior evidence and identify changes that matter to risk. Rather than treating every edit as an alert, it classifies changes and prioritizes those affecting products, business model, ownership signals, policies or connected domains.

Why it matters

Approval is a point-in-time decision; the merchant is a moving target. New products, altered refund terms, ownership changes or a newly connected domain can change the risk profile long after underwriting. Persistent monitoring closes the gap between periodic reviews.

Signals it is designed to analyze
  • Catalog and service changes
  • Policy and disclosure changes
  • New or removed domains
  • Ownership and contact changes
  • New compliance findings or resolved issues
Intended evidence and output
  • Before-and-after evidence
  • Change category and materiality
  • Detection timestamp and history
  • Alert, routing and disposition status
Next engine
RD
Engine 07 of 07

Risk Decisioning

What should the risk team do next, and what evidence supports that recommendation?

What it does

Risk Decisioning brings the other six engines into a configurable decision layer. It is intended to combine customer policy, finding severity, confidence and merchant context into a score and an approve, review or decline recommendation. Each factor remains visible so teams can challenge, override and document the result.

Why it matters

More signals do not automatically create better decisions. Teams need consistent prioritization, defensible reasoning and a record of how a recommendation became a final disposition. Explainable decisioning reduces review friction without pretending that a model owns the compliance decision.

Signals it is designed to analyze
  • Engine findings and confidence
  • Customer rules and risk appetite
  • Finding combinations and severity
  • Open questions and analyst conclusions
  • Prior decisions and monitoring history
Intended evidence and output
  • Risk score and factor contribution
  • Approve, review or decline recommendation
  • Confidence and reason codes
  • Human disposition and audit trail

Connected by design

Discovery creates the map.
Decisioning makes it useful.

  1. 01–02Observe

    Find the merchant footprint and understand the commercial activity.

  2. 03–05Evaluate

    Assess compliance, identity and hidden commercial relationships.

  3. 06–07Act

    Detect material change and route evidence into a documented decision.

Shared evidence model

Every finding carries its receipts.

The seven engines should write to one merchant record, preserving provenance and separating machine observations, analyst conclusions and customer decisions.

Source URLCaptured atScreenshot or extractObserved signalPolicy mappingConfidenceAnalyst dispositionChange history

Clear product boundaries

These descriptions state SUPWM’s intended platform design. Availability and coverage will depend on development and validation. SUPWM provides intelligence and workflow support; it does not make legal determinations, replace customer compliance programs, or imply card-network or regulatory endorsement.

Discuss your workflow