Monitor Statistics and Performance Analytics

Overview#

Deploying a transaction monitoring rule is not the end of the work. Over time, criminal patterns evolve, entity behaviour changes, and threshold choices that were well-calibrated on deployment can drift into generating excessive noise or missing new attack patterns. A compliance manager who cannot measure whether their monitoring program is actually working cannot improve it, and cannot demonstrate to regulators that it is fit for purpose. Monitor Statistics and Performance Analytics makes the performance of every deployed monitor visible, measurable, and improvable.

The platform transforms raw execution data into effectiveness metrics, trend analysis, and specific optimisation recommendations. When an examiner asks a compliance team to demonstrate that their AML monitoring program is effective, the answer can be quantified rather than asserted.

Open Standards#

GraphQL (June 2018 specification): All analytics queries, KPI reads, and monitor performance mutations are exposed through a GraphQL API, enabling typed, self-documenting access to effectiveness metrics and trend data.
ISO 8601 / RFC 3339: Every execution timestamp, trend boundary, and performance window in the analytics pipeline is serialised and exchanged in ISO 8601 extended format, ensuring unambiguous temporal ordering across time zones.
JSON (RFC 8259): Monitor threshold configurations, execution statistics, KPI payloads, and optimisation recommendation objects are all represented and stored as JSON, with JSONB used for efficient querying in PostgreSQL.
OAuth 2.0 (RFC 6749) and JSON Web Tokens (RFC 7519): Access to KPI and analytics endpoints is gated by OAuth 2.0 bearer tokens carrying explicit permission scopes (e.g. kpi:read), with all tokens validated as signed JWTs.
PDF/A-3 (ISO 19005-3): Examination-ready monitoring programme effectiveness reports are generated in PDF/A-3B conformance level, embedding the machine-readable compliance dataset as an associated JSON file so auditors receive both human-readable and structured evidence in a single archival document.
FATF Recommendations (AML/CFT): Regulatory metric templates and report structures align with Financial Action Task Force standards for demonstrating AML/CFT monitoring programme effectiveness, supporting examination expectations under BSA, EU AML Directives, and sanctions regimes.
RFC 4180 (CSV): Performance and analytics data is exported in comma-separated values format for ingestion by business intelligence platforms such as Tableau, Power BI, and Looker.

Last Reviewed: 2026-02-09 Last Updated: 2026-04-14

Key Features#

Hit Rate Analysis and Effectiveness Tracking#

True positive rate measurement quantifies the percentage of alerts representing genuine violations
Detection coverage assessment measures the percentage of target populations and transactions actually monitored
F1-score calculation provides a balanced effectiveness metric combining precision and recall
Alert quality scoring uses a weighted composite of relevance, actionability, timeliness, and confidence
Comparative benchmarking evaluates monitor performance against peer group averages

False Positive Management#

False positive rate tracking identifies monitors generating excessive noise
Root cause analysis categorises false positive drivers: overly broad thresholds, data quality issues, or changing entity behaviour
Trend analysis detects increasing false positive rates before they overwhelm investigation teams
Optimisation recommendations suggest specific threshold adjustments and filter additions to reduce false positives
Analyst feedback loops incorporate investigator assessments to refine alert quality scoring

Performance Dashboards#

Real-time dashboards update within seconds of execution completion
Role-based views provide analyst-level detail, manager summaries, and executive KPI scorecards
Custom dashboard builder allows teams to create views tailored to their specific monitoring programs
Historical trend visualisation covers long-term monitor performance over months and years
Drill-down capability enables exploration from summary metrics to individual alert details

Trend Analysis and Predictive Insights#

Time-series analysis identifies performance trends, seasonal patterns, and anomalies
Early warning detection flags performance degradation before it affects operational outcomes
Predictive modelling forecasts future monitor performance based on historical patterns
Regulatory change impact assessment estimates how new requirements will affect monitoring programs

Optimisation Recommendations#

Machine-learning-powered suggestions provide specific, actionable improvements for each monitor
Threshold optimisation recommendations balance detection sensitivity against false positive rates
Filter recommendations suggest additional criteria to improve alert precision
Schedule optimisation identifies the most effective execution frequencies for each monitor type
Monitor retirement recommendations identify underperforming monitors consuming resources without delivering value

Reporting and Compliance Documentation#

Automated report generation produces examination-ready documentation of monitoring program effectiveness
Regulatory metric templates align with examination expectations for BSA, AML, and sanctions programs
Board and committee reporting packages summarise monitoring program health and trends
Audit trail documentation records all optimisation decisions and their impact on performance
Export capabilities deliver data to business intelligence platforms for broader organisational analysis

Use Cases#

Monitoring Program Optimisation#

Compliance managers use effectiveness metrics and optimisation recommendations to improve monitoring programs continuously, adjusting thresholds and retiring underperforming monitors based on evidence rather than intuition.

Regulatory Examination Preparation#

Audit teams generate examination-ready reports demonstrating monitoring program effectiveness with quantified metrics. True positive rates, detection coverage, and optimisation histories give regulators evidence of a well-managed surveillance program.

Monitor Execution: Execution results automatically feed into the analytics pipeline for performance measurement
Alert System: Alert disposition data (true positive, false positive, pending) links back to originating monitors for effectiveness calculation
Investigation Platform: Investigation outcomes inform monitor effectiveness tracking and optimisation recommendations
Business Intelligence Tools: Analytics data exports to platforms such as Tableau, Power BI, and Looker for broader organisational reporting
Executive Reporting: Automated report generation produces board-ready summaries of monitoring program performance