Terminology Governance

Quick-reference glossary of preferred terms, discouraged synonyms, and naming conventions for RiskOS™ platform concepts.

This page defines canonical terminology for RiskOS™ platform concepts. Use these terms consistently across conceptual documentation, tutorials, API references, and operational guides.


Core platform terms

Preferred termAvoidWhy
Evaluationtransaction, request, submission, event"Evaluation" is the canonical RiskOS™ runtime entity. "Transaction" implies financial scope. "Request" conflates the API call with the processing.
Decisionresult, outcome, response, verdict"Decision" is the specific field in the API response. "Result" is ambiguous (could mean the full response).
Workflowflow, pipeline, process, logic"Workflow" is the RiskOS™ entity name. "Flow" is too generic and conflicts with Hosted Flow.
Enrichmentproduct, module, service, data source"Enrichment" is the canonical term in the workflow context. "Product" is acceptable as a synonym in marketing contexts only.
Signalvariable, field, data point, metric"Signal" specifically means enrichment-returned or computed data used in decisioning. "Variable" implies mutability.
Attributeinput, parameter, field"Attribute" specifically means an input data point from the evaluation request. "Field" is acceptable in API reference contexts.
Reason codereason, code, explanationAlways use the full compound "reason code."
Taglabel, marker, flag"Tag" is the RiskOS™ entity name. "Flag" implies boolean-only.
Derived valuecomputed field, calculated value, output"Derived value" distinguishes workflow-computed data from enrichment signals.
Caseticket, record, item"Case" is the RiskOS™ entity in Case Management.
Hosted Flowhosted experience, Socure UX, flow"Hosted Flow" or "Socure Hosted UX" are the canonical names. Never shorten to "flow" alone.
Stepnode, block, component, action"Step" is the RiskOS™ term for workflow building blocks.

Status and lifecycle terms

Preferred termAvoidContext
Statusstate (when referring to case lifecycle)Use "status" for case lifecycle: Open, On Hold, Closed. "In Review", "Escalated", etc. are sub-statuses.
Statestatus (when referring to evaluation runtime)Use "state" for evaluation runtime: evaluation_in_progress, evaluation_paused, evaluation_completed
Lifecycleflow, progressionUse "lifecycle" for the full sequence of state/status transitions
Pausedwaiting, on hold (for evaluations)Use "paused" for evaluation runtime. "On Hold" is a case status. Don't confuse with evaluation paused state.

Decision value formatting

Always format decision values as uppercase code when referring to the API field value:

CorrectAvoid
ACCEPTAccept, accepted, Accepted
REJECTReject, rejected, Rejected
REVIEWReview, review (when referring to the decision value)

RESUBMIT and CANCEL are Decision Rules step-level configuration values, not standard API decision values. Format them as code when referring to the step configuration.

In prose describing the concept (not the API value), use sentence case: "The reviewer accepted the case."


Workflow delivery terms

Preferred termDefinitionAvoid
Custom workflowA workflow built and managed by the customer in the Workflow EditorStandard workflow, manual workflow, API workflow
Hosted FlowA preconfigured workflow with a Socure-managed UIHosted workflow, managed workflow, Socure flow
Workflow EditorThe visual workflow builder in the RiskOS™ DashboardWorkflow Builder, Workflow Canvas, workflow designer

Enrichment and data terms

Preferred termAvoidWhen to use
Enrichment stepenrichment node, enrichment callReferring to the workflow step type
Data servicedata source, API, providerReferring to the external service an enrichment calls
Enrichment responseenrichment result, enrichment outputReferring to the data returned by an enrichment
data_enrichmentsenrichments array, enrichment dataReferring to the specific API response field (always use backticks)

Integration terms

Preferred termAvoidWhen to use
Evaluation APIRiskOS API, evaluation endpointReferring to POST /api/evaluation
Sandboxtest environment, staging, devReferring to the non-production RiskOS™ environment
Productionlive environment, prodReferring to the production RiskOS™ environment
Webhookcallback, notification, event pushReferring to RiskOS™ HTTPS POST notifications
SDK keyAPI key (when referring to client-side credentials)The client-side credential for mobile/web SDKs
API keysecret key, auth key, bearer tokenThe server-side credential for API authentication

Usage in different content types

Content typeTerminology registerExample
Conceptual (Core Concepts)Formal — use full canonical terms, define on first use"An evaluation is a single execution of a workflow."
TutorialPractical — use canonical terms without re-defining"Send a POST request to trigger an evaluation."
ReferencePrecise — use exact API field names in backticks"The decision field contains ACCEPT, REJECT, or REVIEW."
OperationalDirect — use canonical terms, no definitions needed"Check the evaluation status in the webhook payload."

Related concepts