> ## Documentation Index
> Fetch the complete documentation index at: https://docs.algovoi.co.uk/llms.txt
> Use this file to discover all available pages before exploring further.

# Sanctions Monitor

> Continuous sanctions monitoring as signed, no PII delta evidence: keep a counterparty watchlist, re-screen on every refresh, emit a signed delta receipt.

<Note>
  **Also in the on-prem suite.** This product is included in the [AlgoVoi Compliance and Payments On-Prem Suite](/substrate-2), one commercial licence that unlocks and runs the complete self-hosted platform.
</Note>

<Info>
  **Free for every Substrate 2 customer.** Sanctions Monitor is included at no additional charge -- any
  valid AlgoVoi suite licence unlocks it. There is no separate purchase.
</Info>

## What it is

Point-in-time screening ([Compliance Gate](/compliance-gate-v2)) confirms a counterparty is clean *now*.
Designations change -- someone you transacted with last month can land on OFSI / OFAC / EU tomorrow.
**Sanctions Monitor** keeps a **watchlist**, re-screens it on every sweep, and emits a **Falcon-1024-signed
delta receipt** the moment a verdict changes. That timestamped, offline-verifiable receipt is exactly the
**ongoing-monitoring evidence** an MLRO or supervisor wants -- and it carries **no PII**: only
`subject_ref = sha256(network:address)`.

It runs as a self-contained **appliance** (deploy one container) with the watchlist **post-quantum
encrypted at rest**, and it completes the suite's compliance-receipt family:
[Compliance Gate](/compliance-gate-v2) (point-in-time) -> [Travel Rule](/travel-rule) (FATF R.16) ->
**Sanctions Monitor** (ongoing).

<CardGroup cols={2}>
  <Card title="Delta receipts on change" icon="bell">
    A signed receipt fires only when a verdict changes -- `newly_hit`, `cleared`, `escalated`,
    `de-escalated`. The change, signed and timestamped, is the evidence.
  </Card>

  <Card title="No PII" icon="eye-slash">
    Receipts reference a counterparty only as `sha256(network:address)`. Hand a supervisor the proof a
    status changed, not the customer's identity.
  </Card>

  <Card title="Post-quantum at rest" icon="atom">
    The watchlist's only identifying data (the counterparty address) is **ML-KEM-1024 + AES-256-GCM**
    encrypted on disk; verdicts, timestamps and signed receipts are non-PII and stored in clear.
  </Card>

  <Card title="Bring your own screener" icon="plug">
    The same screener you run for point-in-time (the AlgoVoi OFSI/OFAC/EU cache, a commercial feed, your
    own) plugs straight in. The monitor ships no sanctions list.
  </Card>
</CardGroup>

## What you get

* **Ongoing-monitoring evidence, on demand.** A signed, timestamped record of *when* a counterparty's
  status changed and that you caught it -- the artifact UK MLR 2017 / EU AMLD ongoing monitoring expects.
* **No PII to retain.** The evidence is content-addressed; the identifying address is encrypted at rest,
  post-quantum.
* **Turnkey.** One container with the watchlist on a volume. It sweeps on a schedule, persists across
  restarts, and exposes a small loopback API to add subjects and pull receipts.
* **Substrate 2-bound.** Every delta receipt folds into the broader Substrate 2 evidence chain.

## How it works

| Step       | What happens                                                                                                                      |
| ---------- | --------------------------------------------------------------------------------------------------------------------------------- |
| **Watch**  | Add a counterparty; it is stored content-addressed (`subject_ref`), the address post-quantum-encrypted at rest.                   |
| **Sweep**  | On every cycle the appliance re-screens the whole watchlist via your screener. The first sweep sets a silent baseline.            |
| **Detect** | When a verdict changes, a `Falcon-1024`-signed delta receipt is emitted (`newly_hit` / `cleared` / `escalated` / `de-escalated`). |
| **Verify** | Anyone confirms a receipt offline from the monitor's public key alone -- no PII in the receipt.                                   |

## Cryptography

* **No-PII receipts.** The only reference to a subject is `sha256(network:address)`.
* **Post-quantum, both axes.** Delta receipts are **Falcon-1024** signed (NIST Level 5, offline-verifiable);
  the at-rest watchlist is **ML-KEM-1024 + AES-256-GCM** encrypted -- an exfiltrated database leaks no
  counterparty identities without the ML-KEM secret.
* **Content-addressed + canonical.** `canon_version: jcs-rfc8785-v1`; receipts verify byte-identically
  anywhere.

## Who it's for

* **VASPs, PSPs and exchanges** that must evidence **ongoing** sanctions monitoring, not just onboarding.
* **Compliance / MLRO teams** that need a provable trail of status changes **without retaining PII**.
* **Anyone running point-in-time screening** who wants the same screener to power continuous monitoring.

## Get Sanctions Monitor

Sanctions Monitor is **included free for every Substrate 2 customer**. It ships as a deployable appliance
(one container, watchlist on a volume); we provide the gated download and help you point it at your
screener and set the sweep cadence. It pairs with [Compliance Gate](/compliance-gate-v2) (the verdict) and
[Travel Rule](/travel-rule) (FATF R.16) as a complete compliance-evidence story.

<CardGroup cols={2}>
  <Card title="Talk to us" icon="envelope" href="/trial-and-pricing">
    Already a Substrate 2 customer? Sanctions Monitor is included -- we'll help you deploy it and wire it
    to your screening source.
  </Card>

  <Card title="The compliance suite" icon="user-shield" href="/compliance-gate-v2">
    Compliance Gate -> Travel Rule -> Sanctions Monitor: screen, meet the Travel Rule, and monitor
    continuously -- all signed, all no-PII, all offline-verifiable.
  </Card>
</CardGroup>