Scheduled Reports

Overview#

A compliance officer responsible for quarterly FATF submissions cannot afford to remember, on the last Friday of each quarter, to pull the data, format it, and send it before the close of business. That kind of manual dependency creates risk. The Scheduled Reports module removes it: define the report once, configure the schedule, set the delivery destination, and the system handles every subsequent cycle without human prompting.

The same engine manages everything from a daily operations digest landing in an operations manager's inbox at 07:00 to an annual regulatory submission encrypted and delivered to an authority's SFTP endpoint. Thousands of active schedules run concurrently, with automatic retry, delivery receipts, and a full audit trail covering every generation and distribution event.

Key Features#

• Flexible scheduling with cron expression support and timezone awareness for international reporting obligations across multiple jurisdictions
• Schedule types covering real-time, hourly, daily, weekly, monthly, quarterly, annual, and custom intervals
• Multi-channel delivery supporting email, webhook, cloud storage, SFTP, and direct download
• Automatic retry with error handling for reliable delivery, including delivery receipts for regulatory submissions
• Concurrent report generation processing multiple schedules simultaneously during peak periods without queuing delays
• Report caching for efficient regeneration and rapid access to recently generated outputs
• Pause and resume capabilities for temporary schedule management without losing configuration
• Report archival with configurable retention policies, including PDF/A-3 format for long-term archival compliance
• Template-driven generation producing consistent, branded output across all schedule types
• Recipient management with configurable distribution lists and role-based delivery controls
• Report versioning that maintains a history of generated outputs for audit comparison and regulatory evidence
• Schedule monitoring with alerts for failed generations and delivery issues, routed to the owning team
• Parameterised reports with dynamic date ranges and context-specific filters, so the same template serves weekly, monthly, and quarterly runs
• Complete audit trail of all report generation, delivery, and access events

Use Cases#

• Compliance Reporting Automation: Compliance teams schedule automated quarterly and annual regulatory reports with encrypted delivery to regulatory authorities, removing the manual preparation cycle entirely
• Daily Operations Digest: Operations managers receive a morning summary covering overnight metrics, active alerts, and investigation progress, ready before the first briefing of the day
• Client Reporting: Service delivery teams automate periodic reports with customised templates and branded formatting, ensuring consistent output without manual assembly
• Executive Briefing: Weekly and monthly KPI packs are assembled and delivered to leadership distribution lists automatically, with PDF/A-3 copies archived for governance records

Integration#

• Connects with report generation engines and template systems for automated content creation
• Compatible with email services and webhook endpoints for multi-channel delivery
• Supports cloud storage and SFTP destinations for automated archival and regulatory delivery
• Role-based access controls for schedule creation, modification, and report access
• Complete audit logging of all scheduled operations and delivery events
• Multi-tenant isolation ensuring organisational schedule and report separation

Open Standards#

• ISO 19005 (PDF/A-1 through PDF/A-4): Scheduled report outputs destined for archival or regulatory submission are generated in PDF/A conformance levels defined by ISO 19005-1:2005 through ISO 19005-4:2020, ensuring long-term reproducibility and court-admissible integrity.
• POSIX Cron Expression Syntax: Schedule definitions use standard five-field cron expressions (minute, hour, day-of-month, month, day-of-week) to express recurrence intervals from hourly to annual, including timezone-aware firing for multi-jurisdictional obligations.
• RFC 3161 (Trusted Timestamping): Report packages can be bound to a trusted timestamp authority receipt at generation time, providing cryptographically verifiable proof of when a report existed for regulatory evidence purposes.
• JSON Web Token (RFC 7519): Secure sharing tokens granting time-limited, role-scoped access to generated report outputs are issued as signed JWTs, allowing downstream systems and recipients to verify authenticity without a round-trip to the platform.
• S3-Compatible Object Storage API (AWS S3 API): Cloud archival delivery writes report packages to S3-compatible object storage (Cloudflare R2 via boto3), using presigned URLs for time-bounded direct download without exposing long-term credentials.
• SSH File Transfer Protocol (SFTP / SSH-2): Encrypted delivery to regulatory authority endpoints uses SFTP over SSH-2, with key-based authentication, matching the secure-transfer requirements common in financial and public-safety reporting mandates.
• GraphQL (June 2018 Specification): All schedule management operations, creating, updating, pausing, and querying schedules, are exposed as typed GraphQL mutations and queries, enabling strongly typed, self-documenting integration for downstream consumers.
• OAuth 2.0 (RFC 6749): Access to schedule creation, modification, and generated report retrieval is governed by OAuth 2.0 Bearer token authentication with tenant-scoped authorisation, ensuring multi-tenant isolation across all scheduled operations.

Last Reviewed: 2026-02-05 Last Updated: 2026-04-14