Core Concepts

RiskOS™ turns data about a person, business, or device into a risk decision. A handful of core concepts explain how that happens — understand these and the rest of the platform falls into place.

New to RiskOS™? Start with Understanding RiskOS™ for the full walkthrough, then use the pages below as a reference.

The building blocks

Concept	What it is
Evaluations	A single execution of a workflow — the runtime unit of work
Workflows	A configurable sequence of steps that processes an evaluation
Enrichments	Data services that add risk, identity, or compliance signals
Signals & Attributes	The data taxonomy: inputs, enrichment outputs, reason codes, tags, and derived values
Rules & Conditions	The logic layer that evaluates signals and routes the workflow
Decisions	The final outcome: `ACCEPT`, `REJECT`, or `REVIEW`

Go deeper

Synchronous vs Asynchronous Evaluations — Real-time and deferred execution patterns
Statuses & Lifecycle — State and status transitions for evaluations, workflows, and cases
Cases & Manual Review — How human reviewers handle REVIEW decisions
Hosted Flows — Preconfigured workflows with a Socure-managed UI
Step-up Verification — Conditional escalation to higher-assurance checks
Glossary — Definitions of key RiskOS™ terms

Ready to build? Head to Get Started with RiskOS™.