Trace —
sanctions screening,
engineered for Monaco.
A purpose-built SaaS for the Principality's obliged entities — 14 official sources, 129k+ PEPs indexed, 810k+ offshore entities, eight matching strategies, dated PDF attestations with cryptographic fingerprints, and passport MRZ OCR.
Coverage — Monaco + 7 allied regimes
The deliverable
A defensible PDF, every screening.
Each attestation embeds the source publication date, a SHA-256 fingerprint of the list used, and the structured outcome — independently reproducible from the day's JSON snapshot.
- Attestation ID + timestamp
- Subject identifiers (passport, DOB, nationality)
- Source publication date + SHA-256
- Per-match rationale (which strategy fired, why)
DUPONT
JEAN MICHEL
12 / 03 / 1968
FR · FRA
The Challenge
Monaco's regulated entities had no native tool — only expensive global solutions that miss the local list.
Obliged entities had to rely on global solutions (World-Check, RDC, LexisNexis) that ignore the Principality's National Asset Freezing List and price like enterprise contracts.
KYC files needed dated, defensible proof of every screening — but most tools left it to the user to screenshot results, retype names, and hope nothing changed in the source list.
Real client data is messy — diacritics, transliterated Cyrillic, inverted name order, legal suffixes, aliases. Naive string matching either misses real hits or floods the screen with false positives.
The Solution
A Monaco-first SaaS — built end-to-end, from official source to defensible PDF.
We engineered Trace as four interlocking systems: a normalised in-process index of the Principality's sanctions list, a layered matching engine that handles real-world name messiness, a PDF generator that produces self-verifying attestations, and an MRZ OCR onboarding flow.
- 8-strategy matching engineExact, fuzzy (Levenshtein), token-set overlap, alias, Cyrillic transliteration, entity suffix tolerance, plus DOB and nationality disambiguation — every signal layered into a single confidence score.
- Self-contained PDF attestationsEach screening generates a dated PDF with the source list publication date, a SHA-256 hash, the entry count, and the structured outcome — independently reproducible from the day's JSON snapshot.
- Passport OCR onboardingTesseract.js targets the MRZ on TD3 passports — surname, given names, nationality, DOB, and passport number captured in seconds. Falls back gracefully to manual entry when lighting fails.
- Daily ingestion from the official sourceA cron job hits geldefonds.gouv.mc every morning at 06:00 Monaco time. The list is normalised in-process — diacritics stripped, aliases split, dates parsed — and held in memory with a SHA-256 fingerprint.
Who it serves
Seven obliged-entity professions, one tool.
The Results
A defensible compliance workflow — in seconds, not afternoons.
Under the hood
A modern, defensible stack — engineered for compliance.
Built by BSS Digital Agency
Trace is a digital service designed, engineered and operated by BSS Digital Agency.
From regulatory research to the matching engine, the PDF generator, the MRZ OCR pipeline, the Supabase data model, and the Hostinger VPS deployment — every layer of Trace was built in-house. We design, ship and maintain SaaS products end-to-end for Monaco businesses.
Need a SaaS engineered around a regulatory problem?
We design and ship compliance and operations software for Monaco businesses — from technical research to production VPS deployment.