AML · Sanctions · PEP · Adverse Media

Screening that stands up to a regulator.

Instant sanctions, PEP and adverse-media checks for EU & Cyprus compliance teams — scored, explained, and delivered as an audit-ready report. Built and operated by a licensed Cyprus law firm.

EU data residency Audit-ready reports Explainable, not a black box Evidence retained (WORM)
Built for regulated entities

The teams with an AML obligation to screen

If you must run customer due diligence under EU or Cyprus AML law, FIRMCY does the check and gives you the paper trail.

Law firms Corporate service providers Fiduciaries & trust companies Fintech & payments Banks & EMIs Accountants & auditors Crypto / VASPs Real estate Gaming
What we do

Seven services, one audit trail

SCREEN · INSTANT

Sanctions & PEP

Every subject checked against global sanctions lists and a worldwide politically-exposed-persons database, in seconds. Weighted plausibility cuts the false positives a name-only match throws.

SCREEN · EDD

Adverse media

An AI analyst sweeps news and official registers for financial crime, corruption, fraud and organised-crime exposure — every finding tied to a retained source page, disambiguated to your subject.

SCREEN · COMBINED

Full assessment

Sanctions, PEP and adverse media in one run, scored to a single risk band, delivered as a complete, downloadable report your file and your regulator can rely on.

CASE FILE · KYC/EDD

KYC case files

A single-use capture link collects the documents; guided camera and forensics (MRZ, tamper analysis) test them; every claim is corroborated against the screening. Reviewer sign-off closes the case as a filed PDF.

CYPRUS · OFFICIAL

Company registry files

Order the official Registrar of Companies file on any Cyprus entity from inside a screening — directors, shareholders and charges mapped straight into the subject's dossier and network view.

ONGOING

Monitoring

Your whole book re-screened on the schedule you set, daily to yearly. You're alerted only when something changes — a new listing, a new story — and the schedule manages itself.

INVESTIGATE · NETWORK

Investigations

Go beyond a single name: build an entity's ownership and control network from the registry, trace it to the people behind it, screen everyone in the chain, and see where the risk actually concentrates — with a synthesised report.

Identity plausibility

Match the name wide. Judge the identity hard.

Matching is deliberately name-broad, so nothing slips through on a typo or a transliteration. Then four identity signals put a verdict on every match — instead of a wall of false positives.

  • Four signals, weighed per match — date of birth, nationality, gender and place of birth, each compared against what the lists actually record.
  • A verdict with its reasons — every match is labelled corroborated, partial, mismatch or unverified, and shows exactly which signals matched and which didn't.
  • Never suppressive — a mismatch de-prioritises a match for review; it can never drop it or lower the risk band. A wrong date of birth cannot hide a sanctioned person.
Why FIRMCY

Defensible by design

Built by a law firm

Designed around real AML obligations by Ioannou & Sharpe LLC — not a generic data vendor.

EU data residency

Hosted in the EU, GDPR-aligned, with a clear controller/processor split and a signed DPA.

Weighted plausibility

Date of birth, nationality, gender and place of birth score each match — fewer false positives, never a hidden true one.

Explainable results

Every risk call shows its reasons and its sources. No black box a reviewer can't defend.

Evidence retained

Source pages snapshotted to write-once (WORM) storage, so the evidence still exists when the audit comes.

Full audit trail

Every screen, decision and reviewer action logged in a tamper-evident record.

How it works

From a name to a filed report in under two minutes

STEP 1

Enter the subject

Name, and optionally date of birth, nationality, gender or place of birth for sharper matching.

STEP 2

Screen

Choose an instant sanctions & PEP check or a full assessment with adverse media. Results are scored and explained.

STEP 3

File the report

Download an audit-ready PDF, record your decision, and keep the evidence — all in one place.

KYC onboarding · Guided capture

Collect the documents without chasing attachments

Open a KYC case, pick the documents you need, and send your customer a single-use link. They photograph their documents on their phone — guided, quality-checked, verified before a reviewer ever opens the file.

Single-use capture link

No app, no account for the customer. The link expires on your schedule and works exactly once — passport, ID, proof of address, bank statement.

Guided camera, instant quality checks

Blur, glare and cropped edges are caught at capture time — not discovered by your team three days later.

Forensics on every file

Malware scan, passport MRZ cross-checks and image-tamper analysis run before a human opens anything — and the extracted identity is corroborated against your screening subject.

Reviewer sign-off, case PDF

A compliance officer reviews the case and signs it off; the complete file — documents, checks, decisions — exports as one audit-ready PDF. 12 credits per case, screening included.

Enhanced due diligence · Ownership network

See who is really behind the company

Screening a name checks that name. An investigation follows the ownership and control structure behind a corporate client to the people who actually control it — and screens the whole chain, not just the front company.

Build the ownership network

Pull the official registry file and map the ownership and control links outward — parents, subsidiaries, shared officers — into one network view.

Trace to the beneficial owners

Follow the chain through nominees and offshore layers to the people who ultimately control the entity — not just the name on the front door.

Screen the whole chain

Every party in the network is checked against sanctions, PEP and adverse media — so risk anywhere in the structure surfaces, not only on your subject.

Where the risk concentrates

The investigation is synthesised into a judgment over the whole structure — which entity or person carries the risk, with the reasoning shown, not a black box.

How investigations work →
For developers

Screen inside your own product

Every check FIRMCY runs is a REST API. Embed sanctions, PEP and adverse-media screening directly into your onboarding, KYC or client-management flow — same results, same evidence, same audit trail as the app.

REST & JSON

Clean endpoints — /v1/screen (sanctions + PEP), /v1/assess (combined), adverse media, and monitoring & alerts.

Scoped API keys

Per-product scopes, DPA-gated and EU-hosted. Rotate and revoke without touching your integration.

Screen & monitor

Screen at onboarding, then monitor continuously — get an alert when a subject picks up a new sanctions, PEP or adverse-media hit.

# Screen a subject — sanctions + PEP curl -s https://api.firm.cy/v1/screen \ -H "Authorization: Bearer $KEY" \ -H "Content-Type: application/json" \ -d '{ "name": "Jane Doe", "date_of_birth": "1980-05-01", "nationality": "CY" }'
Get API access →
Compliance basis

Helps you meet your obligations

FIRMCY supports the customer-due-diligence and ongoing-monitoring duties that EU and Cyprus AML rules place on regulated entities.

EU AML Directives (4th–6th)
Sanctions, PEP and adverse-media screening as part of customer due diligence.
Cyprus AML Law 188(I)/2007
Screening & record-keeping for obliged entities under the Prevention and Suppression of Money Laundering Law.
CySEC / ICPAC / Bar expectations
Documented, repeatable screening with a retained evidence trail for supervisory review.
GDPR
EU hosting, lawful-basis handling, controller/processor DPA, data-minimising by design.

Informational only — not legal advice. FIRMCY is a screening tool that supports, and does not replace, your own compliance judgement.

Pricing

Pay for what you screen

Credit-based, no lock-in. Credits never expire and are only spent when a screening completes.

Sanctions & PEP

1 credit / check
  • Global sanctions lists
  • Worldwide PEP database
  • Weighted plausibility
  • Instant result
Start free

Teams & volume

Custom
  • Ongoing monitoring
  • Batch screening
  • Volume credit packs
  • Onboarding support
Talk to us
FAQ

Questions compliance teams ask

Can I run a free PEP and sanctions check?

Yes. Every new organisation gets 100 welcome credits on signup — enough for 100 sanctions & PEP screenings — with no card required. And unlike most "free checker" sites, the result is the full match detail with an audit-ready report, not a teaser behind a paywall. How the free check works →

What lists and sources do you screen against?

Global sanctions regimes (incl. UN, EU, OFAC, UK), a worldwide politically-exposed-persons database, and — for adverse media — live news plus official registers (court, regulator and enforcement sources). Every adverse finding is tied to a retained source page.

Is FIRMCY GDPR-compliant and where is data stored?

Yes. Data is hosted in the EU, with a clear controller/processor split (your organisation is the controller; we act as processor under a signed DPA), lawful-basis handling and data-minimisation by design.

Does it satisfy our Cyprus / EU AML obligations?

FIRMCY supports the customer-due-diligence, screening and ongoing-monitoring duties under the EU AML Directives and Cyprus AML Law 188(I)/2007, with a documented, repeatable process and a retained evidence trail. It supports — and does not replace — your own compliance judgement.

How do you keep false positives down?

Matching is name-broad for recall, then an identity-plausibility layer weighs each match on date of birth, nationality, gender and place of birth, and labels it — corroborated, partial, mismatch or unverified — with the matching reasons shown. A mismatch is surfaced for review; it is never used to silently hide a true hit or lower the risk band.

Can I keep the evidence for an audit?

Yes. Source pages are snapshotted to write-once (WORM) storage and every screen, decision and reviewer action is recorded in a tamper-evident audit log — so the evidence exists when a supervisor asks.

Can you collect and verify my customer's documents (KYC)?

Yes. Open a KYC case and send your customer a single-use capture link — they photograph their passport, ID or proof of address on their phone with guided, instant quality checks. Every file is malware-scanned and checked for tampering, passport MRZ data is cross-validated, and the extracted identity is corroborated against your screening subject before a compliance officer signs the case off. The whole case exports as one audit-ready PDF (12 credits per case, screening included).

Do you offer ongoing monitoring and batch screening?

Batch screening and continuous monitoring (with change alerts) are available for teams. Talk to us about volume credit packs and onboarding.

Can I integrate screening via API?

Yes. Every check is available as a REST API — /v1/screen for sanctions & PEP, /v1/assess for a combined assessment, plus adverse media. Use scoped, DPA-gated API keys to embed screening in your own onboarding or KYC flow. Ask us for API access and docs.

Get in touch

Book a demo or ask a question

Tell us about your screening needs and we'll get back to you — usually within one business day.

Ioannou & Sharpe LLC
Griva Digeni, Limassol Center, Block B, 3rd Floor, Office 304
3095 Limassol, Cyprus
[email protected]